last executing test programs: 14.646467986s ago: executing program 4 (id=738): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb}, 0x0}, 0x0) 11.691304679s ago: executing program 4 (id=746): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES8, @ANYBLOB="166fbcc53c0dacb7406602146a60102d93c1ecb858d9f04d7b19dea8506494c56ec2a5fd9f265cae6bb0d307fbd3d24e6ae3632742bfb8b842b2f686c61dcb629a22153c9470fcaa12bd7fb8e335726365b642a29b640d3a363c56cfe6683b4719653bb53ccba7a91264091a46be4df33ac607fb8b47dea0e6d95ae347ca30ac7e389e84ff82a362c8c5eee91b559b045757bcfa8270d1ce63d7882b46c890082e454e9a7bd995eaa9d4a09d68f0d4581d1a8365569f2f33db", @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x122) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0xda00) 10.595480204s ago: executing program 0 (id=750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000680)={0x20, 0x2, 0x1f, {0x1f, 0x11, "82a96f46aa4bee81908eec04bb4e84359a813f1dd4a6fc26b4f2dc14b5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.852780535s ago: executing program 2 (id=754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb}, 0x0}, 0x0) 8.903476699s ago: executing program 1 (id=755): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) unshare(0x40020000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8.879833681s ago: executing program 3 (id=756): socket(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) time(0xfffffffffffffffc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 7.698105312s ago: executing program 0 (id=757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000018c0)={0x81, 0x7fff, 0x403, {0x2, 0x7}, 0x1, 0x9}) 7.691172553s ago: executing program 3 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) io_setup(0xba, &(0x7f0000000340)) 7.486098947s ago: executing program 3 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="85000000610000005400000000000000950000000000000015c5d2d381407590995e979c8ab80e29de2978c8f52cc29c2bff0766e0614b449dba3c3e908576de010eb930ccc2"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) fsmount(r2, 0x1, 0x80) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x400000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfd14) 6.733696528s ago: executing program 0 (id=760): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(r4, r4) writev(r5, &(0x7f0000000400)=[{&(0x7f00000001c0)="d848aa11ee80a1e8f7d33041fc", 0xd}, {&(0x7f0000000240)="fe8ba6b8618d6af85d99dffda44fb2718ec16e2d6531c85f679c95", 0x1b}], 0x2) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.673886393s ago: executing program 4 (id=761): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00\f\x00+'], 0x34}}, 0x0) 6.301542738s ago: executing program 2 (id=762): socket$inet(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) 5.132497298s ago: executing program 2 (id=763): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x134, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0xf8, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x88, 0x4, [@m_simple={0x84, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x58, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a"}, {0xc}, {0xc}}}]}]}}]}, 0x134}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.872506446s ago: executing program 2 (id=764): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b155a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7", 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 4.682353889s ago: executing program 4 (id=765): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0xfffffcdd) syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0xfffffff2, 0x3, &(0x7f0000000400)={r3}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 4.681800369s ago: executing program 1 (id=766): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x456, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f00000023c0)='asymmetric\x00', &(0x7f0000002400)={'syz', 0x2}, &(0x7f0000002440)='rootmode', 0xfffffffffffffffc) 4.592443786s ago: executing program 2 (id=767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.339539503s ago: executing program 4 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.197986132s ago: executing program 0 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x3f, 0x0, 0x4}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 4.178618094s ago: executing program 3 (id=770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000018c0)={0x81, 0x7fff, 0x403, {0x2, 0x7}, 0x1, 0x9}) 4.075455971s ago: executing program 1 (id=771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000100001c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="000bc7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.025797284s ago: executing program 0 (id=772): r0 = socket$inet(0x2, 0x3, 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mkdir(&(0x7f0000000340)='./file0\x00', 0x136) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xffffff22, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peek(0x2, r4, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000000000000200000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) poll(0x0, 0x0, 0x0) readlinkat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/15, 0xf) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='affs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200, 0x0) lseek(r8, 0x100, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) r9 = socket$inet(0x2, 0x6000000000000003, 0x6) r10 = dup3(r0, r9, 0x0) setsockopt$inet_int(r10, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 1.742648841s ago: executing program 4 (id=773): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.718274322s ago: executing program 0 (id=774): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x810801, &(0x7f0000000000)=ANY=[], 0x4, 0x232, &(0x7f0000000480)="$eJzslbFrFEEUxr+Z3dtcogQttLA5i4ARzN7unkoawdgLQiJqeZgxnNnkwt0VuQNJggg21uI/YpHKwk4rawsVBAtTCoLgyMzO3s56u0mOHDa+H9zeN7Pz3rw3+/YtCIL4b/ny+cenF7cWV64AOI05TJn5b062hpv/ZwA+vnIqZvh2c/bJvtE307UMgJSZrXvE/h6AN0sOsJu4ldK2BuaMzxVwrRV3wXHZ6Htg8NNYZWYtwPDATD/eksNs2tNGxII9bMerj1qxCNQl5K1YREo1pCGN/2CPYRVA1WzBrPi6/cF6MwY6iYhFKioy3Wfk1rgid2A7+fPT8S1x3LCOQD2v+8+f7qmxb+YD6/xCcIRGN8CwbPQipuD7fs0MRWjlf8HN/DvJY0vYLYhbHVBhJtWTHcS44uxCwS1V4YebT8dCZbuepnjcTaslt37LieYlpdxRwsuVoL0mLdBjOVSpnjgwtdv4Vrw2auUd4UcYcaqsxopF+k6rGdbtD3DGWsPskjh/sP9u1M/Xf1a0kxe6cf31lF+qsvkwE8e3C63O5WYulrwy3mEvSNafmAtcsvqTa30V6r2NrXq3P1hobTTXxJrYjKLG9eBqEFyL6ro3J1eU4aKq+9OM5b9SstZjHrabvV4n3AZ6nXA4jpKr1XGXX7e/axuu+x/H/K/so6DTTj+ULL8HMz+u/5Wad0qDJwiCIAiCIAiCIAiCIAiCGIefNTC8nx2OZTFudEff/hMAAP//uVBcmw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x10400, 0x0) fadvise64(r0, 0xfcff, 0x0, 0x3) 1.682378075s ago: executing program 3 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa000000a}) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r6, r6, 0x0, 0x100000000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.159291301s ago: executing program 2 (id=776): openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xc0, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x18}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 300.809359ms ago: executing program 3 (id=777): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[0x0]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) unshare(0x40020000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 237.643604ms ago: executing program 1 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 129.076301ms ago: executing program 1 (id=779): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r2, r1) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "88a351", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 0s ago: executing program 1 (id=780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): [ 139.256286][ T4544] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 139.291498][ T4544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.300249][ T4544] usb 2-1: Product: syz [ 139.310374][ T4544] usb 2-1: Manufacturer: syz [ 139.315030][ T4544] usb 2-1: SerialNumber: syz [ 139.335140][ T4544] usb 2-1: config 0 descriptor?? [ 139.387232][ T4544] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 139.476073][ T3749] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.620999][ T4544] scsi host1: usb-storage 2-1:0.0 [ 139.650883][ T4544] usb 2-1: USB disconnect, device number 3 [ 139.686144][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 139.716045][ T3749] usb 1-1: Using ep0 maxpacket: 8 [ 139.836300][ T3749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.856272][ T3749] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.036306][ T3749] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 140.055626][ T3749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.080387][ T3749] usb 1-1: Product: syz [ 140.084611][ T3749] usb 1-1: Manufacturer: syz [ 140.099080][ T4992] loop3: detected capacity change from 0 to 512 [ 140.111712][ T3749] usb 1-1: SerialNumber: syz [ 140.133720][ T4992] EXT4-fs: Ignoring removed bh option [ 140.144557][ T3749] usb 1-1: config 0 descriptor?? [ 140.172369][ T4992] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.340: inline data xattr refers to an external xattr inode [ 140.226458][ T4992] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.340: couldn't read orphan inode 12 (err -117) [ 140.246182][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.277046][ T3749] usb 1-1: bad CDC descriptors [ 140.290131][ T3749] usb 1-1: bad CDC descriptors [ 140.308230][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.645649][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 140.726115][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.739215][ T4989] loop2: detected capacity change from 0 to 40427 [ 140.754947][ T4989] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 140.762900][ T4989] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.777216][ T4989] F2FS-fs (loop2): invalid crc value [ 140.788277][ T4989] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.836225][ T3696] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.873292][ T4989] F2FS-fs (loop2): Start checkpoint disabled! [ 141.011004][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 141.022321][ T4989] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 141.054772][ T4989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 141.176822][ T5010] loop3: detected capacity change from 0 to 1024 [ 141.190138][ T5010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.206562][ T3696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.286207][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 141.412648][ T3696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.423256][ T3696] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 141.432702][ T3696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.481626][ T3696] usb 2-1: config 0 descriptor?? [ 141.483548][ T14] usb 1-1: USB disconnect, device number 8 [ 141.766179][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 142.326327][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 142.344822][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 142.425613][ T27] audit: type=1804 audit(1726414648.911:64): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.343" name="/newroot/22/file2/file0" dev="loop2" ino=10 res=1 errno=0 [ 142.690613][ T27] audit: type=1804 audit(1726414648.911:65): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.343" name="/newroot/22/file2/file0" dev="loop2" ino=10 res=1 errno=0 [ 142.806110][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.366097][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.525051][ T3786] kworker/u4:8: attempt to access beyond end of device [ 143.525051][ T3786] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 143.840499][ T5034] netlink: 'syz.4.355': attribute type 2 has an invalid length. [ 143.848902][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.858541][ T3696] usbhid 2-1:0.0: can't add hid device: -71 [ 143.867482][ T3696] usbhid: probe of 2-1:0.0 failed with error -71 [ 143.886865][ T3696] usb 2-1: USB disconnect, device number 4 [ 144.406195][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.816079][ T27] audit: type=1326 audit(1726414651.291:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.4.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38cc37def9 code=0x0 [ 144.888459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.991984][ T5045] loop0: detected capacity change from 0 to 512 [ 145.092409][ T5045] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 145.197008][ T5045] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 145.256045][ T5045] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.358: Failed to acquire dquot type 0 [ 145.277851][ T5045] EXT4-fs (loop0): Remounting filesystem read-only [ 145.284747][ T5045] EXT4-fs (loop0): 1 orphan inode deleted [ 145.323783][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.428373][ T5045] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038 (0x7fffffff) [ 145.446095][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 145.926324][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 145.973619][ T5045] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 146.243960][ T5045] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 146.276371][ T5045] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.358: Failed to acquire dquot type 0 [ 146.329649][ T5045] EXT4-fs (loop0): Remounting filesystem read-only [ 146.486091][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.616103][ T3694] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.623403][ T5039] loop1: detected capacity change from 0 to 40427 [ 146.647747][ T5039] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 146.656889][ T5039] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 146.738730][ T5039] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.896118][ T3694] usb 1-1: Using ep0 maxpacket: 8 [ 146.925047][ T5039] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 146.938040][ T5039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.966198][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.036451][ T3694] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 147.065779][ T3694] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 147.102119][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.179274][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.526096][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.959010][ T5071] loop3: detected capacity change from 0 to 4096 [ 147.986524][ T3694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.999881][ T3694] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 148.006155][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 148.009002][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.029078][ T3694] usb 1-1: config 0 descriptor?? [ 148.050911][ T3694] usb 1-1: can't set config #0, error -71 [ 148.060887][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 148.067635][ T3694] usb 1-1: USB disconnect, device number 9 [ 148.126213][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.208212][ T27] audit: type=1804 audit(1726414654.701:67): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.362" name="/newroot/125/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 148.566110][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 148.612982][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 149.046100][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 149.116241][ T3725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.496508][ T3725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.606133][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 149.696277][ T3749] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.946104][ T3749] usb 3-1: Using ep0 maxpacket: 16 [ 150.027249][ T3725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.037147][ T3725] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 150.046253][ T3725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.060229][ T3725] usb 4-1: config 0 descriptor?? [ 150.066541][ T3749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.086107][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 150.100690][ T3749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.132991][ T3749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.160001][ T3749] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.179859][ T3749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.209545][ T3749] usb 3-1: config 0 descriptor?? [ 150.558926][ T3725] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x1 [ 150.599585][ T3725] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 150.645552][ T3725] logitech-hidpp-device 0003:046D:C086.0002: item fetching failed at offset 4/5 [ 150.647169][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 150.672857][ T3725] logitech-hidpp-device 0003:046D:C086.0002: hidpp_probe:parse failed [ 150.690128][ T3725] logitech-hidpp-device: probe of 0003:046D:C086.0002 failed with error -22 [ 151.126155][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 151.358885][ T3749] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 151.526596][ T3749] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 151.543173][ T3725] usb 4-1: USB disconnect, device number 2 [ 151.628878][ T3749] usb 3-1: USB disconnect, device number 6 [ 151.686648][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.166121][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.492105][ T5113] tipc: Started in network mode [ 152.497207][ T5113] tipc: Node identity f7, cluster identity 4711 [ 152.503572][ T5113] tipc: Node number set to 247 [ 152.726122][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.206696][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.401403][ T5124] loop1: detected capacity change from 0 to 512 [ 153.451545][ T5124] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 153.495806][ T5124] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.380: invalid indirect mapped block 1 (level 1) [ 153.578068][ T5124] EXT4-fs (loop1): 1 truncate cleaned up [ 153.586258][ T5124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.766095][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 154.246149][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 154.806087][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.286222][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.846103][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.957231][ T5124] 9pnet_fd: Insufficient options for proto=fd [ 156.041926][ T5152] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.086040][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.086241][ T5152] tipc: Enabled bearer , priority 10 [ 156.133875][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.145409][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.157054][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.164908][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.176107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.184529][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.192309][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.326178][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.383393][ T5159] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.391'. [ 156.446122][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.675450][ T5153] chnl_net:caif_netlink_parms(): no params data found [ 156.879833][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.887125][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.908669][ T5153] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.948014][ T5153] device bridge_slave_0 entered promiscuous mode [ 156.976052][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.126046][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.147272][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.160449][ T5153] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.187644][ T5153] device bridge_slave_1 entered promiscuous mode [ 157.267227][ T5153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.366174][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.400457][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.459070][ T5153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.540811][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.551794][ T5174] loop3: detected capacity change from 0 to 256 [ 157.644600][ T5153] team0: Port device team_slave_0 added [ 157.671576][ T5153] team0: Port device team_slave_1 added [ 157.855878][ T4400] EXT4-fs (loop1): unmounting filesystem. [ 157.866590][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.247225][ T47] Bluetooth: hci5: command tx timeout [ 158.514777][ T5166] loop0: detected capacity change from 0 to 40427 [ 158.538056][ T5166] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 158.569092][ T5166] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 158.704623][ T5180] loop1: detected capacity change from 0 to 512 [ 158.715360][ T5166] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.763895][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.849405][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.866312][ T5153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.873297][ T5153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.920433][ T5166] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 158.939671][ T5166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.947772][ T5180] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 158.958926][ T5153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.975477][ T5153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.001586][ T5153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.105009][ T5153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.310018][ T5153] device hsr_slave_0 entered promiscuous mode [ 159.319690][ T5153] device hsr_slave_1 entered promiscuous mode [ 159.320520][ T5153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.320608][ T5153] Cannot create hsr debugfs directory [ 160.135539][ T5211] loop0: detected capacity change from 0 to 512 [ 160.146310][ T5203] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.396: Directory hole found for htree leaf block 0 [ 160.241887][ T5211] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 160.326241][ T3662] Bluetooth: hci5: command tx timeout [ 160.373870][ T5211] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.399: iget: bad i_size value: -67835469387268086 [ 160.413741][ T5211] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.399: couldn't read orphan inode 15 (err -117) [ 160.453867][ T5211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.536224][ T5211] ext2 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 160.625298][ T5211] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.399: Directory hole found for htree leaf block 0 [ 160.757069][ T5219] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.399: Directory hole found for htree leaf block 0 [ 160.815009][ T5153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.952468][ T5211] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.399: Directory hole found for htree leaf block 0 [ 161.046083][ C1] net_ratelimit: 12 callbacks suppressed [ 161.046111][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.059541][ T5153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.096739][ T5153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.136070][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.154995][ T5220] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.399: Directory hole found for htree leaf block 0 [ 161.259294][ T5153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.735829][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.743492][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.744948][ T5153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.810166][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 161.936909][ T9] device hsr_slave_0 left promiscuous mode [ 161.943981][ T9] device hsr_slave_1 left promiscuous mode [ 161.967109][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.995914][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.031457][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.061754][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.082488][ T9] device bridge_slave_1 left promiscuous mode [ 162.086115][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.109500][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.131541][ T9] device bridge_slave_0 left promiscuous mode [ 162.144330][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.166092][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.245436][ T9] device veth1_macvtap left promiscuous mode [ 162.268863][ T9] device veth0_macvtap left promiscuous mode [ 162.288690][ T9] device veth1_vlan left promiscuous mode [ 162.309070][ T9] device veth0_vlan left promiscuous mode [ 162.406116][ T3662] Bluetooth: hci5: command tx timeout [ 162.487193][ T4400] EXT4-fs (loop1): unmounting filesystem. [ 162.644029][ T5244] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.405'. [ 162.806369][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.813515][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.833265][ T5247] loop1: detected capacity change from 0 to 512 [ 162.945589][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.975450][ T5247] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 163.126094][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.206128][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.233176][ T9] team0 (unregistering): Port device team_slave_1 removed [ 164.460887][ T9] team0 (unregistering): Port device team_slave_0 removed [ 164.486148][ T3662] Bluetooth: hci5: command tx timeout [ 164.530367][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.945760][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.696182][ T9] bond0 (unregistering): Released all slaves [ 165.765919][ T5230] tipc: Enabling of bearer rejected, already enabled [ 165.921806][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.930191][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.939670][ T4400] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 165.974170][ T5153] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.000641][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.056967][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.156265][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.163473][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.246076][ C1] net_ratelimit: 10 callbacks suppressed [ 166.246098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.326036][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.330717][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.956986][ T5153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.967624][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.967727][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.004348][ T5153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.022130][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.098206][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.138367][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.140005][ T5280] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.415'. [ 167.145492][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.186711][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.197095][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.220073][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.238893][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.257210][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.283516][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.286234][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.299816][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.356539][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.366077][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.414022][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.434610][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.471123][ T5282] loop3: detected capacity change from 0 to 512 [ 167.473506][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.496125][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.692749][ T5282] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 167.712187][ T5282] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 167.778204][ T5282] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.416: Failed to acquire dquot type 0 [ 167.784000][ T5275] loop2: detected capacity change from 0 to 40427 [ 167.801418][ T5275] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 167.810651][ T5287] loop0: detected capacity change from 0 to 256 [ 167.822651][ T5275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 167.875590][ T5282] EXT4-fs (loop3): Remounting filesystem read-only [ 167.894859][ T5275] F2FS-fs (loop2): invalid crc value [ 167.910083][ T5282] EXT4-fs (loop3): 1 orphan inode deleted [ 167.915888][ T5282] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.965682][ T5275] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.986127][ T5282] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038 (0x7fffffff) [ 168.006046][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.013274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.150963][ T5275] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.187100][ T5275] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.326144][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.406069][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.525748][ T5296] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 168.537160][ T5296] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 168.547230][ T5296] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.416: Failed to acquire dquot type 0 [ 169.035241][ T5298] syz.2.413: attempt to access beyond end of device [ 169.035241][ T5298] loop2: rw=2049, sector=77824, nr_sectors = 880 limit=40427 [ 169.635703][ T5296] EXT4-fs (loop3): Remounting filesystem read-only [ 169.861974][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.873998][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.911749][ T5153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.962647][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 169.971057][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 170.016722][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 170.791358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.815026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.866680][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.879495][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.898906][ T5153] device veth0_vlan entered promiscuous mode [ 170.909749][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.932696][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.964475][ T5153] device veth1_vlan entered promiscuous mode [ 171.071764][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.083298][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.208541][ T5153] device veth0_macvtap entered promiscuous mode [ 171.279134][ T5153] device veth1_macvtap entered promiscuous mode [ 171.429458][ T5318] loop0: detected capacity change from 0 to 256 [ 171.686196][ C1] net_ratelimit: 8 callbacks suppressed [ 171.686216][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.698985][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.706109][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.988427][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.039281][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.085668][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.089604][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.124426][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.143250][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.154209][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.164365][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.175013][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.205391][ T5153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.243775][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.271577][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.300496][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.313315][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.324954][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.337470][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.357646][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.378612][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.399636][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.426103][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.442804][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.457137][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.602267][ T5153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.655564][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.665373][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.679719][ T5153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.701243][ T5153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.726156][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.733257][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.740434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.126177][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.456074][ T5153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.465505][ T5153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.473016][ T5334] loop2: detected capacity change from 0 to 128 [ 173.767712][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.774855][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.821532][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.879656][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.912150][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.946449][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.974581][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.017356][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.310257][ T5341] loop4: detected capacity change from 0 to 1024 [ 174.411449][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.577505][ T5351] EXT4-fs (loop4): shut down requested (0) [ 174.666847][ T34] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 174.695054][ T34] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 492 with error 28 [ 174.727927][ T34] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.727927][ T34] [ 174.758855][ T34] EXT4-fs (loop4): Total free blocks count 0 [ 174.764999][ T34] EXT4-fs (loop4): Free/Dirty block details [ 174.785193][ T34] EXT4-fs (loop4): free_blocks=68451041280 [ 174.801772][ T34] EXT4-fs (loop4): dirty_blocks=496 [ 174.811896][ T34] EXT4-fs (loop4): Block reservation details [ 174.826034][ T34] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 174.858981][ T5341] 9pnet_fd: Insufficient options for proto=fd [ 174.989938][ T5356] tipc: Enabling of bearer rejected, already enabled [ 176.886411][ C1] net_ratelimit: 10 callbacks suppressed [ 176.886436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 176.899370][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 176.906467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.286134][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.448926][ T5383] loop2: detected capacity change from 0 to 1024 [ 177.540758][ T5385] tipc: Enabling of bearer rejected, already enabled [ 177.587249][ T5383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.631320][ T4400] EXT4-fs (loop1): unmounting filesystem. [ 177.637716][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.647152][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.656120][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.670432][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.686709][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.694055][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.772890][ T5392] EXT4-fs (loop2): shut down requested (0) [ 177.926114][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.933382][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.940576][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.962664][ T4844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 178.033940][ T4844] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 178.071394][ T4844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.071394][ T4844] [ 178.118879][ T4844] EXT4-fs (loop2): Total free blocks count 0 [ 178.155772][ T4844] EXT4-fs (loop2): Free/Dirty block details [ 178.195073][ T4844] EXT4-fs (loop2): free_blocks=68451041280 [ 178.205855][ T4844] EXT4-fs (loop2): dirty_blocks=2544 [ 178.211506][ T4844] EXT4-fs (loop2): Block reservation details [ 178.218489][ T4844] EXT4-fs (loop2): i_reserved_data_blocks=159 [ 178.319050][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 178.326164][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.525793][ T5409] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.449'. [ 178.569189][ T5260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.592735][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.603144][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.621293][ T5390] device bridge_slave_0 entered promiscuous mode [ 178.644126][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.662323][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.675250][ T5390] device bridge_slave_1 entered promiscuous mode [ 178.727694][ T5260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.757895][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.770406][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.918588][ T5390] team0: Port device team_slave_0 added [ 178.966090][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.973331][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.533783][ T5260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.688748][ T5390] team0: Port device team_slave_1 added [ 179.766308][ T47] Bluetooth: hci1: command tx timeout [ 179.828856][ T5260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.865322][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.883462][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.920154][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.987502][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.994671][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.072863][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.078821][ T5433] loop3: detected capacity change from 0 to 1024 [ 180.096513][ T5429] tipc: Enabling of bearer rejected, already enabled [ 180.291033][ T5390] device hsr_slave_0 entered promiscuous mode [ 180.311222][ T5433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.324995][ T5390] device hsr_slave_1 entered promiscuous mode [ 180.361981][ T5390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.382399][ T5390] Cannot create hsr debugfs directory [ 180.431248][ T5445] EXT4-fs (loop3): shut down requested (0) [ 180.584438][ T3688] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 180.608224][ T3688] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 428 with error 28 [ 180.621236][ T5260] tipc: Left network mode [ 180.675575][ T3688] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.675575][ T3688] [ 180.746149][ T3688] EXT4-fs (loop3): Total free blocks count 0 [ 180.752261][ T3688] EXT4-fs (loop3): Free/Dirty block details [ 180.782461][ T3688] EXT4-fs (loop3): free_blocks=68451041280 [ 180.790091][ T3688] EXT4-fs (loop3): dirty_blocks=432 [ 180.795596][ T3688] EXT4-fs (loop3): Block reservation details [ 180.853641][ T3688] EXT4-fs (loop3): i_reserved_data_blocks=27 [ 181.175339][ T5459] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.464'. [ 181.856397][ T47] Bluetooth: hci1: command tx timeout [ 181.899677][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 182.086174][ C1] net_ratelimit: 10 callbacks suppressed [ 182.086195][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.099009][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.106169][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.154875][ T5474] device hsr_slave_1 left promiscuous mode [ 182.185361][ T5479] tipc: Started in network mode [ 182.193221][ T5479] tipc: Node identity ac1414aa, cluster identity 4711 [ 182.202599][ T5479] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.209961][ T5479] tipc: Enabled bearer , priority 10 [ 182.346222][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.484254][ T5490] loop0: detected capacity change from 0 to 1024 [ 182.491203][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.587568][ T5490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.626088][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.766077][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.777801][ T5500] EXT4-fs (loop0): shut down requested (0) [ 182.806233][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.844557][ T5037] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 182.898404][ T5037] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 336 with error 28 [ 182.916085][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.941042][ T5037] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.941042][ T5037] [ 182.971345][ T5037] EXT4-fs (loop0): Total free blocks count 0 [ 182.999624][ T5390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.011034][ T5037] EXT4-fs (loop0): Free/Dirty block details [ 183.031915][ T5037] EXT4-fs (loop0): free_blocks=68451041280 [ 183.054516][ T5037] EXT4-fs (loop0): dirty_blocks=336 [ 183.076035][ T5037] EXT4-fs (loop0): Block reservation details [ 183.099016][ T5260] device hsr_slave_0 left promiscuous mode [ 183.099069][ T5037] EXT4-fs (loop0): i_reserved_data_blocks=21 [ 183.116647][ T5260] device hsr_slave_1 left promiscuous mode [ 183.148037][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.155715][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.185301][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.196044][ T14] tipc: Node number set to 2886997162 [ 183.216060][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.236626][ T5260] device bridge_slave_1 left promiscuous mode [ 183.246358][ T5260] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.269976][ T5260] device bridge_slave_0 left promiscuous mode [ 183.283007][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.463342][ T5260] device veth1_macvtap left promiscuous mode [ 183.492217][ T5260] device veth0_macvtap left promiscuous mode [ 183.500029][ T5260] device veth1_vlan left promiscuous mode [ 183.505907][ T5260] device veth0_vlan left promiscuous mode [ 183.938560][ T47] Bluetooth: hci1: command tx timeout [ 184.369753][ T5260] team0 (unregistering): Port device team_slave_1 removed [ 184.412185][ T5260] team0 (unregistering): Port device team_slave_0 removed [ 184.455573][ T5260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.505765][ T5260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.964212][ T5260] bond0 (unregistering): Released all slaves [ 185.051119][ T5390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.086560][ T5390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.146489][ T5390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.326378][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 185.531682][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.539875][ T5541] loop3: detected capacity change from 0 to 1024 [ 185.594773][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.607030][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.640811][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.682757][ T5541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.730836][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.731594][ T5541] EXT4-fs (loop3): shut down requested (0) [ 185.768444][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.777161][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.784285][ T4863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.793075][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.811569][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.824751][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.831949][ T4863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.843264][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 185.849421][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.850836][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.934883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.950902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.964013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.979708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.994169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.006088][ T3660] Bluetooth: hci0: command 0x0406 tx timeout [ 186.016226][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 186.016232][ T3659] Bluetooth: hci1: command tx timeout [ 186.040950][ T5390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.053465][ T5390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.072730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.114755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.133832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.143118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.152546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.191693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.523697][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.535625][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.567654][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.656967][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.685527][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.732411][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.749034][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.770210][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.786769][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.815291][ T5390] device veth0_vlan entered promiscuous mode [ 186.872581][ T5390] device veth1_vlan entered promiscuous mode [ 186.961374][ T5573] tipc: Enabling of bearer rejected, already enabled [ 187.002315][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.017461][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.037594][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.055087][ T5576] loop3: detected capacity change from 0 to 1024 [ 187.062455][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.086830][ T5390] device veth0_macvtap entered promiscuous mode [ 187.097863][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 187.127357][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.150435][ T5576] EXT4-fs (loop3): shut down requested (0) [ 187.286324][ C0] net_ratelimit: 22 callbacks suppressed [ 187.286346][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.286840][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.306244][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.313341][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.375209][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 187.407252][ T5577] device hsr_slave_1 left promiscuous mode [ 187.417044][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.435684][ T5390] device veth1_macvtap entered promiscuous mode [ 187.571416][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.585450][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.641732][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.662586][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.693213][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.716945][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.742266][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.756824][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.773757][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.795213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.824737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.864010][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.909704][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.945574][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.970885][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.993365][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.006179][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.034094][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.062012][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.093023][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.122322][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.147174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.176471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.199743][ T5390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.219366][ T5390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.262127][ T5390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.272809][ T5390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.326101][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.326103][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.326270][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.347401][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.666530][ T5260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.674769][ T5260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.709364][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.732581][ T5037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.752192][ T5037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.787135][ T5614] tipc: Enabling of bearer rejected, already enabled [ 188.805177][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.953155][ T5618] loop4: detected capacity change from 0 to 1024 [ 189.011508][ T5618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 189.058099][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.075597][ T5618] EXT4-fs (loop4): shut down requested (0) [ 189.194078][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 189.195076][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 189.535147][ T5642] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.521'. [ 189.912733][ T5652] tipc: Started in network mode [ 189.917968][ T5652] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.925501][ T5652] tipc: Enabled bearer , priority 10 [ 190.765955][ C1] sched: RT throttling activated [ 191.091369][ T3725] tipc: Node number set to 2886997162 [ 191.135920][ T5663] loop3: detected capacity change from 0 to 1024 [ 191.207813][ T5663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.231728][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 191.245156][ T5663] EXT4-fs (loop3): shut down requested (0) [ 191.510245][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 192.877859][ C0] net_ratelimit: 23 callbacks suppressed [ 192.877884][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.906205][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.913348][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.920561][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.966153][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.216061][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.926095][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.933368][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.940534][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 194.102768][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 194.141012][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 194.155225][ T5709] loop1: detected capacity change from 0 to 512 [ 194.173306][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.182103][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.274455][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.338717][ T5709] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 194.517593][ T5717] loop0: detected capacity change from 0 to 1024 [ 194.629687][ T5717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.033555][ T5717] EXT4-fs (loop0): shut down requested (0) [ 195.414116][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 195.614021][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 196.468639][ T5748] loop3: detected capacity change from 0 to 1024 [ 196.496123][ T5748] EXT4-fs: inline encryption not supported [ 196.502440][ T5748] EXT4-fs: Ignoring removed orlov option [ 196.542193][ T5748] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.583983][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.622001][ T5748] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 197.606612][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 197.805751][ T5761] tipc: Enabling of bearer rejected, already enabled [ 198.086069][ C1] net_ratelimit: 20 callbacks suppressed [ 198.086088][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.098978][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.106168][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.566043][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.573387][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.580641][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.662183][ T5782] syz.0.569 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.012348][ T5792] loop4: detected capacity change from 0 to 512 [ 199.055810][ T5792] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 199.079863][ T5792] EXT4-fs (loop4): 1 truncate cleaned up [ 199.092348][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.093957][ T5766] loop2: detected capacity change from 0 to 40427 [ 199.126096][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.133214][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.133527][ T5792] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.573: Directory hole found for htree leaf block 0 [ 199.140358][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.182643][ T5766] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 199.210369][ T5766] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 199.241934][ T5766] F2FS-fs (loop2): invalid crc value [ 199.264605][ T5766] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.382797][ T5766] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.394077][ T5766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.606097][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 200.169869][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 200.186780][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 200.231467][ T5807] tipc: Enabled bearer , priority 10 [ 200.465271][ T5814] loop1: detected capacity change from 0 to 256 [ 200.551708][ T5814] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 201.306147][ T27] audit: type=1800 audit(1726414707.721:68): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.579" name="bus" dev="loop1" ino=1048663 res=0 errno=0 [ 201.430294][ T5821] loop4: detected capacity change from 0 to 512 [ 201.442039][ T5821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.547300][ T5821] EXT4-fs (loop4): 1 truncate cleaned up [ 201.553062][ T5821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.916736][ T5829] overlayfs: missing 'lowerdir' [ 202.588354][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 202.901601][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 202.977496][ T5846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.588'. [ 203.139673][ T5848] tipc: Enabling of bearer rejected, already enabled [ 203.286095][ C1] net_ratelimit: 24 callbacks suppressed [ 203.286115][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.286242][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.291906][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.312976][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.461692][ T5854] loop4: detected capacity change from 0 to 512 [ 203.521459][ T5854] EXT4-fs (loop4): 1 truncate cleaned up [ 203.572168][ T27] audit: type=1326 audit(1726414710.061:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba557def9 code=0x7ffc0000 [ 203.601144][ T5854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.613890][ T27] audit: type=1326 audit(1726414710.091:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ba557def9 code=0x7ffc0000 [ 203.644272][ T27] audit: type=1326 audit(1726414710.091:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba557def9 code=0x7ffc0000 [ 203.732361][ T27] audit: type=1326 audit(1726414710.091:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f4ba557def9 code=0x7ffc0000 [ 203.766373][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.773554][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.780753][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.830784][ T27] audit: type=1326 audit(1726414710.091:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba557def9 code=0x7ffc0000 [ 203.854175][ T5862] loop2: detected capacity change from 0 to 512 [ 203.937533][ T5862] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 203.986347][ T5862] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 204.039664][ T5862] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.596: Failed to acquire dquot type 0 [ 204.111863][ T5862] EXT4-fs (loop2): Remounting filesystem read-only [ 204.136144][ T5862] EXT4-fs (loop2): 1 orphan inode deleted [ 204.142090][ T5862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.206147][ T5862] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 204.326081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.326141][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.340207][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 205.407662][ T4348] EXT4-fs (loop2): unmounting filesystem. [ 205.617952][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 205.706169][ T3694] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.752559][ T5878] tipc: Enabling of bearer rejected, already enabled [ 205.814823][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 205.961769][ T3694] usb 1-1: Using ep0 maxpacket: 8 [ 206.096978][ T3694] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 206.136182][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.187146][ T3694] usb 1-1: config 0 descriptor?? [ 206.285700][ T5891] loop2: detected capacity change from 0 to 512 [ 206.329668][ T5891] EXT4-fs (loop2): 1 truncate cleaned up [ 206.336588][ T5891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.436178][ T3694] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 206.456249][ T3694] asix: probe of 1-1:0.0 failed with error -32 [ 207.161263][ T5908] loop1: detected capacity change from 0 to 512 [ 207.204744][ T4348] EXT4-fs (loop2): unmounting filesystem. [ 207.222359][ T5908] EXT4-fs: Mount option(s) incompatible with ext2 [ 207.341973][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 207.372294][ T5912] loop2: detected capacity change from 0 to 1024 [ 207.397158][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.433803][ T5906] loop4: detected capacity change from 0 to 40427 [ 207.444184][ T5908] device bridge_slave_0 left promiscuous mode [ 207.457598][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.503698][ T5906] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 207.525142][ T5906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 207.624505][ T5912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.675044][ T5906] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.804214][ T5906] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 207.814256][ T5906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 207.912287][ T7] usb 1-1: USB disconnect, device number 10 [ 208.035714][ T5260] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 208.067846][ T5260] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 760 with error 28 [ 208.646104][ C1] net_ratelimit: 21 callbacks suppressed [ 208.646127][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.659036][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.666156][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.817112][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 208.817959][ T5260] EXT4-fs (loop2): This should not happen!! Data will be lost [ 208.817959][ T5260] [ 208.828259][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.844317][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.851493][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.858679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.877913][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.877943][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.890853][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.898847][ T5260] EXT4-fs (loop2): Total free blocks count 0 [ 208.898873][ T5260] EXT4-fs (loop2): Free/Dirty block details [ 208.898891][ T5260] EXT4-fs (loop2): free_blocks=68451041280 [ 208.898911][ T5260] EXT4-fs (loop2): dirty_blocks=768 [ 208.898927][ T5260] EXT4-fs (loop2): Block reservation details [ 208.940222][ T5260] EXT4-fs (loop2): i_reserved_data_blocks=48 [ 208.966269][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.966302][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 208.970312][ T4348] EXT4-fs (loop2): unmounting filesystem. [ 209.006268][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 209.006298][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 209.686104][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.700853][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.708205][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 210.096330][ T5949] loop2: detected capacity change from 0 to 512 [ 210.461762][ T5949] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.471477][ T5949] ext4 filesystem being mounted at /77/bus supports timestamps until 2038 (0x7fffffff) [ 210.823528][ T4348] EXT4-fs (loop2): unmounting filesystem. [ 211.879166][ T5971] tipc: Enabling of bearer rejected, already enabled [ 213.697437][ T6004] tipc: Enabling of bearer rejected, already enabled [ 213.846129][ C1] net_ratelimit: 25 callbacks suppressed [ 213.846155][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.859213][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.867464][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.226089][ T27] audit: type=1326 audit(1726414720.141:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.311711][ T27] audit: type=1326 audit(1726414720.141:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.364159][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.371437][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.378582][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.385681][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.410060][ T27] audit: type=1326 audit(1726414720.141:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff600b7c890 code=0x7ffc0000 [ 214.435876][ T27] audit: type=1326 audit(1726414720.141:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff600b7f727 code=0x7ffc0000 [ 214.484931][ T6009] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.640'. [ 214.548812][ T27] audit: type=1326 audit(1726414720.141:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.717147][ T27] audit: type=1326 audit(1726414720.141:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff600b7f727 code=0x7ffc0000 [ 214.740649][ T27] audit: type=1326 audit(1726414720.141:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff600b7cb8a code=0x7ffc0000 [ 214.772508][ T27] audit: type=1326 audit(1726414720.151:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.823085][ T27] audit: type=1326 audit(1726414720.151:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.866033][ T27] audit: type=1326 audit(1726414720.151:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff600b7def9 code=0x7ffc0000 [ 214.888533][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.888647][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.888743][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 215.683826][ T6025] loop3: detected capacity change from 0 to 512 [ 215.783146][ T6025] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 215.832648][ T6031] loop0: detected capacity change from 0 to 256 [ 215.839501][ T6025] EXT4-fs (loop3): 1 truncate cleaned up [ 215.845200][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.899971][ T6033] tipc: Enabling of bearer rejected, already enabled [ 215.922146][ T6031] exfat: Unknown parameter '' [ 215.967719][ T6025] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.647: Directory hole found for htree leaf block 0 [ 216.738432][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 219.046073][ C1] net_ratelimit: 27 callbacks suppressed [ 219.046094][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.059011][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.066148][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.526069][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.606112][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.613289][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.620448][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.086096][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.093272][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.100534][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.486369][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 221.596046][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 222.011043][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.158021][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.210466][ T7] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 222.240876][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.251760][ T7] usb 4-1: config 0 descriptor?? [ 222.750587][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.772515][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.804801][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.845142][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.877653][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.909684][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 222.963983][ T7] playstation 0003:054C:0CE6.0004: unknown main item tag 0x0 [ 223.042623][ T7] playstation 0003:054C:0CE6.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 223.095235][ T3659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.104679][ T3659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.141138][ T3659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.151647][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.159731][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.169755][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.218717][ T7] playstation 0003:054C:0CE6.0004: Invalid byte count transferred, expected 20 got 0 [ 223.270718][ T7] playstation 0003:054C:0CE6.0004: Failed to retrieve DualSense pairing info: -22 [ 223.341280][ T7] playstation 0003:054C:0CE6.0004: Failed to get MAC address from DualSense [ 223.391237][ T7] playstation 0003:054C:0CE6.0004: Failed to create dualsense. [ 223.517397][ T7] playstation: probe of 0003:054C:0CE6.0004 failed with error -22 [ 223.558835][ T7] usb 4-1: USB disconnect, device number 3 [ 223.782675][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 224.144780][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.182897][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.204277][ T6102] device bridge_slave_0 entered promiscuous mode [ 224.234885][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.246188][ C1] net_ratelimit: 25 callbacks suppressed [ 224.246207][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.259162][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.266476][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.288493][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.348246][ T6102] device bridge_slave_1 entered promiscuous mode [ 224.419182][ T6124] ptrace attach of "./syz-executor exec"[3648] was attempted by "./syz-executor exec"[6124] [ 224.442240][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.489747][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.591205][ T6102] team0: Port device team_slave_0 added [ 224.650635][ T4813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.684247][ T6102] team0: Port device team_slave_1 added [ 224.706164][ T4547] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 224.726074][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.794620][ T6114] loop4: detected capacity change from 0 to 40427 [ 224.806063][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.813407][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.820578][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.823056][ T6130] loop1: detected capacity change from 0 to 128 [ 224.846619][ T6114] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 224.856177][ T6114] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 224.906029][ T4547] usb 4-1: device descriptor read/64, error -71 [ 224.915182][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.926066][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.932908][ T6114] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.977639][ T6126] ptrace attach of "./syz-executor exec"[3643] was attempted by "./syz-executor exec"[6126] [ 224.994070][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.013129][ T6130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.015882][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.036361][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.036493][ T6130] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 225.093325][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.132299][ T6114] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 225.142398][ T6114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.216291][ T3660] Bluetooth: hci3: command tx timeout [ 225.286077][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.293432][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.300593][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.315793][ T4547] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.336187][ T3694] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.361230][ T4813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.586236][ T4547] usb 4-1: device descriptor read/64, error -71 [ 225.901334][ T4813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.929952][ T4547] usb usb4-port1: attempt power cycle [ 225.959503][ T6102] device hsr_slave_0 entered promiscuous mode [ 225.996370][ T6102] device hsr_slave_1 entered promiscuous mode [ 226.003735][ T6102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.029387][ T6102] Cannot create hsr debugfs directory [ 226.101492][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 226.384788][ T4547] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.707821][ T4813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.746279][ T4547] usb 4-1: device descriptor read/8, error -71 [ 226.815592][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.815622][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.816844][ T3694] usb 1-1: device descriptor read/64, error -71 [ 226.856973][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.857001][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.864598][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.872311][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 226.879943][ T5153] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 227.016160][ T4547] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.089938][ T4813] tipc: Disabling bearer [ 227.097649][ T4813] tipc: Disabling bearer [ 227.110337][ T4813] tipc: Left network mode [ 227.120315][ T3694] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.156370][ T4547] usb 4-1: device descriptor read/8, error -71 [ 227.276201][ T4547] usb usb4-port1: unable to enumerate USB device [ 227.296038][ T3659] Bluetooth: hci3: command tx timeout [ 227.356454][ T3694] usb 1-1: device descriptor read/64, error -71 [ 227.482544][ T3694] usb usb1-port1: attempt power cycle [ 227.941007][ T6159] loop4: detected capacity change from 0 to 1024 [ 228.050933][ T6159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.864932][ T6170] 9pnet_fd: Insufficient options for proto=fd [ 229.012317][ T3688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 229.065446][ T6102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.086063][ T3688] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 376 with error 28 [ 229.122007][ T3688] EXT4-fs (loop4): This should not happen!! Data will be lost [ 229.122007][ T3688] [ 229.155489][ T3688] EXT4-fs (loop4): Total free blocks count 0 [ 229.185872][ T3688] EXT4-fs (loop4): Free/Dirty block details [ 229.187075][ T6102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.193765][ T3688] EXT4-fs (loop4): free_blocks=68451041280 [ 229.218768][ T6102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.231633][ T3688] EXT4-fs (loop4): dirty_blocks=384 [ 229.246873][ T3688] EXT4-fs (loop4): Block reservation details [ 229.252983][ T3688] EXT4-fs (loop4): i_reserved_data_blocks=24 [ 229.289866][ T6102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.300768][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 229.367352][ T3659] Bluetooth: hci3: command tx timeout [ 229.446050][ C1] net_ratelimit: 20 callbacks suppressed [ 229.446069][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.458983][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.013383][ T4813] device hsr_slave_0 left promiscuous mode [ 230.023094][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.036048][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.047173][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.075091][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.116074][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 230.126456][ T4813] device bridge_slave_1 left promiscuous mode [ 230.132825][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.176533][ T4813] device bridge_slave_0 left promiscuous mode [ 230.182821][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.246081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.253241][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.260420][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.296490][ T4813] device veth1_macvtap left promiscuous mode [ 230.302586][ T4813] device veth0_macvtap left promiscuous mode [ 230.322812][ T4813] device veth1_vlan left promiscuous mode [ 230.336275][ T4813] device veth0_vlan left promiscuous mode [ 230.346707][ T6201] loop0: detected capacity change from 0 to 1024 [ 230.356330][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 230.374191][ T6201] EXT4-fs: Ignoring removed nobh option [ 230.457867][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 230.486143][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.493296][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.512484][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.590400][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.787650][ T14] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 230.818551][ T14] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 230.866097][ T14] usb 5-1: Product: syz [ 230.870468][ T14] usb 5-1: Manufacturer: syz [ 230.896762][ T14] usb 5-1: config 0 descriptor?? [ 231.292801][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.300021][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.307163][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.418357][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.442534][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.450133][ T3659] Bluetooth: hci3: command tx timeout [ 231.470101][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.492239][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.540408][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.552607][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 231.560062][ T14] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 232.468137][ T14] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 232.578917][ T4813] team0 (unregistering): Port device team_slave_1 removed [ 232.720010][ T4813] team0 (unregistering): Port device team_slave_0 removed [ 232.802181][ T4813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.817719][ T14] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 232.828025][ T14] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 232.859018][ T14] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -71 [ 232.898572][ T14] usb 5-1: USB disconnect, device number 2 [ 233.009728][ T4813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.175068][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 233.792230][ T4813] bond0 (unregistering): Released all slaves [ 233.796093][ T4547] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 233.904676][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.920088][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.929706][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.944167][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.963415][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.977111][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.990717][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.998060][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.017681][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.053288][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.075702][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.089145][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.096444][ T4863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.116017][ T4547] usb 5-1: Using ep0 maxpacket: 16 [ 234.140533][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.153162][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.169961][ T6234] loop1: detected capacity change from 0 to 1024 [ 234.218670][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.230872][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.239639][ T4547] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.251002][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.261316][ T4547] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 234.271190][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.279305][ T4547] usb 5-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.283365][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.300609][ T4547] usb 5-1: config 1 interface 0 has no altsetting 0 [ 234.307857][ T4547] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 234.312175][ T6234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.317454][ T4547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.377428][ T4547] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 234.384583][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.397559][ T6234] EXT4-fs (loop1): shut down requested (0) [ 234.410269][ T6243] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.699'. [ 234.428338][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.461850][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.501461][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.522213][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.539403][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 234.584943][ T3673] usb 5-1: USB disconnect, device number 3 [ 234.646096][ C1] net_ratelimit: 15 callbacks suppressed [ 234.646116][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.659158][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.918346][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.936735][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.955617][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.992450][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.006520][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.035086][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.048420][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.061716][ T6102] device veth0_vlan entered promiscuous mode [ 235.070850][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.080584][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.094045][ T6102] device veth1_vlan entered promiscuous mode [ 235.118547][ T3694] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 235.150860][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.160890][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.169665][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.178994][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.191082][ T6102] device veth0_macvtap entered promiscuous mode [ 235.220868][ T6102] device veth1_macvtap entered promiscuous mode [ 235.242595][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.255794][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.273115][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.286241][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.296280][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.306877][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.318205][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.328820][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.340909][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.353419][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.364757][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.374090][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.386180][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 235.389843][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.403610][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.426330][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.445965][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.456815][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.456967][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.457076][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.481044][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.491041][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.501645][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.511923][ T6102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.523203][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 235.545996][ T3673] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 235.546100][ T6102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.563399][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 235.586236][ T3694] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.595334][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.605144][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.628023][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.648040][ T3694] usb 2-1: config 0 descriptor?? [ 235.650865][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.667232][ T6256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.686118][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.687219][ T6102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.693283][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.711230][ T3694] hub 2-1:0.0: USB hub found [ 235.754902][ T6102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.764224][ T6102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.776397][ T6102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.826165][ T3673] usb 5-1: Using ep0 maxpacket: 32 [ 235.882904][ T4863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.902393][ T4863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.919472][ T6258] loop3: detected capacity change from 0 to 40427 [ 235.921620][ T3694] hub 2-1:0.0: 2 ports detected [ 235.934132][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.946467][ T6258] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 235.955706][ T6258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 235.964685][ T4846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.981871][ T4846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.996172][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.009093][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.021127][ T6258] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.105085][ T6258] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 236.112636][ T3673] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 236.113577][ T6258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 236.121951][ T3673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.138761][ T3673] usb 5-1: Product: syz [ 236.150410][ T3673] usb 5-1: Manufacturer: syz [ 236.155083][ T3673] usb 5-1: SerialNumber: syz [ 236.174384][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 236.174399][ T27] audit: type=1804 audit(1726414742.661:92): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.703" name="/newroot/209/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 236.216550][ T3673] usb 5-1: config 0 descriptor?? [ 236.231615][ T27] audit: type=1804 audit(1726414742.661:93): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.703" name="/newroot/209/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 236.380183][ T3694] hub 2-1:0.0: set hub depth failed [ 236.418961][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.434878][ T3694] usb 2-1: USB disconnect, device number 5 [ 236.457775][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.473023][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.486092][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.486224][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.486352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.514158][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 236.523581][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.534083][ T3648] syz-executor: attempt to access beyond end of device [ 236.534083][ T3648] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.538404][ T7] usb 1-1: config 0 descriptor?? [ 236.571947][ T3696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.950806][ T3673] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:32:5e:1c:9f:9d [ 236.960917][ T3696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.976439][ T3696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.999786][ T3696] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.015193][ T3673] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 237.032387][ T7] logitech 0003:046D:CA03.0006: unknown main item tag 0x0 [ 237.034157][ T3673] usb 5-1: USB disconnect, device number 4 [ 237.057885][ T3696] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 237.071969][ T7] logitech 0003:046D:CA03.0006: unknown main item tag 0x0 [ 237.075828][ T3696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.119133][ T7] logitech 0003:046D:CA03.0006: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0 [ 237.141324][ T7] logitech 0003:046D:CA03.0006: no inputs found [ 237.160446][ T3696] usb 3-1: config 0 descriptor?? [ 237.224463][ T6278] loop1: detected capacity change from 0 to 1024 [ 237.278940][ T4546] usb 1-1: USB disconnect, device number 14 [ 237.302692][ T6278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.380667][ T6283] EXT4-fs (loop1): shut down requested (0) [ 237.434218][ T6284] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.710'. [ 237.448175][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 237.455844][ T4813] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 237.502197][ T4813] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1156 with error 28 [ 237.535342][ T4813] EXT4-fs (loop1): This should not happen!! Data will be lost [ 237.535342][ T4813] [ 237.549154][ T4813] EXT4-fs (loop1): Total free blocks count 0 [ 237.572928][ T4813] EXT4-fs (loop1): Free/Dirty block details [ 237.586929][ T4813] EXT4-fs (loop1): free_blocks=68451041280 [ 237.595493][ T4813] EXT4-fs (loop1): dirty_blocks=1168 [ 237.601635][ T4813] EXT4-fs (loop1): Block reservation details [ 237.616538][ T4813] EXT4-fs (loop1): i_reserved_data_blocks=73 [ 237.842711][ T3696] acrux 0003:1A34:0802.0007: item fetching failed at offset 3/5 [ 237.851697][ T3696] acrux 0003:1A34:0802.0007: parse failed [ 237.857798][ T3696] acrux: probe of 0003:1A34:0802.0007 failed with error -22 [ 237.867909][ T3696] usb 3-1: USB disconnect, device number 7 [ 238.726540][ T6299] loop0: detected capacity change from 0 to 256 [ 238.744193][ T6299] exfat: Bad value for 'uid' [ 238.989436][ T27] audit: type=1326 audit(1726414745.481:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 239.015217][ T27] audit: type=1326 audit(1726414745.481:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 239.038506][ T27] audit: type=1326 audit(1726414745.481:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 239.323395][ T6308] loop0: detected capacity change from 0 to 128 [ 239.330351][ T6308] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.641130][ T27] audit: type=1326 audit(1726414745.481:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 239.846063][ C1] net_ratelimit: 15 callbacks suppressed [ 239.846081][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.859382][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.982734][ T27] audit: type=1326 audit(1726414745.481:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 240.250619][ T6313] loop1: detected capacity change from 0 to 128 [ 240.307488][ T6313] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 240.403562][ T6313] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 240.459262][ T6321] loop4: detected capacity change from 0 to 128 [ 240.521353][ T6313] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.719: checksumming directory block 0 [ 240.547749][ T6321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.579589][ T6321] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 240.646042][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.653192][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.660320][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.712128][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 240.886340][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.893616][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.156468][ T6330] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.722'. [ 241.453452][ T5153] EXT4-fs (loop4): unmounting filesystem. [ 241.686050][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.693280][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.700425][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.960152][ T6344] netlink: 'syz.3.724': attribute type 4 has an invalid length. [ 245.366289][ C1] net_ratelimit: 12 callbacks suppressed [ 245.366310][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.379264][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.616895][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.624024][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.631172][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.916826][ T6377] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.735'. [ 246.150786][ T6384] loop2: detected capacity change from 0 to 1024 [ 246.286641][ T3673] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 246.406065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.413328][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.581976][ T6384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.656517][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.664018][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.671722][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.692748][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.729246][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.741970][ T6394] loop0: detected capacity change from 0 to 512 [ 246.765008][ T3673] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 246.797258][ T6395] EXT4-fs (loop2): shut down requested (0) [ 246.805155][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.839080][ T6394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.852364][ T3673] usb 5-1: config 0 descriptor?? [ 246.862795][ T6394] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038 (0x7fffffff) [ 246.924089][ T34] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 246.939623][ T34] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1456 with error 28 [ 246.952306][ T34] EXT4-fs (loop2): This should not happen!! Data will be lost [ 246.952306][ T34] [ 246.962070][ T34] EXT4-fs (loop2): Total free blocks count 0 [ 246.968268][ T34] EXT4-fs (loop2): Free/Dirty block details [ 246.974327][ T34] EXT4-fs (loop2): free_blocks=68451041280 [ 246.980379][ T34] EXT4-fs (loop2): dirty_blocks=1456 [ 246.986859][ T34] EXT4-fs (loop2): Block reservation details [ 246.993036][ T34] EXT4-fs (loop2): i_reserved_data_blocks=91 [ 247.091745][ T6384] 9pnet_fd: Insufficient options for proto=fd [ 248.038335][ T3673] samsung 0003:0419:0600.0008: bogus close delimiter [ 248.086117][ T3673] samsung 0003:0419:0600.0008: item 0 2 2 10 parsing failed [ 248.123545][ T3673] samsung 0003:0419:0600.0008: parse failed [ 248.146030][ T3673] samsung: probe of 0003:0419:0600.0008 failed with error -22 [ 248.206008][ T3697] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 248.249856][ T3673] usb 5-1: USB disconnect, device number 5 [ 248.563686][ T6409] loop2: detected capacity change from 0 to 40427 [ 248.593668][ T6409] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 248.616155][ T6409] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 248.626395][ T3697] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 248.635552][ T3697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.656906][ T3697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 248.669440][ T6409] F2FS-fs (loop2): invalid crc value [ 248.675069][ T3697] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 248.692172][ T3697] usb 4-1: config 1 interface 1 has no altsetting 0 [ 248.712611][ T6409] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.851334][ T6409] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 248.858803][ T3697] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.871498][ T3697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.881400][ T6409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.896685][ T3697] usb 4-1: Product: syz [ 248.900894][ T3697] usb 4-1: Manufacturer: syz [ 248.905511][ T3697] usb 4-1: SerialNumber: syz [ 249.259661][ T6424] syz.2.744: attempt to access beyond end of device [ 249.259661][ T6424] loop2: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 249.847024][ T3697] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 249.855443][ T3697] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 249.896135][ T3697] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 249.921221][ T6102] syz-executor: attempt to access beyond end of device [ 249.921221][ T6102] loop2: rw=2051, sector=45096, nr_sectors = 112 limit=40427 [ 249.953826][ T3697] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 249.966416][ T3697] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 249.972842][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 249.974877][ T3697] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 249.990072][ T6102] F2FS-fs (loop2): Issue discard(5637, 5637, 14) failed, ret: -5 [ 250.218886][ T3697] usb 4-1: USB disconnect, device number 8 [ 250.436004][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 250.444793][ T6437] loop1: detected capacity change from 0 to 512 [ 250.564594][ T6422] loop4: detected capacity change from 0 to 40427 [ 250.571961][ T6437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.581300][ T6437] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 250.593164][ T6422] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 250.600995][ T6422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.633673][ T6422] F2FS-fs (loop4): invalid crc value [ 250.642414][ T6442] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.749'. [ 250.651966][ C1] net_ratelimit: 15 callbacks suppressed [ 250.651987][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.652113][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.668203][ T6437] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.753: Directory hole found for htree leaf block 0 [ 250.727974][ T6422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.806085][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.813316][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.820584][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.828206][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.846102][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.858383][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 250.865714][ T6437] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.753: Directory hole found for htree leaf block 0 [ 250.868136][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.891735][ T7] usb 1-1: config 0 descriptor?? [ 250.925154][ T6437] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.753: Directory hole found for htree leaf block 0 [ 250.935324][ T6422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 250.945344][ T6422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.206150][ T6452] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.753: Directory hole found for htree leaf block 0 [ 251.426305][ T7] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 251.625734][ T7] usb 1-1: USB disconnect, device number 15 [ 251.655976][ T3673] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 251.686093][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.693252][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.701046][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 251.817234][ T6453] syz.4.746: attempt to access beyond end of device [ 251.817234][ T6453] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 251.846220][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.853417][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.860694][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.084222][ T6457] tipc: Enabling of bearer rejected, failed to enable media [ 252.197011][ T3673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.347944][ T3673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.525441][ T3673] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 252.800516][ T3673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.887822][ T3673] usb 3-1: config 0 descriptor?? [ 253.181192][ T6467] loop3: detected capacity change from 0 to 256 [ 253.224813][ T6467] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 253.509130][ T3673] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 253.516631][ T3673] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 253.524292][ T3673] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 253.532372][ T3673] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 253.541368][ T3673] samsung 0003:0419:0600.000A: unknown main item tag 0x0 [ 253.550552][ T3673] samsung 0003:0419:0600.000A: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 253.609955][ T3696] usb 3-1: USB disconnect, device number 8 [ 254.154104][ T5153] syz-executor: attempt to access beyond end of device [ 254.154104][ T5153] loop4: rw=2051, sector=45096, nr_sectors = 112 limit=40427 [ 254.186195][ T5153] F2FS-fs (loop4): Issue discard(5637, 5637, 14) failed, ret: -5 [ 255.609569][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.623861][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.726148][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 255.769233][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 255.802096][ T6488] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.764'. [ 255.846166][ C1] net_ratelimit: 15 callbacks suppressed [ 255.846186][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.859151][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.006153][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.013305][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.020443][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.037333][ T6492] loop1: detected capacity change from 0 to 512 [ 256.093378][ T6492] EXT4-fs (loop1): Test dummy encryption mode enabled [ 256.162304][ T6492] EXT4-fs error (device loop1): __ext4_iget:5055: inode #11: block 1: comm syz.1.766: invalid block [ 256.189387][ T6492] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.766: couldn't read orphan inode 11 (err -117) [ 256.253696][ T6492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 256.366137][ T3694] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 256.474530][ T6504] tipc: Enabling of bearer rejected, already enabled [ 256.488309][ T5390] EXT4-fs (loop1): unmounting filesystem. [ 256.617423][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 258.294949][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.295071][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.299381][ T27] audit: type=1326 audit(1726414763.531:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.301739][ T27] audit: type=1326 audit(1726414763.541:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.303390][ T27] audit: type=1326 audit(1726414763.781:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.305728][ T27] audit: type=1326 audit(1726414763.791:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.307549][ T27] audit: type=1326 audit(1726414763.801:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.308753][ T27] audit: type=1326 audit(1726414764.111:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd29ab7c890 code=0x7ffc0000 [ 258.310407][ T27] audit: type=1326 audit(1726414764.141:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd29ab7f727 code=0x7ffc0000 [ 258.312097][ T27] audit: type=1326 audit(1726414764.151:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd29ab7def9 code=0x7ffc0000 [ 258.321489][ T27] audit: type=1326 audit(1726414764.161:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd29ab7f727 code=0x7ffc0000 [ 258.322718][ T27] audit: type=1326 audit(1726414764.181:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd29ab7cb8a code=0x7ffc0000 [ 258.716036][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.792585][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.799763][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.891952][ T6519] loop3: detected capacity change from 0 to 128 [ 258.894000][ T6521] loop0: detected capacity change from 0 to 16 [ 258.957510][ T3694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 258.970793][ T6521] erofs: (device loop0): mounted with root inode @ nid 36. [ 259.010314][ T3694] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 259.073482][ T3694] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 259.086803][ T3696] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 259.091767][ T6521] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.134969][ T3694] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 259.152365][ T3694] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 259.184460][ T6521] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 259.195408][ T3694] usb 3-1: config 1 interface 0 has no altsetting 0 [ 259.209594][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.296108][ T6517] tipc: Enabling of bearer rejected, already enabled [ 259.306469][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.316045][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 259.325826][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 259.331690][ T3694] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 259.338117][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 259.351987][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.524550][ T3696] usb 2-1: Using ep0 maxpacket: 16 [ 260.147772][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.196481][ T3694] usb 3-1: can't set config #1, error -71 [ 260.244896][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 260.259093][ T3694] usb 3-1: USB disconnect, device number 9 [ 260.267445][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 260.279013][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 260.288788][ T3696] usb 2-1: device descriptor read/all, error -71 [ 260.302295][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 260.314996][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.333107][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 260.343752][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 260.363610][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 260.385048][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 260.414333][ T6523] syz.0.774: attempt to access beyond end of device [ 260.414333][ T6523] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 260.438958][ T6523] syz.0.774: attempt to access beyond end of device [ 260.438958][ T6523] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 260.486020][ T6523] syz.0.774: attempt to access beyond end of device [ 260.486020][ T6523] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 260.510288][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 260.536007][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 260.548401][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.568337][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 260.596019][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.616007][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 260.636101][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 260.645453][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 260.655233][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.664890][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 260.674295][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.692014][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 260.710912][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 260.721608][ T3694] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 260.743587][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 260.759663][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 260.775687][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 260.792534][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 260.802652][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 260.813269][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.822918][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 260.832248][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.842025][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 260.856836][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 260.871523][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.886053][ C0] net_ratelimit: 8 callbacks suppressed [ 260.886072][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 260.898964][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 260.910727][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 260.930078][ T6523] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.947009][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 260.966590][ T6523] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 260.986674][ T6523] syz.0.774: attempt to access beyond end of device [ 260.986674][ T6523] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 261.015113][ T6523] syz.0.774: attempt to access beyond end of device [ 261.015113][ T6523] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 261.037297][ T6523] syz.0.774: attempt to access beyond end of device [ 261.037297][ T6523] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 261.064659][ T6523] ================================================================== [ 261.072763][ T6523] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x375/0x470 [ 261.080867][ T6523] Read of size 1622 at addr ffff888072fd7e5b by task syz.0.774/6523 [ 261.088868][ T6523] [ 261.091225][ T6523] CPU: 1 PID: 6523 Comm: syz.0.774 Not tainted 6.1.110-syzkaller #0 [ 261.099231][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.109322][ T6523] Call Trace: [ 261.112624][ T6523] [ 261.115575][ T6523] dump_stack_lvl+0x1e3/0x2cb [ 261.120293][ T6523] ? nf_tcp_handle_invalid+0x642/0x642 [ 261.125816][ T6523] ? panic+0x764/0x764 [ 261.129929][ T6523] ? _printk+0xd1/0x111 [ 261.134209][ T6523] ? __virt_addr_valid+0x17f/0x530 [ 261.139365][ T6523] ? __virt_addr_valid+0x17f/0x530 [ 261.144529][ T6523] print_report+0x15f/0x4f0 [ 261.149067][ T6523] ? __virt_addr_valid+0x17f/0x530 [ 261.154234][ T6523] ? __virt_addr_valid+0x17f/0x530 [ 261.159383][ T6523] ? __virt_addr_valid+0x45b/0x530 [ 261.164546][ T6523] ? __phys_addr+0xb6/0x170 [ 261.169107][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.174781][ T6523] kasan_report+0x136/0x160 [ 261.179320][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.185001][ T6523] kasan_check_range+0x27f/0x290 [ 261.189965][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.195634][ T6523] memcpy+0x25/0x60 [ 261.199474][ T6523] z_erofs_transform_plain+0x375/0x470 [ 261.204977][ T6523] z_erofs_decompress_queue+0x1aa0/0x2d50 [ 261.207762][ T3694] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.210738][ T6523] ? z_erofs_onlinepage_endio+0x280/0x280 [ 261.210773][ T6523] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 261.233339][ T6523] ? print_irqtrace_events+0x210/0x210 [ 261.238868][ T6523] ? z_erofs_decompressqueue_endio+0x570/0x570 [ 261.245065][ T6523] ? virt_to_slab+0x5/0xa0 [ 261.249531][ T6523] ? kmem_cache_free+0x292/0x510 [ 261.254509][ T6523] ? z_erofs_runqueue+0x19ee/0x1ca0 [ 261.259745][ T6523] z_erofs_runqueue+0x1a6e/0x1ca0 [ 261.264804][ T6523] ? z_erofs_do_read_page+0x9d6/0x3bd0 [ 261.270319][ T6523] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 261.275898][ T6523] ? __lock_acquire+0x1f80/0x1f80 [ 261.280975][ T6523] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 261.286919][ T6523] z_erofs_readahead+0xc26/0x1030 [ 261.292004][ T6523] ? z_erofs_read_folio+0x760/0x760 [ 261.297328][ T6523] ? __lock_acquire+0x1f80/0x1f80 [ 261.302391][ T6523] ? blk_start_plug+0x95/0x110 [ 261.307180][ T6523] read_pages+0x17f/0x830 [ 261.311543][ T6523] ? folio_add_lru+0x34d/0xd70 [ 261.316327][ T6523] ? folio_add_lru+0x34d/0xd70 [ 261.321121][ T6523] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 261.326786][ T6523] ? __lock_acquire+0x125b/0x1f80 [ 261.331847][ T6523] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 261.337349][ T6523] page_cache_ra_unbounded+0x68b/0x7b0 [ 261.342852][ T6523] force_page_cache_ra+0x2a3/0x300 [ 261.347997][ T6523] generic_fadvise+0x553/0x7b0 [ 261.352793][ T6523] ? dump_task+0x620/0x620 [ 261.357242][ T6523] ? __fget_files+0x28/0x4a0 [ 261.361863][ T6523] ? __fdget+0x182/0x210 [ 261.366134][ T6523] __x64_sys_fadvise64+0x138/0x180 [ 261.371292][ T6523] do_syscall_64+0x3b/0xb0 [ 261.375759][ T6523] ? clear_bhb_loop+0x45/0xa0 [ 261.380471][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.386399][ T6523] RIP: 0033:0x7f4ba557def9 [ 261.390844][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.410475][ T6523] RSP: 002b:00007f4ba62ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 261.418918][ T6523] RAX: ffffffffffffffda RBX: 00007f4ba5736058 RCX: 00007f4ba557def9 [ 261.426916][ T6523] RDX: 0000000000000000 RSI: 000000000000fcff RDI: 0000000000000004 [ 261.434920][ T6523] RBP: 00007f4ba55f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 261.442918][ T6523] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 261.450914][ T6523] R13: 0000000000000001 R14: 00007f4ba5736058 R15: 00007ffdc3c6fa68 [ 261.458950][ T6523] [ 261.461985][ T6523] [ 261.464323][ T6523] The buggy address belongs to the physical page: [ 261.470753][ T6523] page:ffffea0001cbf5c0 refcount:2 mapcount:0 mapping:ffff8880705c87c8 index:0x1 pfn:0x72fd7 [ 261.481027][ T6523] memcg:ffff88807a32c000 [ 261.485283][ T6523] aops:managed_cache_aops ino:0 [ 261.490155][ T6523] flags: 0xfff40000002014(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff) [ 261.499215][ T6523] raw: 00fff40000002014 ffffea0001549c08 ffffea0001541b08 ffff8880705c87c8 [ 261.507906][ T6523] raw: 0000000000000001 ffff888057bd3000 00000002ffffffff ffff88807a32c000 [ 261.516504][ T6523] page dumped because: kasan: bad access detected [ 261.522939][ T6523] page_owner tracks the page as allocated [ 261.528667][ T6523] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6521, tgid 6520 (syz.0.774), ts 259091758276, free_ts 254573694378 [ 261.550581][ T6523] post_alloc_hook+0x18d/0x1b0 [ 261.555459][ T6523] get_page_from_freelist+0x322e/0x33b0 [ 261.561077][ T6523] __alloc_pages+0x28d/0x770 [ 261.565694][ T6523] z_erofs_do_read_page+0x1a76/0x3bd0 [ 261.571098][ T6523] z_erofs_read_folio+0x31a/0x760 [ 261.576152][ T6523] filemap_read_folio+0x199/0x780 [ 261.581198][ T6523] do_read_cache_folio+0x2ee/0x810 [ 261.586330][ T6523] erofs_bread+0x149/0x610 [ 261.590770][ T6523] erofs_namei+0x1ad/0xca0 [ 261.595208][ T6523] erofs_lookup+0x1d6/0x4d0 [ 261.599737][ T6523] path_openat+0x10fb/0x2e60 [ 261.604352][ T6523] do_filp_open+0x230/0x480 [ 261.606911][ T3694] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.608864][ T6523] do_sys_openat2+0x13b/0x4f0 [ 261.608898][ T6523] __x64_sys_openat+0x243/0x290 [ 261.627473][ T6523] do_syscall_64+0x3b/0xb0 [ 261.629896][ T3694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.631911][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.631947][ T6523] page last free stack trace: [ 261.631954][ T6523] free_unref_page_prepare+0xf63/0x1120 [ 261.656065][ T6523] free_unref_page_list+0x663/0x900 [ 261.661292][ T6523] release_pages+0x2836/0x2b40 [ 261.666163][ T6523] __pagevec_release+0x80/0xf0 [ 261.667403][ T3694] usb 3-1: Product: syz [ 261.670931][ T6523] truncate_inode_pages_range+0x48a/0x1340 [ 261.670962][ T6523] blkdev_flush_mapping+0x154/0x2b0 [ 261.670987][ T6523] blkdev_put+0x4c0/0x750 [ 261.671014][ T6523] kill_f2fs_super+0x2ff/0x3c0 [ 261.671040][ T6523] deactivate_locked_super+0xa0/0x110 [ 261.687755][ T3694] usb 3-1: Manufacturer: syz [ 261.690523][ T6523] cleanup_mnt+0x490/0x520 [ 261.690559][ T6523] task_work_run+0x246/0x300 [ 261.690585][ T6523] exit_to_user_mode_loop+0xde/0x100 [ 261.700680][ T3694] usb 3-1: SerialNumber: syz [ 261.724335][ T6523] exit_to_user_mode_prepare+0xb1/0x140 [ 261.729915][ T6523] syscall_exit_to_user_mode+0x60/0x270 [ 261.735491][ T6523] do_syscall_64+0x47/0xb0 [ 261.739938][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.745866][ T6523] [ 261.748204][ T6523] Memory state around the buggy address: [ 261.753858][ T6523] ffff888072fd7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 261.761939][ T6523] ffff888072fd7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 261.770023][ T6523] >ffff888072fd8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.778187][ T6523] ^ [ 261.782267][ T6523] ffff888072fd8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.790344][ T6523] ffff888072fd8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.799217][ T6523] ================================================================== [ 261.808570][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 261.815724][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 261.828035][ T6523] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.835255][ T6523] CPU: 0 PID: 6523 Comm: syz.0.774 Not tainted 6.1.110-syzkaller #0 [ 261.843250][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.853416][ T6523] Call Trace: [ 261.856711][ T6523] [ 261.859655][ T6523] dump_stack_lvl+0x1e3/0x2cb [ 261.864370][ T6523] ? nf_tcp_handle_invalid+0x642/0x642 [ 261.869858][ T6523] ? panic+0x764/0x764 [ 261.873950][ T6523] ? preempt_schedule_common+0xa6/0xd0 [ 261.879425][ T6523] ? vscnprintf+0x59/0x80 [ 261.883780][ T6523] panic+0x318/0x764 [ 261.887693][ T6523] ? check_panic_on_warn+0x1d/0xa0 [ 261.892826][ T6523] ? memcpy_page_flushcache+0xfc/0xfc [ 261.898222][ T6523] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 261.904225][ T6523] ? _raw_spin_unlock+0x40/0x40 [ 261.909107][ T6523] ? print_report+0x4a3/0x4f0 [ 261.913801][ T6523] check_panic_on_warn+0x7e/0xa0 [ 261.918757][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.924413][ T6523] end_report+0x66/0x110 [ 261.928843][ T6523] kasan_report+0x143/0x160 [ 261.933370][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.939035][ T6523] kasan_check_range+0x27f/0x290 [ 261.943990][ T6523] ? z_erofs_transform_plain+0x375/0x470 [ 261.949650][ T6523] memcpy+0x25/0x60 [ 261.953479][ T6523] z_erofs_transform_plain+0x375/0x470 [ 261.958990][ T6523] z_erofs_decompress_queue+0x1aa0/0x2d50 [ 261.964757][ T6523] ? z_erofs_onlinepage_endio+0x280/0x280 [ 261.970506][ T6523] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 261.976534][ T6523] ? print_irqtrace_events+0x210/0x210 [ 261.982054][ T6523] ? z_erofs_decompressqueue_endio+0x570/0x570 [ 261.988239][ T6523] ? virt_to_slab+0x5/0xa0 [ 261.992674][ T6523] ? kmem_cache_free+0x292/0x510 [ 261.997618][ T6523] ? z_erofs_runqueue+0x19ee/0x1ca0 [ 262.002826][ T6523] z_erofs_runqueue+0x1a6e/0x1ca0 [ 262.007856][ T6523] ? z_erofs_do_read_page+0x9d6/0x3bd0 [ 262.013341][ T6523] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 262.018891][ T6523] ? __lock_acquire+0x1f80/0x1f80 [ 262.023941][ T6523] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 262.029761][ T6523] z_erofs_readahead+0xc26/0x1030 [ 262.034798][ T6523] ? z_erofs_read_folio+0x760/0x760 [ 262.040058][ T6523] ? __lock_acquire+0x1f80/0x1f80 [ 262.045101][ T6523] ? blk_start_plug+0x95/0x110 [ 262.049870][ T6523] read_pages+0x17f/0x830 [ 262.054210][ T6523] ? folio_add_lru+0x34d/0xd70 [ 262.058976][ T6523] ? folio_add_lru+0x34d/0xd70 [ 262.063742][ T6523] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 262.069382][ T6523] ? __lock_acquire+0x125b/0x1f80 [ 262.074417][ T6523] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 262.079890][ T6523] page_cache_ra_unbounded+0x68b/0x7b0 [ 262.085359][ T6523] force_page_cache_ra+0x2a3/0x300 [ 262.090480][ T6523] generic_fadvise+0x553/0x7b0 [ 262.095338][ T6523] ? dump_task+0x620/0x620 [ 262.099759][ T6523] ? __fget_files+0x28/0x4a0 [ 262.104351][ T6523] ? __fdget+0x182/0x210 [ 262.108597][ T6523] __x64_sys_fadvise64+0x138/0x180 [ 262.113719][ T6523] do_syscall_64+0x3b/0xb0 [ 262.118154][ T6523] ? clear_bhb_loop+0x45/0xa0 [ 262.122840][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.128739][ T6523] RIP: 0033:0x7f4ba557def9 [ 262.133157][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.152764][ T6523] RSP: 002b:00007f4ba62ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 262.161210][ T6523] RAX: ffffffffffffffda RBX: 00007f4ba5736058 RCX: 00007f4ba557def9 [ 262.169184][ T6523] RDX: 0000000000000000 RSI: 000000000000fcff RDI: 0000000000000004 [ 262.177157][ T6523] RBP: 00007f4ba55f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 262.185128][ T6523] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 262.193099][ T6523] R13: 0000000000000001 R14: 00007f4ba5736058 R15: 00007ffdc3c6fa68 [ 262.201103][ T6523] [ 262.204506][ T6523] Kernel Offset: disabled [ 262.208959][ T6523] Rebooting in 86400 seconds..