last executing test programs: 4m2.099711865s ago: executing program 3 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getpriority(0x1, r0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f000000202000050000003e"], 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) 4m0.904997133s ago: executing program 3 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$eJzs3U1sXEcdAPDZtdepk5RsSkJNGtKEQls+ajeOCR8RNFVzIWoqbpUqLlGalqhJQKQSJOohyYkbrapw5UOceqkAIdELinriUolG4tJT4cCBKEiVOEAhMbI9s17/s6u368RZr/f3k2Zn583szrz12+e3772ZScDIqi8+zs1N1VK68s6bR/7x6N8nF5Y81SrRXHwcb0s1Ukq1nB4P7/fh2FJ886PXTnSKa2l28bGk03M3Wq/dklK6mPamq6mZdl259sZ7s88eu3T08r733zp0fW3WHgAARst3rh6a2/nXPz+0/eO39xxOm1rLy/F5M6e35uP+w/nAvxz/19PKdK0ttJsI5cZzqIdyYx3KtdfTCOXGu9Q/Ed630aXcpor6x9qWdVpvGGZlO26mWn16Rbpen55e+k2eFn/XT9Smz546/dK5ATUUuOv+9XBKaa8gCKMY5rcNeg8EsCReL7zNxXhm4c603m28t/pvPF3v/Hq4C+719q/+4ar/15fscbh7NurWVNarfI+25nS8jhDvX+r3+1/eL16PaPTYzm7XEYbl+kK3do7d43asVrf2x+1io/pmjsvn8K2Q3/79iX/TYfkbA5392/l/QRjZMD/oHRCwbsX75uazkh/v64v5myry76vIn6zI31yRv6UiH0bZ7179aXq9tvw7P/6m7/d8WDnPdn+OP9Fne+L5yH7rj/f99utO64/3E8N69ofjz5/82osvXFu6/7/W2v5v5e19b04383frai5QzhfG8+qte/+bK+updyn3QGjP/R3KLz7fsbJcbcfy+6S2/cxt7Zha+bpt3crtXlmuGcpN5nBfaG88PtkcXleOP8p+tXxe42F9G2E9JkI7yn5le45jO2A1yvbY7f7/sn1OpUbtpVOnTz6Z02U7/dNYY9PC8v091WarhfWk1/4/U2ll/5+treWNevt+Ydvy8lr7fqEZls92WX5gKXlmT17+vbHJxeXTJ75/+sW7vvYw2s6dv/DK8dOnT/7QE088GfEnl+aXlwx6zwSstZlXz/xg5tz5C0+cOnP85ZMvnzx74ODBA7OzB79+YG5m8bh+pv3oHthIlv/7D7olAAAAAAAAAAAAQK9+dPTItb+8+9UPlvr/L/f/K/3/y52/pf//T0L//9hPvvSDL/0At3fIXywTBlidCOUaOXwytHdHqGdneN2nctyaxy/3/y/VxXFdS3seDMvj+L2lXBhO4LbxUibCGCRxvsDP5vhyjn+VYIBqk50X57hqfOuyrZfxKfTwH07l71a2hqVxTOqt/t/dxnUq+//t96SV3G3nzl94ZWta236Fg15HoLN/Gv9bEEY2zM+bxQNYHwY9/2c571nis3/89n0LoRS78fTK/WUcvxTuxHqff1L9G2v+z9b8dz3v/8KMec3V1fufn1//oK3atKvX+uP6l3Ggd/RX/8e5/rI2j6Xe6p//Zag/XhDq0X9D/Zt7rP+29d+9uvr/l+svH9vjj/Ra/1KLa/WV7ZgM61Gu/8XzxsXNsP5lbM++13+VEzXeyvXDKBuWeWb7NSzz/3YT78P4Sk6XHWG5zyHOd9Jv+8v9FeX/wM7w/rWK/2/m/x1u38hx1fehzP9btsdmh3S9Ld3o8Nlu1H0NDKsPh/7636Z10IZRC7WLreflAGTgbRJWE+bn59f2hFaFgVbOwD//Qf9OGHT9g/78q8T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N36ecf7fmP9geN84P/BURf6nK/J3VeQ/VJG/uyL/MxX5+yry91TkP1yR/0BF/iMV+Z+ryP98Rf6jFfmPV+R/oSJ/oyv9UUZ1/WGUxf55vv8wOsr1n27f/x0V+cDw+tnb+5954bffbS71/59onQ8p1/EO53Qj/3b+cU7H696pLb2Q925O/y3kr/fzHTBK4vgZ8f/7YxX5wPAq93n5fsMIqnUesafXcau6HeczXL6Y4y/l+Ms5fiLH0zmeyfH+HM/eo/axNp75ze8PvV5b/r2/LeT3ej957A8Ux4k60GN74vmBfu9nj+P49etO619ldzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICBqS8+zs1N1VK68s6bR54/dmpmYclTrRLNxcfxtlSj9bqUnszxWI5/kZ/c/Oi1E+3xrYV4IqVamk21VGstT8/daNW0JaV0Me1NV1Mz7bpy7Y33Zp89duno5X3vv3Xo+hp+BAAAALDh/T8AAP//OTYOaA==") memfd_create(0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) 3m59.705575301s ago: executing program 3 (id=547): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) 3m58.313162068s ago: executing program 3 (id=549): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r2, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x40001) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0) 3m57.236695935s ago: executing program 3 (id=551): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 3m47.35529774s ago: executing program 3 (id=572): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)="a1b8cab7742dcadd16fb79f417f66decbd553dfc17832a47e5d5a5983e9d6fc244e7626eb66d07aa38be920ca9d95106870dd9dcea0d1379d20e7145f69d0f855e7dbe4a5300c716f3d67923155019dc0c1e2c392cda1073d91dbb2fc8f66165f4f97544da4562e76d6b97e671b80b488d79b9211c327b6b9eecbf3a74fb4bb24a14761cdb90b4ab62d8ac4139118ac53c2985f3", 0x94}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x298}, 0x400) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x28000, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0xffff7fff, 0x3ff, 0x32314d54, 0x3132564e, 0x3, [{0x0, 0x7fffffff}, {0x67, 0xc0000000}, {0x86, 0x101}, {0xa, 0x3ff}, {0x101, 0x6}, {0x6, 0x579}, {0x5, 0xb}, {0x7, 0x9}], 0x4, 0x6c, 0x3, 0x1, 0x3}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002580)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r3, @ANYBLOB="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"], 0x1e0) 3m31.105168763s ago: executing program 32 (id=572): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)="a1b8cab7742dcadd16fb79f417f66decbd553dfc17832a47e5d5a5983e9d6fc244e7626eb66d07aa38be920ca9d95106870dd9dcea0d1379d20e7145f69d0f855e7dbe4a5300c716f3d67923155019dc0c1e2c392cda1073d91dbb2fc8f66165f4f97544da4562e76d6b97e671b80b488d79b9211c327b6b9eecbf3a74fb4bb24a14761cdb90b4ab62d8ac4139118ac53c2985f3", 0x94}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x298}, 0x400) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x28000, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0xffff7fff, 0x3ff, 0x32314d54, 0x3132564e, 0x3, [{0x0, 0x7fffffff}, {0x67, 0xc0000000}, {0x86, 0x101}, {0xa, 0x3ff}, {0x101, 0x6}, {0x6, 0x579}, {0x5, 0xb}, {0x7, 0x9}], 0x4, 0x6c, 0x3, 0x1, 0x3}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002580)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r3, @ANYBLOB="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"], 0x1e0) 29.470562406s ago: executing program 0 (id=1065): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ff8}]}) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x6, 0x1]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000002c0)={0x74, r6, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 22.710619193s ago: executing program 1 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$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") memfd_create(0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) r5 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000050000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 21.157739796s ago: executing program 0 (id=1082): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa7a, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) sendfile(r0, r0, 0x0, 0xe3aa6ea) truncate(0x0, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) 21.156831177s ago: executing program 1 (id=1083): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f0000000080)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") socket(0x23, 0xc, 0x1003) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000d00)={[{@nobh}, {@dax}, {@data_err_ignore}], [{@smackfsdef={'smackfsdef', 0x3d, ','}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x65, 0x36, 0x37, 0x5b, 0x35, 0x35], 0x2d, [0x31, 0x66, 0x33, 0x30], 0x2d, [0x66, 0x61, 0x61, 0x65], 0x2d, [0x30, 0x35, 0x33, 0x38], 0x2d, [0x33, 0x66, 0x30, 0x3f, 0x33, 0x38, 0x34, 0x65]}}}, {@smackfshat={'smackfshat', 0x3d, '#^\\'}}, {@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_appraise}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000bf698d3f69788c00000000000000000000000000007d24f8e111853b470829beac25407391a38ecc945a1314741aea3ff3fd94274cc2ddcf46f679b17b9e4cae86"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0300200004000000040000000a00000000000000", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x7, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x6fa0, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x7, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x5, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x8, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x0, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x5, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) write$USERIO_CMD_SET_PORT_TYPE(r7, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) write$qrtrtun(r9, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x4, 0x3c0, 0x1, @discrete={0x7fff, 0xfff}}) 21.048864387s ago: executing program 2 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x101, 0xe06) pipe2$9p(0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 19.779096343s ago: executing program 2 (id=1088): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 16.525483565s ago: executing program 0 (id=1091): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x802, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_mixed}, {@utf8no}, {@fat=@quiet}, {@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}]}, 0x27, 0x33f, &(0x7f0000002f40)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x3800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 16.427248944s ago: executing program 2 (id=1092): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001500), 0x202000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000001540)=0x2) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0xf8, 0x2c8, 0xfeffffff, 0x0, 0xf8, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@ttl={{0x28}, {0x3, 0xd2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 14.44889455s ago: executing program 2 (id=1096): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x9, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000240)={&(0x7f0000000540)=""/204, 0xcc}) 14.314872303s ago: executing program 2 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x400, 0xf) 13.879519767s ago: executing program 1 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x2, 0x7ffffffe, 0x10000, 0x2, 0x8, 0x400007, {0x1, 0x200000000000001, 0x6, 0xed65, 0x200000000004, 0x3, 0xffff, 0x101, 0x8, 0x1000, 0x848a, 0x0, 0x0, 0x1, 0xe}}}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 11.208241601s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 9.79965779s ago: executing program 1 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x18d, &(0x7f00000001c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 9.428415697s ago: executing program 5 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) connect$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x7fffffff, 0x7, 0x4000000000000e52, 0x7, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x0, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.763292712s ago: executing program 0 (id=1106): shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40010) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x4148, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x800, &(0x7f0000000180)=ANY=[]) close(r1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) memfd_create(0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) timer_create(0x0, 0x0, 0x0) 7.413435306s ago: executing program 5 (id=1107): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x9, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000240)={&(0x7f0000000540)=""/204, 0xcc}) 7.243058753s ago: executing program 5 (id=1108): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x2, 0x1, 0x6}, 0xfd}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0x2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x100000000, {0x1, 0xff, 0x4}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000140)=""/6) mount(0x0, 0x0, 0x0, 0x8000, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000080)=0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 6.982504789s ago: executing program 4 (id=1109): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x16, 0x6, &(0x7f00000020c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f0000002300)=""/195, 0x0, 0x11, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000002080)={{0x5, 0x4}, {0x7, 0xa4}, 0x100000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) 5.919403494s ago: executing program 0 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fdffffff00000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bind$tipc(r3, 0x0, 0x0) dup3(r4, r3, 0x0) 5.848931921s ago: executing program 4 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0) close(0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.802294936s ago: executing program 1 (id=1112): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x24a00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wg1\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 4.421717082s ago: executing program 5 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x2, 0x7ffffffe, 0x10000, 0x2, 0x8, 0x400007, {0x1, 0x200000000000001, 0x6, 0xed65, 0x200000000004, 0x3, 0xffff, 0x101, 0x8, 0x1000, 0x848a, 0x0, 0x0, 0x1, 0xe}}}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 4.091486095s ago: executing program 0 (id=1114): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getpriority(0x1, r0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f000000202000050000003e"], 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000100)=0xff) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) 4.060515968s ago: executing program 4 (id=1115): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x6, 0x74a4, 0xd, 0x0, 0x9, 0xe, 0x8, 0x9, 0xc3, 0x5, 0x2c, 0x1, 0x5, 0xfb, 0xa, [0x3, 0x400]}}) 3.863316548s ago: executing program 4 (id=1116): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x802, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_mixed}, {@utf8no}, {@fat=@quiet}, {@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}]}, 0x27, 0x33f, &(0x7f0000002f40)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x3800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3.167882216s ago: executing program 1 (id=1117): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$vsock_stream(0x28, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.893785722s ago: executing program 4 (id=1118): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x9, &(0x7f00000003c0)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000240)={&(0x7f0000000540)=""/204, 0xcc}) 1.655121386s ago: executing program 5 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$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") memfd_create(0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) r5 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000050000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 1.654559886s ago: executing program 4 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r2, 0xff, 0x7, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x4, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f0000000000)="79ecabbd54b7b753197ce73d17b43a57e42bb16db418717a1bfc9e3e25c0e4664605745ed3aa191593d287a87a1769109eb36c0b4af377df", 0x38}, {&(0x7f0000000440)="99a111fb84cf8f9c402349b4fcf1198cc71f87387c150639b887775a4b0a529d8fc13748845cde70892a8a66522b60e0c02d44145da4822a46eb1548856cb3be3b42df6c85f71df61dde6c3b20fc1cd3d94ebf52f2589594932b7e6627a56d076ad0b087375d031ab5b79b1ffbce0d7b90b4de9a48e6879ee18957f062aa6d3deb9ff155a5d6dbc6a6225458a92f96ac419e482ff2f5dbf4d4f82180b54e1005567a0d31a07aff0647e65001beca27e3666f383d4cf5ab11c9c5747f", 0xbc}, {&(0x7f0000000500)="843886155613f9dcbacc23b932b321dfa8ec94bab09e0238cdbf35f709405ac71aaa5ff666fe32cd5273ad3a9679dfb3c5007b887015306552cde762c7ee7a98f990afefb819a941af17b02686e25a6b358582e0be449819961c4fe84bde9b7da8277e18c09d6ae62c3b866031b05c697a88b88cdc8ce359a3532a6912893f4b742a1d154078290de0da5c429a8bdd1e838d4c62dc", 0x95}, {0x0}, {&(0x7f0000000080)}], 0x6, 0x0, 0x0, 0x48010}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000740)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 0s ago: executing program 5 (id=1121): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x0, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x1, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xb8c00000, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x100, 0x8, 0x800006, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x9d0d, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0xc, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x4, 0x9, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c63, 0x7, 0x6, 0x8, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc]}, 0x45c) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@test_dummy_encryption}]}, 0xfe, 0x24d, &(0x7f0000000300)="$eJzs3T9oJGUcBuB3Znc9k1vk1EYQ/4CIaCCcnWBzNgoHcgQRQYWIiI2SCDHBLrGysdBaJZVNEDujpaQJNopgFTVFbAQNFgYLLVZ2J5GYrEaTdSfePA/MzszOfPv7hp33m21mNkBjXUpyJUkryVSSTpLi8A53V9Ol/dXVic3ZpNd74qdisF+1XjlodzHJSpKHkmyURV5qJ0vrz+z8svXYfW8udu59f/3pibEe5L7dne3H99679sZHVx9c+uKrH64VuZLun45r9Ioh77WL5Jb/otg5UbTr7gH/xMxrH37dz/2tSe4Z5L+TMtWX99bCDRudPPDuX7V9+8cvbx9nX4HR6/U6/WvgSg9onDJJN0U5naRaLsvp6eo3/DetyfLl+YVXp16cX5x7oe6RChiVbrL96CcXPr54JP/ft6r8A/8Dk6dr1s//kzNr3/aX91oj7hNwPt1Rzfr5n3pu+f7IPzSO/ENzyT80l/xDc8k/NJf8Q3PJP1zHOn+/Wf6huY7l/666ewSMi+s/NNfh/AMAzdK7UPcdyEBd6h5/AAAAAAAAAAAAAAAAAACA41YnNmcPpnHV/OydZPeRJO1h9VuD/yNObhy8Tv5c9Hf7Q1E1O5Nna37m4Qc1331903f11v/8znrrL88lK68nudxuHz//iv3z7/RuPmF75/kzFviXiiPrDz813vpH/bZWb/2rW8mn/fHn8rDxp8xtg/nw8ad78iOWT/TKr2f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbm9wAAAP//yY5tdQ==") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r1 = open$dir(0x0, 0x28000, 0x0) r2 = openat(r1, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143441, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80a) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x400000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(r3) fanotify_mark(r4, 0x1, 0x48001059, r5, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) mlockall(0x2) prlimit64(0x0, 0x1, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) openat(r0, &(0x7f0000000080)='./file1\x00', 0x181042, 0x184) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) unshare(0x2a040700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 67.692682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.100994][ T4287] F2FS-fs (loop2): invalid crc value [ 68.266389][ T4287] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.313198][ T4302] fs-verity (loop0, inode 16): Error -4 building Merkle tree [ 68.373358][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 68.502785][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.546521][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.584437][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.593947][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.765645][ T23] usb 5-1: config 0 descriptor?? [ 68.792643][ T4287] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.811525][ T4287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.830599][ T23] hub 5-1:0.0: USB hub found [ 69.179101][ T23] hub 5-1:0.0: 1 port detected [ 69.850843][ T4353] device syzkaller0 entered promiscuous mode [ 69.953036][ T4327] hub 5-1:0.0: activate --> -90 [ 70.157063][ T7] usb 5-1: USB disconnect, device number 2 [ 70.162609][ T4250] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 71.327184][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333831][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.138154][ T4384] hub 8-0:1.0: USB hub found [ 72.147351][ T4384] hub 8-0:1.0: 1 port detected [ 75.875569][ T4425] device erspan0 entered promiscuous mode [ 75.888705][ T4428] loop4: detected capacity change from 0 to 16 [ 76.059581][ T4428] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.153876][ T4433] loop1: detected capacity change from 0 to 16 [ 76.442204][ T4433] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.710202][ T4439] attempt to access beyond end of device [ 76.710202][ T4439] loop1: rw=524288, want=34359738392, limit=16 [ 76.722499][ T4439] attempt to access beyond end of device [ 76.722499][ T4439] loop1: rw=0, want=34359738368, limit=16 [ 76.735035][ T26] audit: type=1800 audit(1760734180.637:2): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 78.530188][ T4448] loop2: detected capacity change from 0 to 32768 [ 78.607190][ T4448] [ 78.607190][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.607190][ T4448] [ 78.628950][ T4448] [ 78.628950][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.628950][ T4448] [ 78.639989][ T4448] [ 78.639989][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.639989][ T4448] [ 78.650915][ T4448] [ 78.650915][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.650915][ T4448] [ 78.661655][ T4448] [ 78.661655][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.661655][ T4448] [ 78.684190][ T278] [ 78.684190][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.684190][ T278] [ 79.004140][ T4448] [ 79.004140][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.004140][ T4448] [ 79.017577][ T4448] [ 79.017577][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.017577][ T4448] [ 79.028075][ T4448] [ 79.028075][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.028075][ T4448] [ 79.057568][ T278] [ 79.057568][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.057568][ T278] [ 79.832282][ T4465] loop1: detected capacity change from 0 to 4096 [ 80.314527][ T4195] [ 80.314527][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.314527][ T4195] [ 80.604181][ T4465] ntfs3: Unknown parameter 'windows_names' [ 80.652741][ T4195] [ 80.652741][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.652741][ T4195] [ 80.779193][ T4470] loop4: detected capacity change from 0 to 4096 [ 80.840484][ T4470] ntfs3: loop4: try to read out of volume at offset 0x1ffc00 [ 80.927669][ T4470] ntfs3: loop4: Failed to load $MFT. [ 80.950409][ T4478] loop0: detected capacity change from 0 to 16 [ 81.086243][ T4478] erofs: (device loop0): mounted with root inode @ nid 36. [ 81.880664][ T4491] attempt to access beyond end of device [ 81.880664][ T4491] loop0: rw=524288, want=34359738392, limit=16 [ 81.892692][ T4491] attempt to access beyond end of device [ 81.892692][ T4491] loop0: rw=0, want=34359738368, limit=16 [ 81.905253][ T26] audit: type=1800 audit(1760734185.807:3): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.50" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 82.556081][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 82.649639][ T4502] loop0: detected capacity change from 0 to 2048 [ 82.991438][ T4507] loop2: detected capacity change from 0 to 4096 [ 83.565643][ T4502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.652144][ T4502] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 83.765559][ T4508] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 84.913747][ T4535] loop2: detected capacity change from 0 to 16 [ 84.979829][ T4535] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.123922][ T4533] loop4: detected capacity change from 0 to 4096 [ 85.205314][ T4537] attempt to access beyond end of device [ 85.205314][ T4537] loop2: rw=524288, want=34359738392, limit=16 [ 85.217149][ T4537] attempt to access beyond end of device [ 85.217149][ T4537] loop2: rw=0, want=34359738368, limit=16 [ 85.229812][ T26] audit: type=1800 audit(1760734189.127:4): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 85.584920][ T4533] ntfs3: loop4: try to read out of volume at offset 0x1ffc00 [ 85.606665][ T4533] ntfs3: loop4: Failed to load $MFT. [ 87.129158][ T1324] cfg80211: failed to load regulatory.db [ 87.386585][ T4556] hub 2-0:1.0: USB hub found [ 87.405691][ T4556] hub 2-0:1.0: 1 port detected [ 88.330567][ T4564] loop2: detected capacity change from 0 to 4096 [ 88.628566][ T4566] xt_hashlimit: max too large, truncated to 1048576 [ 88.637011][ T4566] No such timeout policy "syz1" [ 88.938730][ C0] sched: RT throttling activated [ 90.323289][ T4591] loop0: detected capacity change from 0 to 16 [ 90.424842][ T4591] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.962627][ T4598] process 'syz.4.78' launched './file0' with NULL argv: empty string added [ 91.042159][ T4596] attempt to access beyond end of device [ 91.042159][ T4596] loop0: rw=524288, want=34359738392, limit=16 [ 91.054016][ T4596] attempt to access beyond end of device [ 91.054016][ T4596] loop0: rw=0, want=34359738368, limit=16 [ 91.068851][ T26] audit: type=1800 audit(1760734194.967:5): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.79" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 91.721521][ T4595] device syzkaller0 entered promiscuous mode [ 94.278247][ T4635] loop2: detected capacity change from 0 to 40427 [ 94.343987][ T4635] F2FS-fs (loop2): invalid crc value [ 94.412870][ T4635] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.453758][ T4635] F2FS-fs (loop2): Start checkpoint disabled! [ 94.472053][ T4635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 94.741594][ T4649] device syzkaller0 entered promiscuous mode [ 95.112070][ T4649] device syzkaller0 left promiscuous mode [ 95.465704][ T4328] attempt to access beyond end of device [ 95.465704][ T4328] loop2: rw=2049, want=40984, limit=40427 [ 95.848442][ T4667] loop4: detected capacity change from 0 to 4096 [ 98.413753][ T4690] loop4: detected capacity change from 0 to 40427 [ 98.474866][ T4690] F2FS-fs (loop4): invalid crc value [ 98.636663][ T4690] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.665654][ T4690] F2FS-fs (loop4): Start checkpoint disabled! [ 98.817890][ T4690] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 100.417885][ T4311] attempt to access beyond end of device [ 100.417885][ T4311] loop4: rw=2049, want=40976, limit=40427 [ 100.482832][ T4317] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 101.241055][ T4317] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.502615][ T4317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.511707][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.560582][ T4317] usb 3-1: Product: syz [ 101.565127][ T4317] usb 3-1: Manufacturer: syz [ 101.716628][ T4317] usb 3-1: can't set config #1, error -71 [ 101.726487][ T4317] usb 3-1: USB disconnect, device number 2 [ 101.850589][ T4734] No such timeout policy "syz0" [ 102.566890][ T4733] loop2: detected capacity change from 0 to 16 [ 102.612609][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.075298][ T4741] loop0: detected capacity change from 0 to 40427 [ 103.414839][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 103.885024][ T4741] F2FS-fs (loop0): invalid crc value [ 103.907397][ T4741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.939117][ T4741] F2FS-fs (loop0): Start checkpoint disabled! [ 103.948307][ T4741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 104.112909][ T4236] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 104.983961][ T4236] usb 2-1: config 0 has no interface number 0 [ 105.255239][ T4236] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 105.283855][ T4752] tipc: Started in network mode [ 105.284768][ T4236] usb 2-1: config 0 interface 196 has no altsetting 0 [ 105.289031][ T4752] tipc: Node identity 7e1e54357dc4, cluster identity 4711 [ 105.347006][ T4752] tipc: Enabled bearer , priority 0 [ 105.447296][ T4752] tipc: Resetting bearer [ 105.497684][ T4370] attempt to access beyond end of device [ 105.497684][ T4370] loop0: rw=2049, want=40976, limit=40427 [ 105.814080][ T4751] tipc: Disabling bearer [ 106.003669][ T2306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.766670][ T4766] capability: warning: `syz.4.130' uses deprecated v2 capabilities in a way that may be insecure [ 106.802635][ T2306] usb 3-1: Using ep0 maxpacket: 32 [ 106.839631][ T4766] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 106.942869][ T2306] usb 3-1: config index 0 descriptor too short (expected 60699, got 27) [ 106.983952][ T2306] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 107.267970][ T2306] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 107.288108][ T2306] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 107.342581][ T2306] usb 3-1: Product: syz [ 107.379412][ T2306] usb 3-1: Manufacturer: syz [ 107.399750][ T2306] usb 3-1: SerialNumber: syz [ 107.439081][ T2306] usb 3-1: config 0 descriptor?? [ 107.579945][ T2306] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 107.672788][ T4236] usb 2-1: string descriptor 0 read error: -71 [ 107.679891][ T4236] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 108.194695][ T4760] loop2: detected capacity change from 0 to 16 [ 108.252599][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.265668][ T4236] usb 2-1: config 0 descriptor?? [ 108.275624][ T4760] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.437315][ T4236] usb 2-1: can't set config #0, error -71 [ 108.492806][ T4236] usb 2-1: USB disconnect, device number 2 [ 108.513844][ T4791] loop1: detected capacity change from 0 to 1024 [ 108.643748][ T4368] usb 3-1: Failed to submit usb control message: -110 [ 108.651031][ T4368] usb 3-1: unable to send the bmi data to the device: -110 [ 108.667329][ T4368] usb 3-1: unable to get target info from device [ 108.684121][ T26] audit: type=1326 audit(1760734212.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 108.703053][ T4368] usb 3-1: could not get target info (-110) [ 108.715417][ T4760] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 108.747257][ T4368] usb 3-1: could not probe fw (-110) [ 108.748225][ T4760] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -38 in[52, 4044] out[1851] [ 108.770773][ T26] audit: type=1326 audit(1760734212.617:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 108.854336][ T4760] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 108.884714][ T26] audit: type=1326 audit(1760734212.617:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 109.119789][ T4243] usb 3-1: USB disconnect, device number 3 [ 109.192573][ T26] audit: type=1326 audit(1760734212.617:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 109.220356][ T26] audit: type=1326 audit(1760734212.617:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 109.243911][ T26] audit: type=1326 audit(1760734212.967:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 109.281270][ T26] audit: type=1326 audit(1760734212.967:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 109.480620][ T4190] hfsplus: walked past end of dir [ 109.575219][ T4190] hfsplus: xattr search failed [ 109.844893][ T4820] tipc: Started in network mode [ 109.849824][ T4820] tipc: Node identity 8e517f24831b, cluster identity 4711 [ 110.015443][ T4820] tipc: Enabled bearer , priority 0 [ 110.075024][ T4820] tipc: Resetting bearer [ 110.107931][ T4819] tipc: Disabling bearer [ 112.233081][ T4860] loop3: detected capacity change from 0 to 2048 [ 112.335085][ T4860] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.345854][ T4860] NILFS (loop3): mounting unchecked fs [ 112.388941][ T4860] NILFS (loop3): recovery complete [ 112.581359][ T26] audit: type=1800 audit(1760734216.447:13): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 112.668321][ T4863] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.589121][ T4881] xt_hashlimit: max too large, truncated to 1048576 [ 113.596094][ T4881] No such timeout policy "syz1" [ 115.199505][ T4888] tipc: Started in network mode [ 115.242965][ T4888] tipc: Node identity 92e13c9463c6, cluster identity 4711 [ 115.269098][ T4886] loop3: detected capacity change from 0 to 4096 [ 115.294307][ T4888] tipc: Enabled bearer , priority 0 [ 115.510080][ T4887] tipc: Disabling bearer [ 115.524917][ T4886] ntfs3: loop3: try to read out of volume at offset 0x1ffc00 [ 115.569123][ T4886] ntfs3: loop3: Failed to load $MFT. [ 117.460942][ T4911] Zero length message leads to an empty skb [ 118.968001][ T4946] hub 8-0:1.0: USB hub found [ 118.976123][ T4946] hub 8-0:1.0: 1 port detected [ 120.146177][ T4952] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 120.175497][ T4952] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 120.181479][ T4952] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 120.181479][ T4952] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 120.229467][ T4952] CUSE: DEVNAME unspecified [ 121.594320][ T4963] loop0: detected capacity change from 0 to 4096 [ 121.629564][ T4962] loop4: detected capacity change from 0 to 4096 [ 121.724464][ T4965] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.737517][ T4962] ntfs3: loop4: try to read out of volume at offset 0x1ffc00 [ 121.789810][ T4962] ntfs3: loop4: Failed to load $MFT. [ 121.793737][ T26] audit: type=1800 audit(1760734225.687:14): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.177" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.251743][ T4963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.262988][ T4963] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.282644][ T26] audit: type=1804 audit(1760734228.147:15): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.177" name="/newroot/41/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 126.774882][ T4968] syz.0.177 (4968) used greatest stack depth: 19520 bytes left [ 126.785278][ T4998] loop3: detected capacity change from 0 to 512 [ 126.843918][ T5000] ptrace attach of "./syz-executor exec"[4192] was attempted by " \x09 ¢ã9OÇRù\x1b)\x09\x09K÷\x0dÐ8çÿÆåS›–9áõœÞ&Ƶ×K\x07Š^Ã4å®\x09Œéîpwªš†~ˆ3Iué÷4ƒ¶È/¦xÊÿÙùÛ*xiØXde&ø‰¯C¦`€W\x22†R$IßFlc+5p$?˜œÎ8ôeäa\x0c !ÖS¥R ‚·¥ Žùñºéy\x09PpAØ`B\x0cVd²y!±MÁÛˆ’ý2Ð [ 127.398343][ T4998] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.184: casefold flag without casefold feature [ 127.651315][ T4998] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.184: couldn't read orphan inode 15 (err -117) [ 127.677831][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.680639][ T5028] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 129.761984][ T5026] loop2: detected capacity change from 0 to 4096 [ 129.771866][ T5028] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 129.838008][ T5028] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 129.838008][ T5028] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 129.884698][ T5026] ntfs3: loop2: try to read out of volume at offset 0x1ffc00 [ 129.919987][ T5026] ntfs3: loop2: Failed to load $MFT. [ 130.631747][ T5028] CUSE: DEVNAME unspecified [ 130.814427][ T5051] loop0: detected capacity change from 0 to 512 [ 131.807285][ T5051] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 132.163317][ T5051] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 132.493239][ T5051] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.196: attempt to clear invalid blocks 2 len 1 [ 132.588526][ T5051] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 132.658494][ T5051] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.196: invalid indirect mapped block 1819239214 (level 0) [ 132.765342][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874823][ T5051] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.196: invalid indirect mapped block 1819239214 (level 1) [ 132.899929][ T5051] EXT4-fs (loop0): 1 truncate cleaned up [ 132.908060][ T5051] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 133.397124][ T5075] loop4: detected capacity change from 0 to 4096 [ 133.980750][ T5075] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 134.256233][ T5092] loop0: detected capacity change from 0 to 512 [ 134.266061][ T5092] EXT4-fs (loop0): Ignoring removed oldalloc option [ 134.272813][ T5092] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.286266][ T5092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.346665][ T5092] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 134.360148][ T5092] EXT4-fs (loop0): 1 truncate cleaned up [ 134.365873][ T5092] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 134.442696][ T5092] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 134.488033][ T5090] loop1: detected capacity change from 0 to 4096 [ 134.558486][ T5090] ntfs3: loop1: try to read out of volume at offset 0x1ffc00 [ 134.603719][ T5090] ntfs3: loop1: Failed to load $MFT. [ 135.390389][ T5107] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 135.419951][ T5107] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 135.426738][ T5107] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 135.426738][ T5107] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 135.443057][ T5107] CUSE: DEVNAME unspecified [ 135.810574][ T5114] loop4: detected capacity change from 0 to 40427 [ 135.887274][ T5114] F2FS-fs (loop4): invalid crc value [ 135.914035][ T5114] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.943936][ T5114] F2FS-fs (loop4): Start checkpoint disabled! [ 135.962241][ T5114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 136.153406][ T4183] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 137.579212][ T144] attempt to access beyond end of device [ 137.579212][ T144] loop4: rw=2049, want=40984, limit=40427 [ 138.262752][ T4583] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.119559][ T4583] usb 1-1: device descriptor read/64, error -71 [ 141.066910][ T5176] loop0: detected capacity change from 0 to 1024 [ 141.102184][ T5176] EXT4-fs (loop0): Invalid want_extra_isize 3 [ 141.272379][ T5165] loop2: detected capacity change from 0 to 4096 [ 142.082015][ T5165] ntfs3: loop2: try to read out of volume at offset 0x1ffc00 [ 142.893245][ T5165] ntfs3: loop2: Failed to load $MFT. [ 144.612244][ T5202] tipc: Enabling of bearer rejected, failed to enable media [ 146.288394][ T5227] loop3: detected capacity change from 0 to 4096 [ 148.077987][ T5247] tipc: Enabling of bearer rejected, failed to enable media [ 148.142979][ T5254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.236'. [ 148.157795][ T5252] loop0: detected capacity change from 0 to 512 [ 148.206824][ T5261] loop1: detected capacity change from 0 to 512 [ 148.242309][ T5252] EXT4-fs (loop0): Ignoring removed orlov option [ 148.288732][ T5269] loop2: detected capacity change from 0 to 128 [ 148.297622][ T5252] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.239: corrupted in-inode xattr [ 148.314798][ T5261] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.330338][ T5261] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.347338][ T5252] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.239: couldn't read orphan inode 15 (err -117) [ 148.361987][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 148.891340][ T5273] loop4: detected capacity change from 0 to 4096 [ 148.934739][ T5269] EXT4-fs (loop2): Ignoring removed orlov option [ 149.204792][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 149.390271][ T5269] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.592044][ T5280] loop0: detected capacity change from 0 to 512 [ 149.738413][ T5284] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 149.782675][ T5284] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 150.590706][ T5284] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 150.590706][ T5284] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 150.643629][ T5284] CUSE: DEVNAME unspecified [ 151.496277][ T5280] EXT4-fs (loop0): Test dummy encryption mode enabled [ 151.532999][ T5280] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 151.546585][ T5280] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 151.613288][ T5280] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 154.431547][ T5306] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 154.743253][ T5315] tipc: Enabling of bearer rejected, failed to enable media [ 158.977019][ T5358] overlayfs: missing 'lowerdir' [ 159.036810][ T5357] loop3: detected capacity change from 0 to 32768 [ 159.139533][ T5357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.264 (5357) [ 159.321343][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop3 [ 159.504000][ T5357] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.513141][ T5357] BTRFS error (device loop3): superblock checksum mismatch [ 159.524635][ T5357] BTRFS error (device loop3): open_ctree failed: -22 [ 159.580842][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop3 [ 160.744407][ T5371] tipc: Enabling of bearer rejected, failed to enable media [ 161.034711][ T5374] loop0: detected capacity change from 0 to 4096 [ 161.101060][ T5374] ntfs3: loop0: try to read out of volume at offset 0x1ffc00 [ 161.131031][ T5374] ntfs3: loop0: Failed to load $MFT. [ 162.532533][ T5390] loop2: detected capacity change from 0 to 1024 [ 162.862213][ T5390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.245124][ T5404] overlayfs: missing 'lowerdir' [ 165.188902][ T5416] loop2: detected capacity change from 0 to 32768 [ 165.633865][ T5416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.278 (5416) [ 165.752667][ T5416] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.761489][ T5416] BTRFS error (device loop2): superblock checksum mismatch [ 165.774392][ T5416] BTRFS error (device loop2): open_ctree failed: -22 [ 166.003814][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop2 [ 166.284432][ T5427] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 167.166813][ T5427] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 167.205485][ T5427] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 167.205485][ T5427] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 167.226754][ T5427] CUSE: DEVNAME unspecified [ 167.454499][ T5441] tipc: Enabling of bearer rejected, failed to enable media [ 169.714177][ T5465] overlayfs: missing 'lowerdir' [ 170.189113][ T5463] loop0: detected capacity change from 0 to 32768 [ 170.280887][ T5463] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.321111][ T5463] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.426303][ T5463] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 170.461762][ T2306] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 170.471014][ T2306] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 170.633463][ T2306] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 162ms [ 170.663956][ T2306] gfs2: fsid=syz:syz.0: jid=0: Done [ 170.680855][ T5463] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 171.681303][ T5477] loop4: detected capacity change from 0 to 32768 [ 171.855684][ T5477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.294 (5477) [ 171.933605][ T5477] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 171.942588][ T5477] BTRFS error (device loop4): superblock checksum mismatch [ 172.033072][ T5477] BTRFS error (device loop4): open_ctree failed: -22 [ 173.822722][ T5484] loop4: detected capacity change from 0 to 32768 [ 174.770346][ T5494] hub 8-0:1.0: USB hub found [ 174.775386][ T5494] hub 8-0:1.0: 1 port detected [ 175.028501][ T5501] ODEBUG: Out of memory. ODEBUG disabled [ 176.702969][ T5524] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 176.720735][ T5524] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 176.861164][ T5524] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 176.861164][ T5524] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 176.880477][ T5524] CUSE: DEVNAME unspecified [ 176.978253][ T5529] overlayfs: missing 'lowerdir' [ 178.440730][ T5541] loop0: detected capacity change from 0 to 256 [ 178.510095][ T5541] exfat: Deprecated parameter 'namecase' [ 178.606372][ T5541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6d645eb, utbl_chksum : 0xe619d30d) [ 178.621556][ T5541] exFAT-fs (loop0): failed to load alloc-bitmap [ 178.628473][ T5541] exFAT-fs (loop0): failed to recognize exfat type [ 178.895551][ T5545] xt_hashlimit: max too large, truncated to 1048576 [ 178.902357][ T5545] No such timeout policy "syz1" [ 179.132200][ T5541] loop0: detected capacity change from 0 to 32768 [ 179.163420][ T5541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.313 (5541) [ 179.232905][ T5541] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.241640][ T5541] BTRFS info (device loop0): using free space tree [ 179.248247][ T5541] BTRFS info (device loop0): has skinny extents [ 179.725332][ T5567] loop1: detected capacity change from 0 to 4096 [ 180.660479][ T5541] BTRFS info (device loop0): enabling ssd optimizations [ 180.703205][ T5579] loop1: detected capacity change from 0 to 16 [ 181.092916][ T5579] erofs: (device loop1): mounted with root inode @ nid 36. [ 181.580866][ T5584] attempt to access beyond end of device [ 181.580866][ T5584] loop1: rw=524288, want=34359738392, limit=16 [ 181.592995][ T5584] attempt to access beyond end of device [ 181.592995][ T5584] loop1: rw=0, want=34359738368, limit=16 [ 181.614071][ T26] audit: type=1800 audit(1760734285.507:16): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.318" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 182.355536][ T5591] loop1: detected capacity change from 0 to 4096 [ 182.476053][ T5591] ntfs3: loop1: try to read out of volume at offset 0x1ffc00 [ 182.505405][ T5591] ntfs3: loop1: Failed to load $MFT. [ 184.853279][ T5625] overlayfs: missing 'lowerdir' [ 185.516600][ T5634] xt_hashlimit: max too large, truncated to 1048576 [ 185.523463][ T5634] No such timeout policy "syz1" [ 186.689255][ T4583] Bluetooth: hci4: command 0x0406 tx timeout [ 186.722927][ T4583] Bluetooth: hci1: command 0x0406 tx timeout [ 186.759406][ T4583] Bluetooth: hci0: command 0x0406 tx timeout [ 186.788529][ T4583] Bluetooth: hci3: command 0x0406 tx timeout [ 186.813586][ T4583] Bluetooth: hci2: command 0x0406 tx timeout [ 187.604313][ T5647] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 187.616381][ T5647] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 187.622364][ T5647] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 187.622364][ T5647] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 187.638366][ T5647] CUSE: DEVNAME unspecified [ 187.734132][ T5653] loop3: detected capacity change from 0 to 16 [ 187.784159][ T5653] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.998767][ T5658] attempt to access beyond end of device [ 188.998767][ T5658] loop3: rw=524288, want=34359738392, limit=16 [ 189.010872][ T5658] attempt to access beyond end of device [ 189.010872][ T5658] loop3: rw=0, want=34359738368, limit=16 [ 189.036820][ T26] audit: type=1800 audit(1760734292.927:17): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.337" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 190.554570][ T5673] loop0: detected capacity change from 0 to 32768 [ 191.974540][ T5673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.341 (5673) [ 191.991509][ T5673] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 192.000344][ T5673] BTRFS error (device loop0): superblock checksum mismatch [ 192.008252][ T5673] BTRFS error (device loop0): open_ctree failed: -22 [ 192.426445][ T5680] xt_hashlimit: max too large, truncated to 1048576 [ 192.433508][ T5680] No such timeout policy "syz1" [ 193.104245][ T5685] overlayfs: missing 'lowerdir' [ 194.233354][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438426][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop0 [ 194.757418][ T5700] loop0: detected capacity change from 0 to 16 [ 195.554359][ T5700] erofs: (device loop0): mounted with root inode @ nid 36. [ 196.131072][ T5709] attempt to access beyond end of device [ 196.131072][ T5709] loop0: rw=524288, want=34359738392, limit=16 [ 196.143515][ T5709] attempt to access beyond end of device [ 196.143515][ T5709] loop0: rw=0, want=34359738368, limit=16 [ 196.157586][ T26] audit: type=1800 audit(1760734300.057:18): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.351" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 198.073466][ T5731] xt_hashlimit: max too large, truncated to 1048576 [ 198.080368][ T5731] No such timeout policy "syz1" [ 199.151663][ T5736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.160494][ T5736] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.927086][ T5755] loop4: detected capacity change from 0 to 16 [ 200.950795][ T5755] erofs: (device loop4): mounted with root inode @ nid 36. [ 201.866836][ T5762] attempt to access beyond end of device [ 201.866836][ T5762] loop4: rw=524288, want=34359738392, limit=16 [ 202.166335][ T5762] attempt to access beyond end of device [ 202.166335][ T5762] loop4: rw=0, want=34359738368, limit=16 [ 202.302526][ T26] audit: type=1800 audit(1760734306.197:19): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.365" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 203.792710][ T5782] xt_hashlimit: max too large, truncated to 1048576 [ 203.829585][ T5782] No such timeout policy "syz1" [ 205.110871][ T5800] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.119797][ T5800] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.143891][ T5805] loop0: detected capacity change from 0 to 32768 [ 206.172676][ T5801] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 206.199535][ T5805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (5805) [ 206.226375][ T5805] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 206.235327][ T5805] BTRFS error (device loop0): superblock checksum mismatch [ 206.243040][ T5805] BTRFS error (device loop0): open_ctree failed: -22 [ 206.258872][ T5801] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 206.267369][ T5801] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 206.267369][ T5801] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 206.283303][ T5801] CUSE: DEVNAME unspecified [ 206.880798][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop0 [ 208.264548][ T5831] loop3: detected capacity change from 0 to 16 [ 208.322679][ T5831] erofs: (device loop3): mounted with root inode @ nid 36. [ 208.627280][ T5835] attempt to access beyond end of device [ 208.627280][ T5835] loop3: rw=524288, want=34359738392, limit=16 [ 208.805465][ T5835] attempt to access beyond end of device [ 208.805465][ T5835] loop3: rw=0, want=34359738368, limit=16 [ 208.817554][ T26] audit: type=1800 audit(1760734312.717:20): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.385" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 208.871848][ T5839] xt_hashlimit: max too large, truncated to 1048576 [ 208.878710][ T5839] No such timeout policy "syz1" [ 210.895678][ T5856] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.904656][ T5856] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.042894][ T5867] loop0: detected capacity change from 0 to 32768 [ 213.392803][ T5867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.392 (5867) [ 213.604494][ T5867] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 213.613374][ T5867] BTRFS error (device loop0): superblock checksum mismatch [ 213.647218][ T5869] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 213.654557][ T5867] BTRFS error (device loop0): open_ctree failed: -22 [ 213.666388][ T5869] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 213.674214][ T5869] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 213.674214][ T5869] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 213.689712][ T5869] CUSE: DEVNAME unspecified [ 213.949631][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop0 [ 214.806760][ T5884] xt_hashlimit: max too large, truncated to 1048576 [ 214.813620][ T5884] No such timeout policy "syz1" [ 218.338743][ T5911] loop0: detected capacity change from 0 to 16 [ 218.434193][ T5911] erofs: (device loop0): mounted with root inode @ nid 36. [ 219.093446][ T5920] attempt to access beyond end of device [ 219.093446][ T5920] loop0: rw=524288, want=34359738392, limit=16 [ 219.200251][ T5920] attempt to access beyond end of device [ 219.200251][ T5920] loop0: rw=0, want=34359738368, limit=16 [ 219.282519][ T26] audit: type=1800 audit(1760734323.177:21): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.407" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 220.108970][ T5931] xt_hashlimit: max too large, truncated to 1048576 [ 220.115966][ T5931] No such timeout policy "syz1" [ 222.377532][ T5941] loop3: detected capacity change from 0 to 32768 [ 222.426811][ T5941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.413 (5941) [ 222.662559][ T5941] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 222.671352][ T5941] BTRFS error (device loop3): superblock checksum mismatch [ 222.694469][ T5941] BTRFS error (device loop3): open_ctree failed: -22 [ 223.608579][ T4333] udevd[4333]: incorrect btrfs checksum on /dev/loop3 [ 224.287714][ T5964] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 224.312897][ T5964] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 224.319963][ T5964] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 224.319963][ T5964] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 224.335594][ T5964] CUSE: DEVNAME unspecified [ 225.321167][ T5973] xt_hashlimit: max too large, truncated to 1048576 [ 225.328309][ T5973] No such timeout policy "syz1" [ 226.405866][ T5982] loop2: detected capacity change from 0 to 16 [ 226.496277][ T5982] erofs: (device loop2): mounted with root inode @ nid 36. [ 227.710979][ T5988] loop3: detected capacity change from 0 to 32768 [ 227.799210][ T5988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.428 (5988) [ 227.816306][ T5988] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 227.825265][ T5988] BTRFS error (device loop3): superblock checksum mismatch [ 227.834441][ T5988] BTRFS error (device loop3): open_ctree failed: -22 [ 228.156237][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop3 [ 228.331014][ T5997] attempt to access beyond end of device [ 228.331014][ T5997] loop2: rw=524288, want=34359738392, limit=16 [ 228.343171][ T5997] attempt to access beyond end of device [ 228.343171][ T5997] loop2: rw=0, want=34359738368, limit=16 [ 228.356890][ T26] audit: type=1800 audit(1760734332.257:22): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.426" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 231.938346][ T6032] xt_hashlimit: max too large, truncated to 1048576 [ 231.945230][ T6032] No such timeout policy "syz1" [ 232.983940][ T6039] loop4: detected capacity change from 0 to 16 [ 233.509817][ T6046] loop3: detected capacity change from 0 to 32768 [ 233.519361][ T6048] overlayfs: missing 'lowerdir' [ 233.696527][ T6039] erofs: (device loop4): mounted with root inode @ nid 36. [ 233.797470][ T6046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.440 (6046) [ 234.622817][ T6046] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 234.631572][ T6046] BTRFS error (device loop3): superblock checksum mismatch [ 234.660371][ T6046] BTRFS error (device loop3): open_ctree failed: -22 [ 235.096241][ T6068] attempt to access beyond end of device [ 235.096241][ T6068] loop4: rw=524288, want=34359738392, limit=16 [ 235.108056][ T6068] attempt to access beyond end of device [ 235.108056][ T6068] loop4: rw=0, want=34359738368, limit=16 [ 235.312944][ T26] audit: type=1800 audit(1760734339.017:23): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.443" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 235.980976][ T6080] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 236.028689][ T6080] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 236.055348][ T6080] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 236.055348][ T6080] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 236.071305][ T6080] CUSE: DEVNAME unspecified [ 236.536163][ T6087] xt_hashlimit: max too large, truncated to 1048576 [ 236.545375][ T6087] No such timeout policy "syz1" [ 239.735391][ T6103] overlayfs: missing 'lowerdir' [ 240.959582][ T6108] loop3: detected capacity change from 0 to 32768 [ 241.018935][ T6108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.459 (6108) [ 241.033962][ T6108] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 241.042912][ T6108] BTRFS error (device loop3): superblock checksum mismatch [ 241.050473][ T6108] BTRFS error (device loop3): open_ctree failed: -22 [ 242.025733][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop3 [ 242.301594][ T6124] xt_hashlimit: max too large, truncated to 1048576 [ 242.310320][ T6124] No such timeout policy "syz1" [ 247.496172][ T6158] loop1: detected capacity change from 0 to 32768 [ 247.564568][ T6158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.473 (6158) [ 247.612358][ T6158] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 247.621300][ T6158] BTRFS error (device loop1): superblock checksum mismatch [ 247.632145][ T6158] BTRFS error (device loop1): open_ctree failed: -22 [ 247.756340][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop1 [ 248.423824][ T6172] xt_hashlimit: max too large, truncated to 1048576 [ 248.430819][ T6172] No such timeout policy "syz1" [ 250.590010][ T6186] loop2: detected capacity change from 0 to 16 [ 250.804928][ T6186] erofs: (device loop2): mounted with root inode @ nid 36. [ 251.297221][ T6199] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 251.343693][ T6199] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 251.354226][ T6199] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 251.354226][ T6199] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 251.371039][ T6199] CUSE: DEVNAME unspecified [ 251.441589][ T6200] attempt to access beyond end of device [ 251.441589][ T6200] loop2: rw=524288, want=34359738392, limit=16 [ 251.562689][ T6200] attempt to access beyond end of device [ 251.562689][ T6200] loop2: rw=0, want=34359738368, limit=16 [ 251.611020][ T26] audit: type=1800 audit(1760734355.507:24): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 252.602016][ T6204] overlayfs: missing 'workdir' [ 255.657207][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.392414][ T6231] xt_hashlimit: max too large, truncated to 1048576 [ 256.402241][ T6231] No such timeout policy "syz1" [ 258.515347][ T6249] overlayfs: missing 'workdir' [ 261.727748][ T6274] loop3: detected capacity change from 0 to 16 [ 261.787013][ T6274] erofs: (device loop3): mounted with root inode @ nid 36. [ 263.323369][ T6286] xt_hashlimit: max too large, truncated to 1048576 [ 263.324336][ T6286] No such timeout policy "syz1" [ 264.587634][ T6292] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 264.637820][ T6292] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 264.644290][ T6292] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 264.644290][ T6292] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 264.663891][ T6292] CUSE: DEVNAME unspecified [ 264.996699][ T6301] overlayfs: missing 'workdir' [ 267.551922][ T6316] loop2: detected capacity change from 0 to 32768 [ 267.702049][ T6316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.513 (6316) [ 267.822074][ T6316] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 267.830912][ T6316] BTRFS error (device loop2): superblock checksum mismatch [ 267.852638][ T6316] BTRFS error (device loop2): open_ctree failed: -22 [ 267.954218][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop2 [ 269.969317][ T6339] hub 8-0:1.0: USB hub found [ 269.974885][ T6339] hub 8-0:1.0: 1 port detected [ 271.101968][ T6347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 272.574348][ T6352] tipc: Enabling of bearer rejected, failed to enable media [ 276.659008][ T6389] loop4: detected capacity change from 0 to 4096 [ 277.007706][ T6389] ntfs3: loop4: try to read out of volume at offset 0x1ffc00 [ 277.056381][ T6389] ntfs3: loop4: Failed to load $MFT. [ 277.857536][ T6408] tipc: Enabled bearer , priority 0 [ 277.876997][ T6411] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 277.909751][ T6411] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 277.916213][ T6411] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 277.916213][ T6411] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 277.932191][ T6411] CUSE: DEVNAME unspecified [ 277.957760][ T6408] device syzkaller0 entered promiscuous mode [ 278.070679][ T6408] tipc: Resetting bearer [ 278.127290][ T6403] tipc: Resetting bearer [ 278.158127][ T6403] tipc: Disabling bearer [ 280.858288][ T6437] loop3: detected capacity change from 0 to 2048 [ 280.910239][ T6437] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.920018][ T6437] NILFS (loop3): mounting unchecked fs [ 280.958430][ T6437] NILFS (loop3): recovery complete [ 281.438820][ T6438] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.466286][ T26] audit: type=1800 audit(1760734385.367:25): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 282.951049][ T6452] loop2: detected capacity change from 0 to 1024 [ 283.416072][ T6458] hub 8-0:1.0: USB hub found [ 283.421642][ T6458] hub 8-0:1.0: 1 port detected [ 284.567572][ T6461] loop2: detected capacity change from 0 to 32768 [ 284.648757][ T6461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.550 (6461) [ 284.719358][ T6461] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 284.728358][ T6461] BTRFS error (device loop2): superblock checksum mismatch [ 284.736426][ T6461] BTRFS error (device loop2): open_ctree failed: -22 [ 285.031751][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop2 [ 286.828133][ T6486] loop1: detected capacity change from 0 to 2048 [ 287.473049][ T6486] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.482720][ T6486] NILFS (loop1): mounting unchecked fs [ 287.495326][ T6486] NILFS (loop1): recovery complete [ 287.513746][ T6487] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.534425][ T26] audit: type=1800 audit(1760734391.437:26): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.558" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 290.018447][ T6510] loop4: detected capacity change from 0 to 2048 [ 290.806268][ T6512] loop0: detected capacity change from 0 to 32768 [ 290.825572][ T6510] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 290.835258][ T6510] NILFS (loop4): mounting unchecked fs [ 290.858632][ T6510] NILFS (loop4): recovery complete [ 290.916237][ T4298] udevd[4298]: incorrect nilfs2 checksum on /dev/loop4 [ 290.960219][ T6515] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.008466][ T6512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.564 (6512) [ 291.032119][ T6512] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 291.040911][ T6512] BTRFS error (device loop0): superblock checksum mismatch [ 291.048839][ T6512] BTRFS error (device loop0): open_ctree failed: -22 [ 291.759074][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop0 [ 293.125079][ T6537] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 294.043889][ T6538] loop0: detected capacity change from 0 to 2048 [ 294.563431][ T6543] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 294.712086][ T6543] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 294.735234][ T6543] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 294.735234][ T6543] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR" [ 294.737306][ T6538] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 294.760276][ T6538] NILFS (loop0): mounting unchecked fs [ 296.036322][ T6543] CUSE: DEVNAME unspecified [ 296.292859][ T6538] NILFS (loop0): recovery complete [ 296.298672][ T6538] NILFS (loop0): error -4 creating segctord thread [ 296.769350][ T6565] loop4: detected capacity change from 0 to 32768 [ 296.815767][ T4284] udevd[4284]: incorrect nilfs2 checksum on /dev/loop0 [ 297.040808][ T6565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.577 (6565) [ 297.395176][ T4333] udevd[4333]: incorrect btrfs checksum on /dev/loop4 [ 298.426918][ T4333] udevd[4333]: incorrect btrfs checksum on /dev/loop4 [ 298.478535][ T6580] loop1: detected capacity change from 0 to 256 [ 298.526545][ T6565] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 298.535506][ T6565] BTRFS error (device loop4): superblock checksum mismatch [ 298.692712][ T6565] BTRFS error (device loop4): open_ctree failed: -22 [ 298.719267][ T6580] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8000323b, utbl_chksum : 0xe619d30d) [ 298.810940][ T6589] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 300.226289][ T26] audit: type=1800 audit(1760734404.127:27): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.583" name="file2" dev="loop1" ino=1048591 res=0 errno=0 [ 301.022506][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 304.039392][ T6624] loop2: detected capacity change from 0 to 32768 [ 304.134469][ T6624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.596 (6624) [ 304.149642][ T6624] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 304.158523][ T6624] BTRFS error (device loop2): superblock checksum mismatch [ 304.168752][ T6624] BTRFS error (device loop2): open_ctree failed: -22 [ 304.559960][ T6632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 304.979840][ T6628] loop1: detected capacity change from 0 to 4096 [ 305.262824][ T6628] ntfs3: loop1: try to read out of volume at offset 0x1ffc00 [ 305.274375][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop2 [ 305.332504][ T6628] ntfs3: loop1: Failed to load $MFT. [ 306.734017][ T6646] loop1: detected capacity change from 0 to 2048 [ 307.029159][ T6646] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 307.084113][ T6646] NILFS (loop1): mounting unchecked fs [ 307.533107][ T6646] NILFS (loop1): recovery complete [ 307.541626][ T6651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.692601][ T4906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 308.333086][ T4906] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 309.044053][ T4906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.535406][ T6675] hub 8-0:1.0: USB hub found [ 309.535799][ T6675] hub 8-0:1.0: 1 port detected [ 310.197438][ T4906] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.232106][ T4906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 311.286196][ T6690] loop4: detected capacity change from 0 to 2048 [ 311.512647][ T4906] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 311.523250][ T4906] usb 1-1: can't read configurations, error -71 [ 311.542929][ T6690] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 311.626013][ T6690] NILFS (loop4): mounting unchecked fs [ 311.651954][ T6690] NILFS (loop4): recovery complete [ 311.670273][ T6697] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.675935][ T6696] netlink: 'syz.0.619': attribute type 5 has an invalid length. [ 311.731448][ T6696] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.740843][ T6696] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.749609][ T6696] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.758473][ T6696] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.822675][ T6696] batman_adv: batadv0: Adding interface: vxlan0 [ 311.830008][ T6696] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.855499][ T6696] batman_adv: batadv0: Interface activated: vxlan0 [ 312.197140][ T6708] loop4: detected capacity change from 0 to 512 [ 312.256920][ T6708] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 312.331005][ T4284] udevd[4284]: incorrect ext4 checksum on /dev/loop4 [ 312.705885][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.772520][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 312.819717][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 312.890783][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.082530][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 313.113427][ T6714] loop1: detected capacity change from 0 to 512 [ 313.159653][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.203585][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.252426][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.292520][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.310333][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.328306][ T7] usb 5-1: config 0 descriptor?? [ 313.336547][ T6714] EXT4-fs (loop1): Ignoring removed orlov option [ 313.362314][ T6714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 313.385063][ T7] hub 5-1:0.0: USB hub found [ 313.402738][ T6714] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.624: bg 0: block 248: padding at end of block bitmap is not set [ 313.420060][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.427426][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.436358][ T6700] device bridge_slave_0 entered promiscuous mode [ 313.455035][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.466239][ T6714] Quota error (device loop1): write_blk: dquota write failed [ 313.477346][ T6714] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 313.488326][ T6714] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.624: Failed to acquire dquot type 1 [ 313.501203][ T6714] EXT4-fs (loop1): 1 truncate cleaned up [ 313.508110][ T6714] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=inode,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,dax=never,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 313.529417][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.539918][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.553752][ T6700] device bridge_slave_1 entered promiscuous mode [ 313.578508][ T6714] EXT4-fs (loop1): Unrecognized mount option "„²3”[átDÛuñxéèCŠvè‹ŸºYHÕ" or missing value [ 313.602699][ T7] hub 5-1:0.0: 1 port detected [ 313.693315][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.737553][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.812142][ T4250] Bluetooth: hci5: command 0x0409 tx timeout [ 314.916739][ T6730] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.624: iget: bad i_size value: 360287970189639690 [ 316.185648][ T4243] usb 5-1: USB disconnect, device number 3 [ 316.188352][ T1107] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 316.296194][ T6700] team0: Port device team_slave_0 added [ 316.364652][ T6743] loop2: detected capacity change from 0 to 512 [ 316.409259][ T6700] team0: Port device team_slave_1 added [ 316.535901][ T6743] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: writeback. [ 316.593248][ T6743] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.089017][ T4250] Bluetooth: hci5: command 0x041b tx timeout [ 317.097144][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.534627][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.571631][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.651860][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.741002][ T6762] xt_hashlimit: max too large, truncated to 1048576 [ 317.748684][ T6762] No such timeout policy "syz1" [ 318.293004][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.363468][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.572214][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.432985][ T4250] Bluetooth: hci5: command 0x040f tx timeout [ 319.439113][ T6764] loop1: detected capacity change from 0 to 65536 [ 319.676016][ T6764] XFS (loop1): Mounting V5 Filesystem [ 319.758006][ T6775] loop4: detected capacity change from 0 to 4096 [ 319.846093][ T6700] device hsr_slave_0 entered promiscuous mode [ 319.888234][ T6764] XFS (loop1): Ending clean mount [ 319.902442][ T6764] XFS (loop1): Quotacheck needed: Please wait. [ 319.972197][ T6700] device hsr_slave_1 entered promiscuous mode [ 320.005725][ T6764] XFS (loop1): Quotacheck: Done. [ 320.012884][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.020479][ T6700] Cannot create hsr debugfs directory [ 321.485133][ T4250] Bluetooth: hci5: command 0x0419 tx timeout [ 322.206555][ T6811] loop4: detected capacity change from 0 to 2048 [ 322.299816][ T6811] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.309709][ T6811] NILFS (loop4): mounting unchecked fs [ 322.368946][ T6811] NILFS (loop4): recovery complete [ 322.829450][ T4284] udevd[4284]: incorrect nilfs2 checksum on /dev/loop4 [ 322.879038][ T6813] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.881734][ T26] audit: type=1800 audit(1760734426.777:28): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.643" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 323.024336][ T4190] XFS (loop1): Unmounting Filesystem [ 323.565462][ T6824] loop2: detected capacity change from 0 to 4096 [ 324.987709][ T6700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.018679][ T6841] loop4: detected capacity change from 0 to 1024 [ 325.099889][ T6700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.282241][ T6700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.341617][ T6700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.373658][ T6841] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 325.631817][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 325.682631][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.657'. [ 325.738774][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.657'. [ 325.996962][ T6877] xt_hashlimit: max too large, truncated to 1048576 [ 326.004518][ T6877] No such timeout policy "syz1" [ 326.678798][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.698183][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.721678][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.771079][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.825773][ T6700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.846352][ T6700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.106272][ T6889] loop4: detected capacity change from 0 to 4096 [ 327.290500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.317312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.375213][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.382431][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.495036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.505971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.515395][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.522556][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.530679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.540743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.551514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.686429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.089818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.282714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.337913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.444046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.461023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.493243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.587125][ T4369] device hsr_slave_0 left promiscuous mode [ 329.617523][ T4369] device hsr_slave_1 left promiscuous mode [ 329.697934][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.712173][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.077487][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.244898][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.463546][ T4369] device bridge_slave_1 left promiscuous mode [ 330.470001][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.634501][ T4369] device bridge_slave_0 left promiscuous mode [ 330.700850][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.743998][ T4369] device veth1_macvtap left promiscuous mode [ 330.750542][ T4369] device veth0_macvtap left promiscuous mode [ 331.018415][ T4369] device veth1_vlan left promiscuous mode [ 331.121364][ T4369] device veth0_vlan left promiscuous mode [ 331.637730][ T6925] loop0: detected capacity change from 0 to 16 [ 331.708411][ T6925] erofs: (device loop0): mounted with root inode @ nid 36. [ 331.741908][ T6927] loop4: detected capacity change from 0 to 4096 [ 331.966987][ T6930] attempt to access beyond end of device [ 331.966987][ T6930] loop0: rw=524288, want=34359738392, limit=16 [ 331.979241][ T6930] attempt to access beyond end of device [ 331.979241][ T6930] loop0: rw=0, want=34359738368, limit=16 [ 332.002422][ T26] audit: type=1800 audit(1760734435.887:29): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.671" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 333.058817][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 333.073825][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 333.319407][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.798390][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.327435][ T4369] bond0 (unregistering): Released all slaves [ 334.992596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.011516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.039454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.229067][ T6958] tipc: Enabled bearer , priority 0 [ 335.286181][ T6958] tipc: Resetting bearer [ 335.320517][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.346670][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.397989][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.427166][ T6956] tipc: Disabling bearer [ 336.893773][ T6994] xt_hashlimit: max too large, truncated to 1048576 [ 336.901364][ T6994] No such timeout policy "syz1" [ 337.595825][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.605716][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.704073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.714079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.770464][ T6700] device veth0_vlan entered promiscuous mode [ 337.793730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.185852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.481316][ T6700] device veth1_vlan entered promiscuous mode [ 338.730449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.038967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.106117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.195878][ T6700] device veth0_macvtap entered promiscuous mode [ 339.284080][ T6700] device veth1_macvtap entered promiscuous mode [ 339.560996][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.678675][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.772373][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.821687][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.853482][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.921081][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.963041][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.012435][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.981844][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.004221][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.043278][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.057829][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.081324][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.115427][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.449387][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.085981][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.116691][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.127753][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.139237][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.149945][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.160733][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.180309][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.194029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.212142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.240773][ T6700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.252444][ T6700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.261588][ T6700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.271414][ T6700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.552090][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.595552][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.670535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.778272][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.832093][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.159641][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.623879][ T7054] xt_hashlimit: max too large, truncated to 1048576 [ 343.631481][ T7054] No such timeout policy "syz1" [ 344.345149][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 345.163505][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 345.284313][ T4228] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 345.634236][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.969408][ T4228] usb 3-1: config 0 descriptor?? [ 345.989124][ T7059] loop1: detected capacity change from 0 to 4096 [ 346.157611][ T7059] ntfs3: loop1: try to read out of volume at offset 0x1ffc00 [ 346.846517][ T4243] Bluetooth: hci5: command 0x0405 tx timeout [ 346.862933][ T7059] ntfs3: loop1: Failed to load $MFT. [ 346.912734][ T4228] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 347.036880][ T7072] loop5: detected capacity change from 0 to 512 [ 347.146719][ T4228] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 347.262046][ T4228] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 348.872394][ T7072] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 348.976580][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 349.053119][ T7091] loop2: detected capacity change from 0 to 8 [ 350.457340][ T7109] xt_hashlimit: max too large, truncated to 1048576 [ 350.465539][ T7109] No such timeout policy "syz1" [ 351.425456][ T7116] loop4: detected capacity change from 0 to 32768 [ 351.495862][ T7116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.711 (7116) [ 351.518102][ T7116] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 351.526905][ T7116] BTRFS info (device loop4): turning on sync discard [ 351.533644][ T7116] BTRFS info (device loop4): allowing degraded mounts [ 351.540421][ T7116] BTRFS info (device loop4): setting nodatasum [ 351.546715][ T7116] BTRFS info (device loop4): force zlib compression, level 3 [ 351.554139][ T7116] BTRFS info (device loop4): allowing degraded mounts [ 351.560922][ T7116] BTRFS info (device loop4): using free space tree [ 351.567467][ T7116] BTRFS info (device loop4): has skinny extents [ 351.702023][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 352.334873][ T7143] loop0: detected capacity change from 0 to 4096 [ 352.440954][ T7143] ntfs3: loop0: try to read out of volume at offset 0x1ffc00 [ 352.490150][ T7143] ntfs3: loop0: Failed to load $MFT. [ 352.537594][ T7150] loop2: detected capacity change from 0 to 512 [ 353.027280][ T7150] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.716: casefold flag without casefold feature [ 353.131411][ T7150] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.716: couldn't read orphan inode 15 (err -117) [ 353.449123][ T7150] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.521222][ T7167] input: syz1 as /devices/virtual/input/input5 [ 355.771880][ T7188] loop4: detected capacity change from 0 to 16 [ 355.982407][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 356.339742][ T4189] Bluetooth: Wrong link type (-22) [ 356.462700][ T13] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 356.522173][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.584667][ T13] usb 1-1: config 0 descriptor?? [ 356.655629][ T13] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 357.602520][ T13] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 357.627253][ T7219] comedi comedi1: dmm32at: a I/O base address must be specified [ 357.662988][ T7222] loop5: detected capacity change from 0 to 256 [ 357.841251][ T7222] FAT-fs (loop5): Directory bread(block 64) failed [ 357.888143][ T7222] FAT-fs (loop5): Directory bread(block 65) failed [ 357.920771][ T13] gspca_cpia1: usb_control_msg 01, error -71 [ 357.927738][ T13] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 357.943907][ T13] usb 1-1: USB disconnect, device number 6 [ 357.956991][ T7222] FAT-fs (loop5): Directory bread(block 66) failed [ 358.147913][ T7222] FAT-fs (loop5): Directory bread(block 67) failed [ 358.335661][ T7222] FAT-fs (loop5): Directory bread(block 68) failed [ 358.537205][ T7222] FAT-fs (loop5): Directory bread(block 69) failed [ 358.639196][ T7222] FAT-fs (loop5): Directory bread(block 70) failed [ 358.702496][ T7222] FAT-fs (loop5): Directory bread(block 71) failed [ 358.709289][ T7222] FAT-fs (loop5): Directory bread(block 72) failed [ 358.771839][ T7222] FAT-fs (loop5): Directory bread(block 73) failed [ 359.809947][ T7251] loop0: detected capacity change from 0 to 16 [ 361.624249][ T7257] loop5: detected capacity change from 0 to 131072 [ 361.673368][ T7257] F2FS-fs (loop5): Test dummy encryption mode enabled [ 361.697242][ T7257] F2FS-fs (loop5): invalid crc value [ 361.827004][ T7276] loop0: detected capacity change from 0 to 128 [ 361.885595][ T7257] F2FS-fs (loop5): Found nat_bits in checkpoint [ 361.959272][ T7257] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 362.310104][ T7276] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.663289][ T7276] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.769049][ T7306] loop2: detected capacity change from 0 to 256 [ 363.800762][ T7305] loop4: detected capacity change from 0 to 512 [ 363.840681][ T7257] fscrypt (loop5, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 364.062658][ T7285] syz.5.737 (7285): drop_caches: 2 [ 364.159586][ T7305] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 364.213487][ T7305] EXT4-fs (loop4): orphan cleanup on readonly fs [ 364.274112][ T7305] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.746: iget: bad i_size value: 38620345925642 [ 364.333484][ T7305] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.746: couldn't read orphan inode 15 (err -117) [ 364.353141][ T7305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.609430][ T7326] loop0: detected capacity change from 0 to 8192 [ 367.510731][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 367.826381][ T7359] loop1: detected capacity change from 0 to 2048 [ 369.211102][ T7380] overlayfs: statfs failed on './file0' [ 372.030964][ T7424] device syzkaller0 entered promiscuous mode [ 372.201901][ T7431] loop4: detected capacity change from 0 to 4096 [ 372.585569][ T7431] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 372.776727][ T7428] loop2: detected capacity change from 0 to 4096 [ 374.413923][ T4192] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 374.423014][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 374.439944][ T4192] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 375.931006][ T7491] loop5: detected capacity change from 0 to 1024 [ 377.438684][ T7502] loop0: detected capacity change from 0 to 4096 [ 377.503343][ T7502] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 377.596992][ T7509] loop1: detected capacity change from 0 to 16 [ 377.613769][ T7502] ntfs3: loop0: Inode r=19 is not in use! [ 377.619709][ T7502] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 377.722204][ T7509] erofs: (device loop1): mounted with root inode @ nid 36. [ 377.936553][ T7515] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 379.186334][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.618509][ T7531] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 381.724317][ T7544] hub 8-0:1.0: USB hub found [ 381.732174][ T7544] hub 8-0:1.0: 1 port detected [ 382.672022][ T7560] netlink: 72 bytes leftover after parsing attributes in process `syz.1.805'. [ 384.869463][ T7583] loop2: detected capacity change from 0 to 2048 [ 385.032278][ T7598] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.330106][ T7607] device syzkaller0 entered promiscuous mode [ 385.800229][ T7614] loop4: detected capacity change from 0 to 2048 [ 386.459459][ T7614] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 386.469189][ T7614] NILFS (loop4): mounting unchecked fs [ 386.486111][ T7614] NILFS (loop4): recovery complete [ 386.515541][ T7617] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.530514][ T26] audit: type=1800 audit(1760734490.427:30): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.815" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 387.005475][ T7623] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 387.031026][ T7623] Remounting filesystem read-only [ 388.039835][ T7625] loop2: detected capacity change from 0 to 4096 [ 390.236156][ T7631] loop4: detected capacity change from 0 to 256 [ 391.629856][ T7656] loop1: detected capacity change from 0 to 512 [ 392.633448][ T7656] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.828: casefold flag without casefold feature [ 393.031434][ T7662] hub 8-0:1.0: USB hub found [ 393.036361][ T7662] hub 8-0:1.0: 1 port detected [ 393.064044][ T7656] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.828: couldn't read orphan inode 15 (err -117) [ 393.112771][ T7656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.855527][ T26] audit: type=1804 audit(1760734497.757:31): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.828" name="/newroot/183/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 394.874689][ T26] audit: type=1800 audit(1760734497.757:32): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.828" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 395.275256][ T7697] loop0: detected capacity change from 0 to 40427 [ 395.302456][ T7699] loop5: detected capacity change from 0 to 256 [ 395.332546][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 396.072643][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.189296][ T7697] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 396.197130][ T7697] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 396.219181][ T7699] FAT-fs (loop5): Directory bread(block 64) failed [ 396.226134][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 396.250083][ T23] usb 5-1: can't read configurations, error -71 [ 396.262470][ T7697] F2FS-fs (loop0): invalid crc value [ 396.268012][ T7699] FAT-fs (loop5): Directory bread(block 65) failed [ 396.288340][ T7699] FAT-fs (loop5): Directory bread(block 66) failed [ 396.308547][ T7699] FAT-fs (loop5): Directory bread(block 67) failed [ 396.339047][ T7699] FAT-fs (loop5): Directory bread(block 68) failed [ 396.345882][ T7699] FAT-fs (loop5): Directory bread(block 69) failed [ 396.370290][ T7697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 396.422404][ T7697] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 396.429493][ T7697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 396.438474][ T7699] FAT-fs (loop5): Directory bread(block 70) failed [ 396.526826][ T7699] FAT-fs (loop5): Directory bread(block 71) failed [ 396.682710][ T7699] FAT-fs (loop5): Directory bread(block 72) failed [ 396.689306][ T7699] FAT-fs (loop5): Directory bread(block 73) failed [ 397.632429][ T26] audit: type=1800 audit(1760734500.687:33): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.837" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 397.817001][ T7728] loop4: detected capacity change from 0 to 16 [ 397.832121][ T4183] attempt to access beyond end of device [ 397.832121][ T4183] loop0: rw=2049, want=40968, limit=40427 [ 398.127450][ T7728] erofs: (device loop4): mounted with root inode @ nid 36. [ 398.853550][ T26] audit: type=1800 audit(1760734502.757:34): pid=7728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.842" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 405.103875][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.209518][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.347194][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.034226][ T7831] loop4: detected capacity change from 0 to 32768 [ 406.114560][ T7831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.862 (7831) [ 406.132220][ T7831] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 406.141332][ T7831] BTRFS error (device loop4): superblock checksum mismatch [ 406.149122][ T7831] BTRFS error (device loop4): open_ctree failed: -22 [ 406.277490][ T4333] udevd[4333]: incorrect btrfs checksum on /dev/loop4 [ 408.274718][ T7862] loop2: detected capacity change from 0 to 2048 [ 408.576655][ T7862] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 408.586363][ T7862] NILFS (loop2): mounting unchecked fs [ 408.604290][ T7862] NILFS (loop2): recovery complete [ 408.621630][ T7864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.641416][ T26] audit: type=1800 audit(1760734512.537:35): pid=7861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.873" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 408.711751][ T7868] loop1: detected capacity change from 0 to 128 [ 409.339361][ T7875] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 409.347792][ T7875] FAT-fs (loop1): Filesystem has been set read-only [ 409.354991][ T7875] attempt to access beyond end of device [ 409.354991][ T7875] loop1: rw=524288, want=2073, limit=128 [ 409.366587][ T7875] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 409.374557][ T7875] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 409.518271][ T26] audit: type=1800 audit(1760734513.237:36): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.875" name="file2" dev="loop1" ino=1048618 res=0 errno=0 [ 409.812399][ T23] Bluetooth: hci5: command 0x0405 tx timeout [ 409.876340][ T4228] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 409.895086][ T4228] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 409.910733][ T4228] usb 3-1: USB disconnect, device number 4 [ 411.246828][ T7900] loop1: detected capacity change from 0 to 4096 [ 411.390710][ T26] audit: type=1326 audit(1760734515.217:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 413.240384][ T7911] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.269008][ T26] audit: type=1326 audit(1760734515.217:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 413.384521][ T7900] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 413.460513][ T26] audit: type=1326 audit(1760734515.227:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 413.529380][ T7900] Remounting filesystem read-only [ 413.609750][ T26] audit: type=1326 audit(1760734515.227:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 413.656649][ T7921] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 413.737465][ T26] audit: type=1326 audit(1760734515.227:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 413.895218][ T7928] loop1: detected capacity change from 0 to 512 [ 413.922970][ T26] audit: type=1326 audit(1760734515.237:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.009143][ T7928] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.888: bg 0: block 248: padding at end of block bitmap is not set [ 414.033547][ T7928] Quota error (device loop1): write_blk: dquota write failed [ 414.041188][ T26] audit: type=1326 audit(1760734515.247:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.052550][ T7928] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 414.064453][ T26] audit: type=1326 audit(1760734515.247:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.102156][ T26] audit: type=1326 audit(1760734515.277:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.126657][ T26] audit: type=1326 audit(1760734515.287:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.148870][ T26] audit: type=1326 audit(1760734515.287:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 414.171433][ T7928] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.888: Failed to acquire dquot type 1 [ 414.184871][ T7928] EXT4-fs (loop1): 1 truncate cleaned up [ 414.190572][ T7928] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.207476][ T7928] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.563565][ T7937] loop2: detected capacity change from 0 to 32768 [ 414.667995][ T7937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.885 (7937) [ 414.687343][ T7937] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 414.696335][ T7937] BTRFS error (device loop2): superblock checksum mismatch [ 414.711130][ T7937] BTRFS error (device loop2): open_ctree failed: -22 [ 414.790587][ T144] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 414.810583][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 1 [ 414.843991][ T4333] udevd[4333]: incorrect btrfs checksum on /dev/loop2 [ 416.621328][ T7971] xt_hashlimit: max too large, truncated to 1048576 [ 416.628193][ T7971] No such timeout policy "syz1" [ 422.653274][ T8006] loop1: detected capacity change from 0 to 32768 [ 422.716890][ T8006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.902 (8006) [ 422.932701][ T8006] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 422.941453][ T8006] BTRFS error (device loop1): superblock checksum mismatch [ 422.949756][ T8006] BTRFS error (device loop1): open_ctree failed: -22 [ 423.111047][ T8014] loop0: detected capacity change from 0 to 2048 [ 423.202128][ T8014] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 423.211960][ T8014] NILFS (loop0): mounting unchecked fs [ 423.221889][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 423.320769][ T8014] NILFS (loop0): recovery complete [ 423.451218][ T26] audit: type=1800 audit(1760734527.347:48): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.906" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 423.528165][ T8015] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.705480][ T4243] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 423.752540][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 423.769556][ T4284] udevd[4284]: incorrect btrfs checksum on /dev/loop1 [ 424.032548][ T4228] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 425.473613][ T8030] trusted_key: encrypted_key: keyword 'à\w' not recognized [ 425.562538][ T4228] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 425.571670][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 425.604145][ T8030] block device autoloading is deprecated and will be removed. [ 425.636769][ T4228] usb 3-1: Product: syz [ 425.650316][ T4228] usb 3-1: Manufacturer: syz [ 425.655349][ T4228] usb 3-1: SerialNumber: syz [ 425.661985][ T4228] usb 3-1: config 0 descriptor?? [ 425.692607][ T8012] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 425.700276][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 425.828562][ T4228] usb 3-1: USB disconnect, device number 5 [ 425.892431][ T7] usb 1-1: device descriptor read/64, error -71 [ 426.977617][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 427.028851][ T8042] loop2: detected capacity change from 0 to 16 [ 427.192875][ T8042] erofs: (device loop2): mounted with root inode @ nid 36. [ 428.458620][ T26] audit: type=1326 audit(1760734532.357:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 428.545737][ T26] audit: type=1326 audit(1760734532.387:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 428.613013][ T26] audit: type=1326 audit(1760734532.387:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 431.527424][ T8080] program syz.4.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.154043][ T8079] loop4: detected capacity change from 0 to 262144 [ 433.189016][ T8085] loop0: detected capacity change from 0 to 1024 [ 433.209532][ T8079] F2FS-fs (loop4): invalid crc value [ 433.227054][ T8079] F2FS-fs (loop4): Found nat_bits in checkpoint [ 433.271524][ T8079] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 433.358879][ T8085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 433.564276][ T8082] loop5: detected capacity change from 0 to 4096 [ 433.598397][ T8082] ntfs3: Unknown parameter 'windows_names' [ 434.595039][ T8102] loop2: detected capacity change from 0 to 1024 [ 436.814682][ T8099] loop5: detected capacity change from 0 to 32768 [ 437.295457][ T4906] Bluetooth: hci5: command 0x0406 tx timeout [ 437.946432][ T8133] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 438.077988][ T8131] loop0: detected capacity change from 0 to 4096 [ 439.333357][ T8144] loop0: detected capacity change from 0 to 1024 [ 439.367309][ T8144] EXT4-fs (loop0): Ignoring removed bh option [ 439.466653][ T8144] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 439.751866][ T8149] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 439.758683][ T8149] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 439.765720][ T8149] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 439.772887][ T8149] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 439.780293][ T8149] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 439.788093][ T8149] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 439.796104][ T8149] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 439.802989][ T8149] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 439.809691][ T8149] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 439.816656][ T8149] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 439.823504][ T8149] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 439.830269][ T8149] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 439.837229][ T8149] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 439.845531][ T8149] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 439.964638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.863487][ T8154] loop1: detected capacity change from 0 to 64 [ 441.144266][ T8154] hfs: request for non-existent node 131072 in B*Tree [ 441.166374][ T8154] hfs: request for non-existent node 131072 in B*Tree [ 441.855632][ T8160] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 443.417898][ T8166] loop4: detected capacity change from 0 to 16 [ 444.194533][ T8166] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 445.539392][ T8180] loop5: detected capacity change from 0 to 256 [ 445.843613][ T8180] FAT-fs (loop5): Directory bread(block 64) failed [ 445.881712][ T8180] FAT-fs (loop5): Directory bread(block 65) failed [ 445.888989][ T8180] FAT-fs (loop5): Directory bread(block 66) failed [ 445.896527][ T8180] FAT-fs (loop5): Directory bread(block 67) failed [ 445.903542][ T8180] FAT-fs (loop5): Directory bread(block 68) failed [ 445.910468][ T8180] FAT-fs (loop5): Directory bread(block 69) failed [ 445.921022][ T8180] FAT-fs (loop5): Directory bread(block 70) failed [ 445.928173][ T8180] FAT-fs (loop5): Directory bread(block 71) failed [ 445.934897][ T8180] FAT-fs (loop5): Directory bread(block 72) failed [ 445.941472][ T8180] FAT-fs (loop5): Directory bread(block 73) failed [ 447.464291][ T8197] device syzkaller0 entered promiscuous mode [ 447.761744][ T6594] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 448.952516][ T6594] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.967291][ T6594] usb 5-1: config 0 has no interface number 0 [ 448.988088][ T8223] loop2: detected capacity change from 0 to 512 [ 449.006058][ T6594] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 449.026006][ T6594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.044026][ T6594] usb 5-1: config 0 descriptor?? [ 449.049638][ T8223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 449.095117][ T6594] usb 5-1: selecting invalid altsetting 1 [ 449.112618][ T6594] dvb_ttusb_budget: ttusb_init_controller: error [ 449.121872][ T8223] EXT4-fs (loop2): 1 truncate cleaned up [ 449.127616][ T8223] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 449.129913][ T6594] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 449.945859][ T6594] DVB: Unable to find symbol cx22700_attach() [ 449.988938][ T8235] loop1: detected capacity change from 0 to 256 [ 450.054544][ T6594] DVB: Unable to find symbol tda10046_attach() [ 450.060760][ T6594] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 450.898858][ T6594] usb 5-1: USB disconnect, device number 6 [ 450.958747][ T8235] FAT-fs (loop1): Directory bread(block 64) failed [ 451.042299][ T8235] FAT-fs (loop1): Directory bread(block 65) failed [ 451.384466][ T8235] FAT-fs (loop1): Directory bread(block 66) failed [ 451.391658][ T8235] FAT-fs (loop1): Directory bread(block 67) failed [ 451.425328][ T8235] FAT-fs (loop1): Directory bread(block 68) failed [ 451.495706][ T8235] FAT-fs (loop1): Directory bread(block 69) failed [ 451.519428][ T8235] FAT-fs (loop1): Directory bread(block 70) failed [ 451.529986][ T8235] FAT-fs (loop1): Directory bread(block 71) failed [ 451.540893][ T8235] FAT-fs (loop1): Directory bread(block 72) failed [ 451.552487][ T8235] FAT-fs (loop1): Directory bread(block 73) failed [ 452.998889][ T8253] loop1: detected capacity change from 0 to 1024 [ 453.063098][ T8255] device syzkaller0 entered promiscuous mode [ 453.063462][ T8251] loop2: detected capacity change from 0 to 4096 [ 453.149587][ T8251] ntfs3: loop2: try to read out of volume at offset 0x1ffc00 [ 453.179418][ T8251] ntfs3: loop2: Failed to load $MFT. [ 453.186565][ T8253] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 453.192723][ T8257] xt_hashlimit: size too large, truncated to 1048576 [ 453.196862][ T8253] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.440199][ T8253] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,nodiscard,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 454.389667][ T8268] loop4: detected capacity change from 0 to 4096 [ 454.490992][ T8274] loop5: detected capacity change from 0 to 4096 [ 454.527975][ T8268] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.035397][ T8298] xt_hashlimit: max too large, truncated to 1048576 [ 456.042397][ T8298] No such timeout policy "syz1" [ 457.907217][ T8304] device syzkaller0 entered promiscuous mode [ 458.144929][ T8317] loop1: detected capacity change from 0 to 4096 [ 458.468996][ T8317] ntfs3: loop1: try to read out of volume at offset 0x1ffc00 [ 458.518778][ T8317] ntfs3: loop1: Failed to load $MFT. [ 459.698848][ T8333] loop5: detected capacity change from 0 to 128 [ 459.765142][ T8333] qnx6: invalid mount options. [ 462.537395][ T26] audit: type=1326 audit(1760734566.437:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 463.183699][ T26] audit: type=1326 audit(1760734566.437:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 463.373422][ T26] audit: type=1326 audit(1760734566.437:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 463.415657][ T26] audit: type=1326 audit(1760734566.437:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 463.483551][ T8347] xt_hashlimit: max too large, truncated to 1048576 [ 463.491115][ T8347] No such timeout policy "syz1" [ 464.433313][ T26] audit: type=1326 audit(1760734566.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 464.456499][ T26] audit: type=1326 audit(1760734566.437:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 464.499705][ T8353] loop2: detected capacity change from 0 to 1024 [ 464.549242][ T8355] xt_TCPMSS: Only works on TCP SYN packets [ 465.491428][ T8353] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 465.496679][ T26] audit: type=1326 audit(1760734566.437:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 466.113220][ T8353] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.472992][ T26] audit: type=1326 audit(1760734566.437:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707c42bfc9 code=0x7ffc0000 [ 466.483199][ T8353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 466.555853][ T8368] device syzkaller0 entered promiscuous mode [ 466.694659][ T8353] System zones: 0-1, 3-36 [ 466.732742][ T8353] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 468.009168][ T26] audit: type=1326 audit(1760734571.897:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.032542][ T26] audit: type=1326 audit(1760734571.897:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.032893][ T26] audit: type=1326 audit(1760734571.897:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.033401][ T26] audit: type=1326 audit(1760734571.907:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.033641][ T26] audit: type=1326 audit(1760734571.907:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.033972][ T26] audit: type=1326 audit(1760734571.907:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.034282][ T26] audit: type=1326 audit(1760734571.907:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 468.034489][ T26] audit: type=1326 audit(1760734571.907:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.1.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2899ddfc9 code=0x7ffc0000 [ 471.030906][ T8408] loop1: detected capacity change from 0 to 512 [ 471.386163][ T8408] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 472.457644][ T8417] loop0: detected capacity change from 0 to 2048 [ 472.539984][ T8408] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1014: iget: bogus i_mode (5) [ 472.579610][ T8417] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 472.589539][ T8417] NILFS (loop0): mounting unchecked fs [ 472.647925][ T8417] NILFS (loop0): recovery complete [ 472.853594][ T26] audit: type=1800 audit(1760734576.747:68): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1019" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 472.882644][ T8420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.936393][ T8408] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1014: couldn't read orphan inode 15 (err -117) [ 473.033846][ T8408] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 473.047217][ T8408] ext2 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.069741][ T26] audit: type=1800 audit(1760734576.967:69): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1019" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 473.173428][ T8423] device syzkaller0 entered promiscuous mode [ 473.590360][ T8408] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1014: Directory hole found for htree leaf block 0 [ 476.254920][ T8436] loop5: detected capacity change from 0 to 262144 [ 476.525622][ T8436] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.1025 (8436) [ 476.587302][ T8436] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 476.597659][ T8436] BTRFS info (device loop5): metadata ratio 8 [ 476.603853][ T8436] BTRFS info (device loop5): using free space tree [ 476.610378][ T8436] BTRFS info (device loop5): has skinny extents [ 476.616740][ T8436] BTRFS info (device loop5): flagging fs with big metadata feature [ 477.741325][ T8436] BTRFS error (device loop5): open_ctree failed: -12 [ 477.769815][ T4333] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by udevd (4333) [ 479.537589][ T8492] loop2: detected capacity change from 0 to 64 [ 479.851317][ T8492] hfs: unable to parse mount options [ 481.217105][ T8501] loop5: detected capacity change from 0 to 2048 [ 481.662730][ T8501] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.672415][ T8501] NILFS (loop5): mounting unchecked fs [ 481.706148][ T8506] device syzkaller0 entered promiscuous mode [ 481.722560][ T8501] NILFS (loop5): recovery complete [ 481.795752][ T8509] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.893916][ T26] audit: type=1800 audit(1760734585.757:70): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1036" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 482.447873][ T8504] loop4: detected capacity change from 0 to 4096 [ 482.998113][ T8504] ntfs3: loop4: try to read out of volume at offset 0x1ffc00 [ 483.072369][ T8504] ntfs3: loop4: Failed to load $MFT. [ 483.087638][ T8518] loop1: detected capacity change from 0 to 256 [ 483.301249][ T8514] tipc: Started in network mode [ 483.453504][ T8521] loop5: detected capacity change from 0 to 2048 [ 483.857674][ T8518] exfat: Deprecated parameter 'utf8' [ 484.071575][ T8518] exfat: Deprecated parameter 'utf8' [ 484.076461][ T8514] tipc: Node identity e201fd58263e, cluster identity 4711 [ 484.098111][ T8514] tipc: Enabled bearer , priority 0 [ 484.107477][ T8521] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 484.117082][ T8521] NILFS (loop5): mounting unchecked fs [ 484.131099][ T8521] NILFS (loop5): recovery complete [ 484.162638][ T8518] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 484.231738][ T8525] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.234591][ T26] audit: type=1800 audit(1760734588.137:71): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1040" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 484.303045][ T8523] device syzkaller0 entered promiscuous mode [ 484.453276][ T8518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 484.502281][ T26] audit: type=1800 audit(1760734588.377:72): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1040" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 484.628252][ T8518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.456803][ T4906] tipc: Node number set to 3292527960 [ 485.679766][ T8529] tipc: Resetting bearer [ 486.828857][ T8529] tipc: Disabling bearer [ 488.172994][ T8562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 488.351211][ T8563] loop1: detected capacity change from 0 to 2048 [ 489.079608][ T8563] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 489.089252][ T8563] NILFS (loop1): mounting unchecked fs [ 489.101313][ T8563] NILFS (loop1): recovery complete [ 489.122424][ T8564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.140858][ T26] audit: type=1800 audit(1760734593.037:73): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 489.284034][ T8566] tipc: Enabling of bearer rejected, failed to enable media [ 489.428709][ T8570] device syzkaller0 entered promiscuous mode [ 489.603480][ T8569] loop2: detected capacity change from 0 to 4096 [ 489.608260][ T8579] loop5: detected capacity change from 0 to 256 [ 490.496986][ T8591] loop0: detected capacity change from 0 to 256 [ 490.514781][ T8579] exfat: Deprecated parameter 'utf8' [ 490.520132][ T8579] exfat: Deprecated parameter 'utf8' [ 490.531601][ T8579] exfat: Unknown parameter 'keep_last_dots' [ 490.591800][ T8569] ntfs3: loop2: try to read out of volume at offset 0x1ffc00 [ 490.631702][ T8569] ntfs3: loop2: Failed to load $MFT. [ 490.641742][ T8591] FAT-fs (loop0): Directory bread(block 64) failed [ 490.660220][ T8591] FAT-fs (loop0): Directory bread(block 65) failed [ 490.678839][ T8591] FAT-fs (loop0): Directory bread(block 66) failed [ 490.698078][ T8591] FAT-fs (loop0): Directory bread(block 67) failed [ 490.738725][ T8591] FAT-fs (loop0): Directory bread(block 68) failed [ 490.776078][ T8591] FAT-fs (loop0): Directory bread(block 69) failed [ 490.816538][ T8591] FAT-fs (loop0): Directory bread(block 70) failed [ 490.847026][ T8591] FAT-fs (loop0): Directory bread(block 71) failed [ 490.853818][ T8591] FAT-fs (loop0): Directory bread(block 72) failed [ 490.869600][ T8591] FAT-fs (loop0): Directory bread(block 73) failed [ 491.884891][ T8609] loop2: detected capacity change from 0 to 1024 [ 493.023177][ T26] audit: type=1326 audit(1760734596.927:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 493.407347][ T8621] loop4: detected capacity change from 0 to 2048 [ 493.762604][ T8621] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 493.772595][ T8621] NILFS (loop4): mounting unchecked fs [ 494.019167][ T8621] NILFS (loop4): recovery complete [ 494.568350][ T26] audit: type=1326 audit(1760734597.027:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 494.611853][ T8624] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.887830][ T26] audit: type=1326 audit(1760734597.157:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ecba6aa7f code=0x7ffc0000 [ 494.956081][ T8633] loop1: detected capacity change from 0 to 256 [ 494.978274][ T8633] exfat: Deprecated parameter 'namecase' [ 495.319297][ T8633] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 495.509208][ T26] audit: type=1326 audit(1760734597.157:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 495.984280][ T26] audit: type=1326 audit(1760734597.157:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.006568][ T26] audit: type=1326 audit(1760734597.157:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.082586][ T26] audit: type=1326 audit(1760734597.157:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.127935][ T8639] tipc: Enabling of bearer rejected, failed to enable media [ 496.155422][ T8639] device syzkaller0 entered promiscuous mode [ 496.193320][ T26] audit: type=1326 audit(1760734597.157:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.252726][ T8641] loop5: detected capacity change from 0 to 4096 [ 496.317659][ T8641] ntfs3: loop5: try to read out of volume at offset 0x1ffc00 [ 496.387621][ T8641] ntfs3: loop5: Failed to load $MFT. [ 496.427218][ T26] audit: type=1326 audit(1760734597.157:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.495838][ T26] audit: type=1326 audit(1760734597.157:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.524968][ T26] audit: type=1326 audit(1760734597.157:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba6bfc9 code=0x7ffc0000 [ 496.703863][ T8651] loop4: detected capacity change from 0 to 256 [ 496.984949][ T8651] FAT-fs (loop4): Directory bread(block 64) failed [ 496.991555][ T8651] FAT-fs (loop4): Directory bread(block 65) failed [ 497.118733][ T8651] FAT-fs (loop4): Directory bread(block 66) failed [ 497.210325][ T8651] FAT-fs (loop4): Directory bread(block 67) failed [ 497.360837][ T8651] FAT-fs (loop4): Directory bread(block 68) failed [ 497.409209][ T8651] FAT-fs (loop4): Directory bread(block 69) failed [ 497.481826][ T8651] FAT-fs (loop4): Directory bread(block 70) failed [ 497.537089][ T8651] FAT-fs (loop4): Directory bread(block 71) failed [ 497.572411][ T8651] FAT-fs (loop4): Directory bread(block 72) failed [ 497.669158][ T8651] FAT-fs (loop4): Directory bread(block 73) failed [ 500.224289][ T8675] loop1: detected capacity change from 0 to 64 [ 500.253110][ T8677] loop0: detected capacity change from 0 to 2048 [ 500.826684][ T8675] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 501.414767][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.431214][ T8690] tipc: Enabling of bearer rejected, failed to enable media [ 501.556673][ T8690] device syzkaller0 entered promiscuous mode [ 501.576374][ T8692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.732339][ T8699] xt_hashlimit: max too large, truncated to 1048576 [ 501.740109][ T8699] No such timeout policy "syz1" [ 502.643697][ T8705] program syz.5.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.568085][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 503.568100][ T26] audit: type=1804 audit(1760734607.467:113): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1083" name="/newroot/233/bus/file0" dev="loop1" ino=4 res=1 errno=0 [ 504.707131][ T8702] loop5: detected capacity change from 0 to 262144 [ 504.852039][ T8702] F2FS-fs (loop5): invalid crc value [ 504.964309][ T8702] F2FS-fs (loop5): Found nat_bits in checkpoint [ 505.035081][ T8702] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 505.223375][ T8713] xt_TCPMSS: Only works on TCP SYN packets [ 505.898055][ T8720] loop4: detected capacity change from 0 to 2048 [ 506.555756][ T8720] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 506.565453][ T8720] NILFS (loop4): mounting unchecked fs [ 506.577158][ T8720] NILFS (loop4): recovery complete [ 506.611175][ T8721] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.624514][ T26] audit: type=1800 audit(1760734610.527:114): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1093" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 510.148432][ T8742] loop0: detected capacity change from 0 to 256 [ 510.418788][ T8747] tipc: Enabling of bearer rejected, failed to enable media [ 511.293640][ T8749] xt_hashlimit: max too large, truncated to 1048576 [ 511.300547][ T8749] No such timeout policy "syz1" [ 511.309801][ T8747] device syzkaller0 entered promiscuous mode [ 511.513902][ T8742] FAT-fs (loop0): Directory bread(block 64) failed [ 511.562303][ T8742] FAT-fs (loop0): Directory bread(block 65) failed [ 511.629788][ T8742] FAT-fs (loop0): Directory bread(block 66) failed [ 511.752660][ T8742] FAT-fs (loop0): Directory bread(block 67) failed [ 511.760239][ T8742] FAT-fs (loop0): Directory bread(block 68) failed [ 511.767212][ T8742] FAT-fs (loop0): Directory bread(block 69) failed [ 511.778874][ T8742] FAT-fs (loop0): Directory bread(block 70) failed [ 511.785932][ T8742] FAT-fs (loop0): Directory bread(block 71) failed [ 511.793370][ T8742] FAT-fs (loop0): Directory bread(block 72) failed [ 511.819137][ T8742] FAT-fs (loop0): Directory bread(block 73) failed [ 512.242258][ T8759] loop1: detected capacity change from 0 to 8 [ 513.666988][ T8770] loop4: detected capacity change from 0 to 2048 [ 513.968164][ T8770] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 513.979728][ T8770] NILFS (loop4): mounting unchecked fs [ 513.998515][ T8770] NILFS (loop4): recovery complete [ 514.027180][ T8773] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.051493][ T26] audit: type=1800 audit(1760734617.947:115): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1105" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 514.331600][ T8777] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 518.051678][ T8806] loop4: detected capacity change from 0 to 256 [ 518.238676][ T8806] FAT-fs (loop4): Directory bread(block 64) failed [ 518.275074][ T8806] FAT-fs (loop4): Directory bread(block 65) failed [ 518.326525][ T8806] FAT-fs (loop4): Directory bread(block 66) failed [ 518.359595][ T8806] FAT-fs (loop4): Directory bread(block 67) failed [ 518.390039][ T8806] FAT-fs (loop4): Directory bread(block 68) failed [ 518.412252][ T8806] FAT-fs (loop4): Directory bread(block 69) failed [ 518.419040][ T8806] FAT-fs (loop4): Directory bread(block 70) failed [ 518.461410][ T8806] FAT-fs (loop4): Directory bread(block 71) failed [ 518.488809][ T8806] FAT-fs (loop4): Directory bread(block 72) failed [ 518.519179][ T8806] FAT-fs (loop4): Directory bread(block 73) failed [ 520.072367][ T8825] loop5: detected capacity change from 0 to 2048 [ 520.813267][ T8825] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 520.822927][ T8825] NILFS (loop5): mounting unchecked fs [ 520.945747][ T8825] NILFS (loop5): recovery complete [ 521.015192][ T8827] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 521.047763][ T26] audit: type=1800 audit(1760734624.947:116): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1119" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 521.784447][ C1] ------------[ cut here ]------------ [ 521.792163][ C1] WARNING: CPU: 1 PID: 8807 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 521.802263][ C1] Modules linked in: [ 521.806194][ C1] CPU: 1 PID: 8807 Comm: syz.2.1102 Not tainted syzkaller #0 [ 521.813655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.823783][ C1] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 521.830146][ C1] Code: f8 0f 0b e9 f1 fa ff ff e8 81 83 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 70 83 3a f8 0f 0b e9 3c ef ff ff e8 64 83 3a f8 <0f> 0b e9 b8 f2 ff ff e8 88 e7 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 521.849843][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 521.855980][ C1] RAX: ffffffff893d46ec RBX: ffff8880785c8c80 RCX: ffff88801ded8000 [ 521.864137][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.872177][ C1] RBP: ffffc90000dd0ae8 R08: ffff88801ded8000 R09: 0000000000000003 [ 521.880192][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880631fbe00 [ 521.888258][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 521.896326][ C1] FS: 00007f707a6726c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 521.905340][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.911960][ C1] CR2: 0000200000026000 CR3: 0000000074876000 CR4: 00000000003506e0 [ 521.919998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.928019][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 521.936068][ C1] Call Trace: [ 521.939363][ C1] [ 521.942275][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 521.948281][ C1] ? verify_lock_unused+0x140/0x140 [ 521.953562][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 521.958627][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 521.964161][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 521.969642][ C1] __iterate_interfaces+0x243/0x500 [ 521.974905][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 521.981176][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 521.987515][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 521.994595][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 521.999825][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 522.005108][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 522.011204][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 522.017261][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 522.021989][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 522.027196][ C1] hrtimer_run_softirq+0x176/0x240 [ 522.032370][ C1] handle_softirqs+0x328/0x820 [ 522.037163][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 522.042047][ C1] ? do_softirq+0x200/0x200 [ 522.046633][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 522.051884][ C1] __irq_exit_rcu+0x12f/0x220 [ 522.056684][ C1] ? irq_exit_rcu+0x20/0x20 [ 522.061250][ C1] irq_exit_rcu+0x5/0x20 [ 522.065582][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 522.071253][ C1] [ 522.074253][ C1] [ 522.077205][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.083265][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 522.089090][ C1] Code: be ff ff ff ff e8 7c bd 55 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 36 28 5f 08 e8 a1 74 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 d9 0f fe ff 43 80 3c [ 522.108771][ C1] RSP: 0018:ffffc90004837368 EFLAGS: 00000282 [ 522.114918][ C1] RAX: 3ddf5cbae7893a00 RBX: ffff8880b903a340 RCX: 3ddf5cbae7893a00 [ 522.122954][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a4c0 [ 522.130947][ C1] RBP: 1ffff11017227613 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 522.138990][ C1] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: ffff8880b913b088 [ 522.147000][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 522.155058][ C1] finish_task_switch+0x12f/0x640 [ 522.160144][ C1] ? __switch_to_asm+0x34/0x60 [ 522.164992][ C1] __schedule+0x11c3/0x4390 [ 522.169551][ C1] ? release_firmware_map_entry+0x190/0x190 [ 522.175519][ C1] ? __rwlock_init+0x140/0x140 [ 522.180304][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 522.185756][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 522.191069][ C1] preempt_schedule_irq+0xb1/0x150 [ 522.196264][ C1] ? __cond_resched+0xb0/0xb0 [ 522.200989][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 522.206877][ C1] irqentry_exit+0x63/0x70 [ 522.211323][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 522.216867][ C1] RIP: 0010:skb_copy_datagram_iter+0xba/0x1f0 [ 522.222992][ C1] Code: a4 f9 4c 89 ff 89 ee 4c 89 f2 89 d9 45 31 c0 49 c7 c1 70 fd d2 87 6a 00 e8 13 f8 ff ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 e8 0f ce a4 f9 0f 0b e9 7b ff ff ff e8 03 ce a4 f9 0f 0b eb [ 522.242686][ C1] RSP: 0018:ffffc90004837750 EFLAGS: 00000286 [ 522.248784][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 522.256831][ C1] RDX: ffffc9000f033000 RSI: 000000000007ffff RDI: 0000000000080000 [ 522.264859][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff87d2fd70 [ 522.272914][ C1] R10: fffffbfff1ad32b6 R11: 1ffffffff1ad32b5 R12: dffffc0000000000 [ 522.280912][ C1] R13: ffffc90004837d40 R14: 0000000000000000 R15: ffff888055a28500 [ 522.289064][ C1] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 522.294674][ C1] __unix_dgram_recvmsg+0x671/0xd50 [ 522.299904][ C1] ? unix_unhash+0x10/0x10 [ 522.304410][ C1] ? release_firmware_map_entry+0x190/0x190 [ 522.310361][ C1] ? finish_lock_switch+0x12f/0x280 [ 522.315659][ C1] ? mark_lock+0x94/0x320 [ 522.320040][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 522.325146][ C1] ? unix_dgram_sendmsg+0x1890/0x1890 [ 522.330667][ C1] ____sys_recvmsg+0x291/0x580 [ 522.335535][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 522.340734][ C1] ? import_iovec+0x6f/0xa0 [ 522.345325][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 522.350047][ C1] ? __sys_recvmsg+0x250/0x250 [ 522.354896][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 522.359954][ C1] ? do_recvmmsg+0x35c/0x7a0 [ 522.364616][ C1] ? __might_fault+0xb3/0x110 [ 522.369324][ C1] do_recvmmsg+0x344/0x7a0 [ 522.373831][ C1] ? __sys_recvmmsg+0x280/0x280 [ 522.378731][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 522.383839][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 522.388909][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 522.393580][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 522.398817][ C1] do_syscall_64+0x4c/0xa0 [ 522.403286][ C1] ? clear_bhb_loop+0x30/0x80 [ 522.407983][ C1] ? clear_bhb_loop+0x30/0x80 [ 522.412730][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.418646][ C1] RIP: 0033:0x7f707c42bfc9 [ 522.423120][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.442793][ C1] RSP: 002b:00007f707a672038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 522.451229][ C1] RAX: ffffffffffffffda RBX: 00007f707c683090 RCX: 00007f707c42bfc9 [ 522.459257][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 522.467273][ C1] RBP: 00007f707c4aef91 R08: 0000000000000000 R09: 0000000000000000 [ 522.475294][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 522.483321][ C1] R13: 00007f707c683128 R14: 00007f707c683090 R15: 00007fff168f5058 [ 522.491337][ C1] [ 522.494425][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.501723][ C1] CPU: 1 PID: 8807 Comm: syz.2.1102 Not tainted syzkaller #0 [ 522.509113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.519217][ C1] Call Trace: [ 522.522511][ C1] [ 522.525394][ C1] dump_stack_lvl+0x168/0x230 [ 522.530105][ C1] ? show_regs_print_info+0x20/0x20 [ 522.535323][ C1] ? load_image+0x3b0/0x3b0 [ 522.539867][ C1] panic+0x2c9/0x7f0 [ 522.543800][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 522.548329][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 522.554071][ C1] __warn+0x248/0x2b0 [ 522.558073][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 522.563818][ C1] report_bug+0x1b7/0x2e0 [ 522.568188][ C1] handle_bug+0x3a/0x70 [ 522.572388][ C1] exc_invalid_op+0x16/0x40 [ 522.576922][ C1] asm_exc_invalid_op+0x16/0x20 [ 522.581795][ C1] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 522.588150][ C1] Code: f8 0f 0b e9 f1 fa ff ff e8 81 83 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 70 83 3a f8 0f 0b e9 3c ef ff ff e8 64 83 3a f8 <0f> 0b e9 b8 f2 ff ff e8 88 e7 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 522.607760][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 522.613828][ C1] RAX: ffffffff893d46ec RBX: ffff8880785c8c80 RCX: ffff88801ded8000 [ 522.621796][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.629760][ C1] RBP: ffffc90000dd0ae8 R08: ffff88801ded8000 R09: 0000000000000003 [ 522.637728][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880631fbe00 [ 522.645697][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 522.653695][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 522.659427][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 522.665402][ C1] ? verify_lock_unused+0x140/0x140 [ 522.670618][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 522.675649][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 522.681105][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 522.686574][ C1] __iterate_interfaces+0x243/0x500 [ 522.691790][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 522.698053][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 522.704331][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 522.711396][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 522.716613][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 522.721826][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 522.727816][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 522.733793][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 522.738466][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 522.743576][ C1] hrtimer_run_softirq+0x176/0x240 [ 522.748687][ C1] handle_softirqs+0x328/0x820 [ 522.753469][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 522.758314][ C1] ? do_softirq+0x200/0x200 [ 522.762814][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 522.768005][ C1] __irq_exit_rcu+0x12f/0x220 [ 522.772672][ C1] ? irq_exit_rcu+0x20/0x20 [ 522.777192][ C1] irq_exit_rcu+0x5/0x20 [ 522.781441][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 522.787072][ C1] [ 522.789993][ C1] [ 522.792914][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.798882][ C1] RIP: 0010:finish_lock_switch+0x134/0x280 [ 522.804705][ C1] Code: be ff ff ff ff e8 7c bd 55 08 85 c0 74 4a 4d 85 ff 75 66 e9 fe 00 00 00 48 89 df e8 36 28 5f 08 e8 a1 74 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 d9 0f fe ff 43 80 3c [ 522.824306][ C1] RSP: 0018:ffffc90004837368 EFLAGS: 00000282 [ 522.830383][ C1] RAX: 3ddf5cbae7893a00 RBX: ffff8880b903a340 RCX: 3ddf5cbae7893a00 [ 522.838347][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a4c0 [ 522.846318][ C1] RBP: 1ffff11017227613 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 522.854286][ C1] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: ffff8880b913b088 [ 522.862244][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 522.870228][ C1] finish_task_switch+0x12f/0x640 [ 522.875312][ C1] ? __switch_to_asm+0x34/0x60 [ 522.880098][ C1] __schedule+0x11c3/0x4390 [ 522.884628][ C1] ? release_firmware_map_entry+0x190/0x190 [ 522.890537][ C1] ? __rwlock_init+0x140/0x140 [ 522.895312][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 522.900685][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 522.905986][ C1] preempt_schedule_irq+0xb1/0x150 [ 522.911119][ C1] ? __cond_resched+0xb0/0xb0 [ 522.915803][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 522.921610][ C1] irqentry_exit+0x63/0x70 [ 522.926034][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 522.931489][ C1] RIP: 0010:skb_copy_datagram_iter+0xba/0x1f0 [ 522.937573][ C1] Code: a4 f9 4c 89 ff 89 ee 4c 89 f2 89 d9 45 31 c0 49 c7 c1 70 fd d2 87 6a 00 e8 13 f8 ff ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 e8 0f ce a4 f9 0f 0b e9 7b ff ff ff e8 03 ce a4 f9 0f 0b eb [ 522.957182][ C1] RSP: 0018:ffffc90004837750 EFLAGS: 00000286 [ 522.963241][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 522.971662][ C1] RDX: ffffc9000f033000 RSI: 000000000007ffff RDI: 0000000000080000 [ 522.979651][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff87d2fd70 [ 522.987617][ C1] R10: fffffbfff1ad32b6 R11: 1ffffffff1ad32b5 R12: dffffc0000000000 [ 522.995586][ C1] R13: ffffc90004837d40 R14: 0000000000000000 R15: ffff888055a28500 [ 523.003556][ C1] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 523.009103][ C1] __unix_dgram_recvmsg+0x671/0xd50 [ 523.014300][ C1] ? unix_unhash+0x10/0x10 [ 523.018717][ C1] ? release_firmware_map_entry+0x190/0x190 [ 523.024600][ C1] ? finish_lock_switch+0x12f/0x280 [ 523.029788][ C1] ? mark_lock+0x94/0x320 [ 523.034112][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 523.039134][ C1] ? unix_dgram_sendmsg+0x1890/0x1890 [ 523.044501][ C1] ____sys_recvmsg+0x291/0x580 [ 523.049267][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 523.054295][ C1] ? import_iovec+0x6f/0xa0 [ 523.058796][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 523.063475][ C1] ? __sys_recvmsg+0x250/0x250 [ 523.068249][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 523.073282][ C1] ? do_recvmmsg+0x35c/0x7a0 [ 523.077866][ C1] ? __might_fault+0xb3/0x110 [ 523.082531][ C1] do_recvmmsg+0x344/0x7a0 [ 523.086944][ C1] ? __sys_recvmmsg+0x280/0x280 [ 523.091794][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 523.096823][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 523.101842][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 523.106448][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 523.111642][ C1] do_syscall_64+0x4c/0xa0 [ 523.116051][ C1] ? clear_bhb_loop+0x30/0x80 [ 523.120721][ C1] ? clear_bhb_loop+0x30/0x80 [ 523.125390][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.131278][ C1] RIP: 0033:0x7f707c42bfc9 [ 523.135687][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.155282][ C1] RSP: 002b:00007f707a672038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 523.163730][ C1] RAX: ffffffffffffffda RBX: 00007f707c683090 RCX: 00007f707c42bfc9 [ 523.171723][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 523.179702][ C1] RBP: 00007f707c4aef91 R08: 0000000000000000 R09: 0000000000000000 [ 523.187692][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 523.195750][ C1] R13: 00007f707c683128 R14: 00007f707c683090 R15: 00007fff168f5058 [ 523.203734][ C1] [ 523.207092][ C1] Kernel Offset: disabled [ 523.211442][ C1] Rebooting in 86400 seconds..