last executing test programs: 7m47.747329185s ago: executing program 2 (id=872): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0xc000) ioctl$BLKRASET(r2, 0x1262, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) shutdown(r3, 0x1) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140), 0x0, 0x8) syz_emit_ethernet(0x4a, 0x0, 0x0) 7m42.012354781s ago: executing program 2 (id=889): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) 7m37.240697375s ago: executing program 2 (id=903): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x841, 0x0) sendfile(r1, r0, 0x0, 0x2000000000051b7) 7m37.07067796s ago: executing program 2 (id=904): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="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", 0x2000, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7m36.221360548s ago: executing program 2 (id=905): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x50, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m35.721963154s ago: executing program 2 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/67, 0x43, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read(r7, &(0x7f0000000040)=""/138, 0x8a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 7m20.290341082s ago: executing program 32 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/67, 0x43, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read(r7, &(0x7f0000000040)=""/138, 0x8a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 6m8.126644082s ago: executing program 5 (id=1177): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x1fffffe, 0x4) 6m5.774747438s ago: executing program 5 (id=1183): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d", 0x70, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af1", 0x77, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e61", 0x7c, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m3.278873859s ago: executing program 5 (id=1189): r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x3a4, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="011a040e000000"], 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) creat(&(0x7f0000000200)='./bus\x00', 0x268) 6m0.340917324s ago: executing program 5 (id=1197): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x1001) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) epoll_create1(0x0) close(r1) syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x82000) 5m59.095618404s ago: executing program 5 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r3}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000013c0)="bd", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a0103000000000000"], 0x114}}, 0x0) 5m56.983542722s ago: executing program 5 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000640)={{0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0xffff, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 5m56.817567668s ago: executing program 33 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000640)={{0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0xffff, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 15.275093447s ago: executing program 0 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fanotify_init(0x81, 0x40000) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x9) fchdir(r6) timer_settime(r4, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 14.349310536s ago: executing program 0 (id=2225): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x1f5, &(0x7f0000000380)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x6, 0x5, 0x5, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x800011, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x409, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x3, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000380)=0x80000008, 0x4) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000140), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) 11.967552023s ago: executing program 1 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x0) 11.828401598s ago: executing program 1 (id=2233): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x42, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 11.281624685s ago: executing program 1 (id=2235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fanotify_init(0x81, 0x40000) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r5 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x9) fchdir(r6) timer_settime(r4, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 11.083196782s ago: executing program 0 (id=2237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="188d40a823052a78e3000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f00000000c0)='geneve1\x00'}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 9.983151587s ago: executing program 0 (id=2238): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000f80)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df533", 0x3}], 0x1, 0x0, 0x0, 0x11d0}, 0x885) 9.164522024s ago: executing program 0 (id=2240): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) ioctl$I2C_RETRIES(r1, 0x701, 0x80000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c000004004280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @in6={0xa, 0x4e20, 0x200, @private1, 0x7}, @in={0x2, 0x4e22, @private=0xa010101}], 0x58) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 9.163731504s ago: executing program 1 (id=2242): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8.3501592s ago: executing program 6 (id=2244): prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000350000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000280), 0x84000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f657874656e642c76657173696f6e3d3970323030302e4c2c646972656374696f2c63616368653d7265616461686561642c6163636573733d636c69656e742c667363616368652c736d61636b743d7b2f2c40242e2c646f6e745f686173682c6f626a5f757365723dc42b2c000000000000"]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) clock_gettime(0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc01008c000000000025030000000000ff02000000000000000000000000000100"], 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000, 0x0) 7.483917318s ago: executing program 1 (id=2246): r0 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x36}, 0x28) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = dup(r0) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RCREATE(r7, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x20, 0x2, 0x6}, 0x1}}, 0x18) 7.317540974s ago: executing program 6 (id=2248): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="188d40a823052a78e3000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f00000000c0)='geneve1\x00'}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 6.543443249s ago: executing program 1 (id=2249): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0xa7e, 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) 6.537970439s ago: executing program 4 (id=2250): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000f80)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) sendmsg$unix(r5, 0x0, 0x885) 5.730090255s ago: executing program 4 (id=2251): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) 5.626638118s ago: executing program 6 (id=2252): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x20800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0xffffff76, 0x4}) 5.475594433s ago: executing program 6 (id=2254): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 4.506992584s ago: executing program 3 (id=2255): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af1", 0x77, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e61", 0x7c, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.692542941s ago: executing program 0 (id=2256): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040)=0x5, 0x4) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000140)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 3.678588801s ago: executing program 4 (id=2257): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.677787891s ago: executing program 3 (id=2258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8402, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x48d, 0x0, 0x5b}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) inotify_init1(0xc0800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f00000000c0)) 3.555516595s ago: executing program 4 (id=2259): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 3.544886485s ago: executing program 3 (id=2260): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x1f5, &(0x7f0000000380)="$eJzslU3v0kAQxp/d0hb+B+PZiwdJxIOlBU28kOBn8C0eTCQCBi3RQA9CYoifwLs3D34ME85+CINeNDF6UW8ma3a7faG0vAnh4PwShqe7k9nZ2XYWBEH8t3z+9HshfrW+lAFUUIWtx78asQRP+X8s/3hZAvD6wbsP9sLORMs8/xFCbFhfrju/aSAAy52v6v/b4LG+A44rWt8Dg6P1Q3Dc1boHhvtaP0m0KY3jOP2B33MePfO7Urj9gQlPqoY0zXjxGSD3+v0VQ1cPCSFEOtPxZPq04/u90a5CzJIRA1mf82nn/MrNv0mr8isDrVR+6fNydF3dVP08cHhaN8FwS+sbsKPauNJ4SPZ/oZTEN9bu38KeFVFCvRBAMtLfL852wpJLZabOVkaWRXT6LP/s2ZFS3UEw/V0B2OSs37zoRE+X87EESgcLKGzg4Bme287ZWt9o3reXj1vMwufd8mkXTFnbxLFXKo+oP4m3DJdT/SlsJW/UZVEPhs/r48n06mDYeWxpJ/ea615v1FUjCm1+C1TxK6o/nSXxK0W+FrPwohMEIy+08XMjtHkdl6v+x1G7FN4d8ttSaZqJz091d0ZdIfxx9S9VzShMHoWpEgRBHJ2LYKonq74cCX2bxBNCmCdOkyAIgiAIgiAIgiCIf+BvAAAA//+mc00P") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x6, 0x5, 0x5, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x800011, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x409, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x3, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000380)=0x80000008, 0x4) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000140), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) 2.588131376s ago: executing program 4 (id=2261): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000f80)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) sendmsg$unix(r5, 0x0, 0x885) 2.504078239s ago: executing program 3 (id=2262): r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) 1.591406878s ago: executing program 4 (id=2263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="188d40a823052a78e3000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f00000000c0)='geneve1\x00'}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 1.591191618s ago: executing program 3 (id=2264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioprio_set$pid(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1000080002, 0x100000000000088) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.013202697s ago: executing program 3 (id=2265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000002c0)=0x1) 90.355317ms ago: executing program 6 (id=2266): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x3, "fa00114001000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000040)={"fefed563c3d1e9b933c6f8855317cf72f5c5b5d7165b4888fa348d6299523f70", r4}) 0s ago: executing program 6 (id=2267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="0400340028cd76245ed4026c195931685333339330b49e58b521746cfa3d01ceb49203664518f969de26eebac7eb9b92d7b87163dbd885bb4fcd9fa19a96d90cdc91ce64862c5d"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): [ 276.284677][ T6356] loop2: detected capacity change from 0 to 128 [ 277.437746][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 278.196636][ T6364] sctp: failed to load transform for md5: -2 [ 278.205659][ T6373] binder: BINDER_SET_CONTEXT_MGR already set [ 278.212073][ T6373] binder: 6370:6373 ioctl 4018620d 200000000040 returned -16 [ 278.572591][ T6385] loop1: detected capacity change from 0 to 512 [ 278.662181][ T6385] EXT4-fs (loop1): Ignoring removed bh option [ 278.668490][ T6385] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 278.679459][ T6385] EXT4-fs (loop1): Ignoring removed bh option [ 278.688367][ T6385] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.761047][ T6385] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,jqfmt=vfsv0,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 278.812315][ T6385] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.503079][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 282.712227][ T6417] loop1: detected capacity change from 0 to 512 [ 283.119712][ T6417] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 283.552100][ T6417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 283.594114][ T6417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 283.611588][ T6417] System zones: 1-12 [ 283.734913][ T6417] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 283.772224][ T6417] EXT4-fs (loop1): 1 truncate cleaned up [ 283.777913][ T6417] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 288.247566][ T6470] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 288.330952][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 298.081030][ T6557] overlayfs: failed to clone upperpath [ 304.720399][ T6610] loop0: detected capacity change from 0 to 1024 [ 307.932099][ T4273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 308.983952][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.994889][ T4273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.092259][ T4273] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.118337][ T6649] cgroup: subsys name conflicts with all [ 309.126002][ T4273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.150316][ T4273] usb 2-1: SerialNumber: syz [ 309.307231][ T4273] usb 2-1: can't set config #1, error -71 [ 309.329436][ T4273] usb 2-1: USB disconnect, device number 4 [ 313.496744][ T6664] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 315.042714][ T6686] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.954794][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.961269][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.867885][ T6699] loop0: detected capacity change from 0 to 8192 [ 318.871184][ T6706] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 318.880174][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.689'. [ 318.916473][ T6699] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.849863][ T26] audit: type=1326 audit(1779471234.918:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 321.282519][ T26] audit: type=1326 audit(1779471234.918:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 321.438080][ T6727] loop1: detected capacity change from 0 to 2048 [ 321.479789][ T6727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.503440][ T26] audit: type=1326 audit(1779471234.918:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01af86068e code=0x7ffc0000 [ 322.143367][ T26] audit: type=1326 audit(1779471234.918:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 322.338972][ T26] audit: type=1326 audit(1779471234.918:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 322.472065][ T26] audit: type=1326 audit(1779471234.918:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 322.582384][ T26] audit: type=1326 audit(1779471234.918:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 323.675521][ T6738] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 323.683264][ T6738] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 323.690179][ T6738] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 323.696997][ T6738] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 323.704313][ T6738] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 323.710960][ T6738] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 323.718193][ T6738] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 323.724950][ T6738] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 323.731630][ T6738] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 323.738403][ T6738] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 323.745200][ T6738] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 323.751856][ T6738] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 324.215508][ T26] audit: type=1326 audit(1779471234.918:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 324.346493][ T26] audit: type=1326 audit(1779471234.918:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 324.391106][ T6741] loop1: detected capacity change from 0 to 4096 [ 324.532085][ T26] audit: type=1326 audit(1779471234.918:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.3.701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 324.821357][ T6741] EXT4-fs (loop1): Test dummy encryption mode enabled [ 324.846490][ T6741] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 324.915961][ T6754] sctp: failed to load transform for md5: -2 [ 325.413215][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,test_dummy_encryption,jqfmt=vfsold,noinit_itable,barrier=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 325.856707][ T6772] loop3: detected capacity change from 0 to 512 [ 326.868768][ T6772] EXT4-fs error (device loop3): ext4_quota_enable:6444: comm syz.3.715: inode #768: comm syz.3.715: iget: illegal inode # [ 326.977905][ T6772] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.715: Bad quota inode: 768, type: 2 [ 327.039918][ T6741] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 327.099624][ T6772] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=768). Please run e2fsck to fix. [ 327.154880][ T6772] EXT4-fs (loop3): mount failed [ 329.599474][ T6803] ODEBUG: Out of memory. ODEBUG disabled [ 330.997373][ T6808] loop0: detected capacity change from 0 to 512 [ 331.096199][ T6808] EXT4-fs (loop0): inline encryption not supported [ 331.236994][ T6808] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 331.264767][ T6808] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.331520][ T6818] loop2: detected capacity change from 0 to 512 [ 331.402213][ T6818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.479984][ T6818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 331.496756][ T6818] System zones: 1-12 [ 331.599388][ T6818] EXT4-fs (loop2): 1 truncate cleaned up [ 331.611606][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 332.691590][ T6826] sctp: failed to load transform for md5: -2 [ 332.913100][ T6842] loop2: detected capacity change from 0 to 512 [ 333.007817][ T6842] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 333.079759][ T6842] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.730: Directory block failed checksum [ 333.563696][ T6855] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 333.571509][ T6855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.735'. [ 336.002308][ T6887] hub 8-0:1.0: USB hub found [ 336.002818][ T6888] loop2: detected capacity change from 0 to 7 [ 336.007380][ T6887] hub 8-0:1.0: 1 port detected [ 336.035475][ T6887] No such timeout policy "syz1" [ 336.054411][ T6888] Dev loop2: unable to read RDB block 7 [ 336.060233][ T6888] loop2: AHDI p1 p2 p3 [ 336.064644][ T6888] loop2: partition table partially beyond EOD, truncated [ 336.073754][ T6888] loop2: p1 start 1601398130 is beyond EOD, truncated [ 336.080591][ T6888] loop2: p2 start 1702059890 is beyond EOD, truncated [ 338.555910][ T6913] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 340.291977][ T6933] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 341.952341][ T6941] loop2: detected capacity change from 0 to 7 [ 341.960890][ T6941] Dev loop2: unable to read RDB block 7 [ 341.966567][ T6941] loop2: AHDI p1 p2 p3 [ 341.970716][ T6941] loop2: partition table partially beyond EOD, truncated [ 341.977883][ T6941] loop2: p1 start 1601398130 is beyond EOD, truncated [ 341.984723][ T6941] loop2: p2 start 1702059890 is beyond EOD, truncated [ 342.195734][ T6951] No such timeout policy "syz1" [ 345.721598][ T6991] hub 8-0:1.0: USB hub found [ 345.728455][ T6991] hub 8-0:1.0: 1 port detected [ 345.759518][ T6991] No such timeout policy "syz1" [ 345.781850][ T6991] loop2: detected capacity change from 0 to 16 [ 347.670657][ T6991] erofs: (device loop2): mounted with root inode @ nid 36. [ 347.687885][ T6990] attempt to access beyond end of device [ 347.687885][ T6990] loop2: rw=524288, want=32, limit=16 [ 347.699902][ T6990] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 347.718317][ T6990] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 347.762234][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 347.762250][ T26] audit: type=1800 audit(1779471262.788:348): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.772" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 348.985800][ T7016] loop2: detected capacity change from 0 to 7 [ 349.112116][ T7016] Dev loop2: unable to read RDB block 7 [ 349.117858][ T7016] loop2: AHDI p1 p2 p3 [ 349.122184][ T7016] loop2: partition table partially beyond EOD, truncated [ 349.130252][ T7016] loop2: p1 start 1601398130 is beyond EOD, truncated [ 349.137248][ T7016] loop2: p2 start 1702059890 is beyond EOD, truncated [ 349.429873][ T7011] loop0: detected capacity change from 0 to 2048 [ 349.965596][ T26] audit: type=1326 audit(1779471265.038:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 350.020664][ T26] audit: type=1326 audit(1779471265.038:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 350.270893][ T26] audit: type=1326 audit(1779471265.058:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce146ef68e code=0x7ffc0000 [ 350.296812][ T26] audit: type=1326 audit(1779471265.058:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 350.434435][ T26] audit: type=1326 audit(1779471265.058:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 351.467970][ T26] audit: type=1326 audit(1779471265.058:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 351.497813][ T26] audit: type=1326 audit(1779471265.058:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 351.529156][ T26] audit: type=1326 audit(1779471265.058:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 351.616204][ T26] audit: type=1326 audit(1779471265.058:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 355.603307][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 355.603319][ T26] audit: type=1326 audit(1779471270.498:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 355.827841][ T26] audit: type=1326 audit(1779471270.498:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 355.928466][ T7070] loop2: detected capacity change from 0 to 7 [ 357.640375][ T26] audit: type=1326 audit(1779471270.498:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c35a6f68e code=0x7ffc0000 [ 357.687262][ T7070] Dev loop2: unable to read RDB block 7 [ 357.693050][ T7070] loop2: AHDI p1 p2 p3 [ 357.697400][ T7070] loop2: partition table partially beyond EOD, truncated [ 357.704799][ T7070] loop2: p1 start 1601398130 is beyond EOD, truncated [ 357.711695][ T7070] loop2: p2 start 1702059890 is beyond EOD, truncated [ 358.113389][ T7071] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 358.121131][ T7071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.795'. [ 358.137942][ T26] audit: type=1326 audit(1779471270.498:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 358.163361][ T26] audit: type=1326 audit(1779471270.498:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 358.189766][ T26] audit: type=1326 audit(1779471270.508:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 358.228638][ T26] audit: type=1326 audit(1779471270.508:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 359.406528][ T7084] binder: 7077:7084 ioctl 4018620d 0 returned -22 [ 359.778201][ T26] audit: type=1326 audit(1779471270.508:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 359.807720][ T26] audit: type=1326 audit(1779471270.508:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 360.022202][ T26] audit: type=1326 audit(1779471270.508:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.793" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 360.208142][ T7098] loop0: detected capacity change from 0 to 512 [ 360.329417][ T7098] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.349796][ T7098] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.424910][ T7098] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 362.674678][ T7125] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 362.766666][ T7125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.808'. [ 364.116945][ T7138] binder: 7135:7138 ioctl 4018620d 0 returned -22 [ 366.112546][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 366.112561][ T26] audit: type=1326 audit(1779471281.188:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.1.817" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a3fe8ee59 code=0x0 [ 368.325936][ T7172] loop2: detected capacity change from 0 to 7 [ 368.335570][ T7172] Dev loop2: unable to read RDB block 7 [ 368.341179][ T7172] loop2: AHDI p1 p2 p3 [ 368.345454][ T7172] loop2: partition table partially beyond EOD, truncated [ 368.352909][ T7172] loop2: p1 start 1601398130 is beyond EOD, truncated [ 368.359707][ T7172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 369.228887][ T7179] binder: 7174:7179 ioctl 4018620d 0 returned -22 [ 375.233895][ T7217] loop3: detected capacity change from 0 to 512 [ 375.434748][ T7223] overlayfs: failed to clone upperpath [ 375.682043][ T4273] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 375.992263][ T4273] usb 2-1: Using ep0 maxpacket: 32 [ 376.202310][ T4273] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.257336][ T7217] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 376.270472][ T4273] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.272834][ T7217] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.522832][ T7217] EXT4-fs (loop3): shut down requested (2) [ 377.182210][ T4273] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.195788][ T4273] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 377.225711][ T4273] usb 2-1: Product: syz [ 377.230196][ T4273] usb 2-1: Manufacturer: syz [ 377.283398][ T4273] hub 2-1:4.0: USB hub found [ 378.456802][ T7247] loop2: detected capacity change from 0 to 512 [ 378.762127][ T4273] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 378.790915][ T26] audit: type=1326 audit(1779471293.858:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 378.832820][ T7247] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.851040][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857378][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.882176][ T7247] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.883389][ T4273] usb 2-1: USB disconnect, device number 5 [ 378.937027][ T26] audit: type=1326 audit(1779471293.858:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 379.947855][ T26] audit: type=1326 audit(1779471293.858:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01af86068e code=0x7ffc0000 [ 379.977819][ T26] audit: type=1326 audit(1779471293.858:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 380.006428][ T7247] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 380.099520][ T7264] binder: BINDER_SET_CONTEXT_MGR already set [ 380.105678][ T7264] binder: 7261:7264 ioctl 4018620d 200000000040 returned -16 [ 380.899701][ T26] audit: type=1326 audit(1779471293.858:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 380.947934][ T26] audit: type=1326 audit(1779471293.858:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 381.038996][ T26] audit: type=1326 audit(1779471293.858:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 382.454646][ T26] audit: type=1326 audit(1779471293.858:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 382.478849][ T26] audit: type=1326 audit(1779471293.858:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 382.504993][ T4198] Bluetooth: hci3: unexpected event for opcode 0x007f [ 382.527878][ T26] audit: type=1326 audit(1779471293.858:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.847" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 384.052820][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 384.052836][ T26] audit: type=1326 audit(1779471299.118:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 384.184005][ T26] audit: type=1326 audit(1779471299.118:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 384.395858][ T26] audit: type=1326 audit(1779471299.118:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c35a6f68e code=0x7ffc0000 [ 384.584745][ T26] audit: type=1326 audit(1779471299.118:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 384.618077][ T26] audit: type=1326 audit(1779471299.118:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 384.777643][ T26] audit: type=1326 audit(1779471299.118:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 384.967212][ T26] audit: type=1326 audit(1779471299.118:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 385.145651][ T26] audit: type=1326 audit(1779471299.118:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 385.188154][ T7310] loop2: detected capacity change from 0 to 7 [ 385.214827][ T7310] Dev loop2: unable to read RDB block 7 [ 385.221074][ T7310] loop2: AHDI p1 p2 p3 [ 385.225321][ T7310] loop2: partition table partially beyond EOD, truncated [ 385.232637][ T7310] loop2: p1 start 1601398130 is beyond EOD, truncated [ 385.239563][ T7310] loop2: p2 start 1702059890 is beyond EOD, truncated [ 385.314485][ T26] audit: type=1326 audit(1779471299.118:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 385.374513][ T7316] No such timeout policy "syz1" [ 386.127573][ T26] audit: type=1326 audit(1779471299.118:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 389.014525][ T7350] loop2: detected capacity change from 0 to 7 [ 389.024145][ T7350] Dev loop2: unable to read RDB block 7 [ 389.029750][ T7350] loop2: AHDI p1 p2 p3 [ 389.033998][ T7350] loop2: partition table partially beyond EOD, truncated [ 389.041239][ T7350] loop2: p1 start 1601398130 is beyond EOD, truncated [ 389.048072][ T7350] loop2: p2 start 1702059890 is beyond EOD, truncated [ 389.195998][ T7352] loop1: detected capacity change from 0 to 512 [ 389.395136][ T7356] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 389.458353][ T7356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.877'. [ 389.473037][ T7352] EXT4-fs (loop1): 1 truncate cleaned up [ 389.478738][ T7352] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 389.546317][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 389.546332][ T26] audit: type=1800 audit(1779471304.618:481): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.878" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 389.572098][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.037252][ T7363] binder: 7361:7363 ioctl c0306201 0 returned -14 [ 390.049493][ T7363] binder: BINDER_SET_CONTEXT_MGR already set [ 390.055615][ T7363] binder: 7361:7363 ioctl 4018620d 200000000040 returned -16 [ 391.139418][ T4437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 465: padding at end of block bitmap is not set [ 391.184279][ T4437] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 391.224076][ T4437] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.224076][ T4437] [ 391.245952][ T4437] EXT4-fs (loop1): Total free blocks count 0 [ 391.267315][ T4437] EXT4-fs (loop1): Free/Dirty block details [ 391.292055][ T4437] EXT4-fs (loop1): free_blocks=0 [ 391.314660][ T4437] EXT4-fs (loop1): dirty_blocks=2 [ 391.333268][ T4437] EXT4-fs (loop1): Block reservation details [ 391.357894][ T4437] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 391.965488][ T7385] loop1: detected capacity change from 0 to 512 [ 392.142553][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 392.208960][ T7385] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.478581][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 393.679281][ T7385] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 395.414447][ T7430] loop2: detected capacity change from 0 to 7 [ 395.424974][ T7430] Dev loop2: unable to read RDB block 7 [ 395.430564][ T7430] loop2: AHDI p1 p2 p3 [ 395.434890][ T7430] loop2: partition table partially beyond EOD, truncated [ 395.442147][ T7430] loop2: p1 start 1601398130 is beyond EOD, truncated [ 395.448947][ T7430] loop2: p2 start 1702059890 is beyond EOD, truncated [ 397.262570][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 398.106885][ T7446] loop0: detected capacity change from 0 to 512 [ 398.177801][ T7446] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 398.195541][ T7446] ext4 filesystem being mounted at /174/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.827244][ T7473] hub 8-0:1.0: USB hub found [ 399.832898][ T7473] hub 8-0:1.0: 1 port detected [ 399.850655][ T7473] No such timeout policy "syz1" [ 399.862483][ T7473] loop3: detected capacity change from 0 to 16 [ 400.268138][ T7473] erofs: (device loop3): mounted with root inode @ nid 36. [ 400.294633][ T7473] attempt to access beyond end of device [ 400.294633][ T7473] loop3: rw=524288, want=32, limit=16 [ 400.310615][ T7473] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 400.348591][ T7473] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 400.385305][ T26] audit: type=1800 audit(1779471315.398:482): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.906" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 403.873602][ T7496] overlayfs: failed to clone upperpath [ 409.308046][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 414.767773][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 416.198792][ T7599] overlayfs: failed to clone upperpath [ 417.265305][ T7602] chnl_net:caif_netlink_parms(): no params data found [ 417.350871][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.358109][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.366052][ T7602] device bridge_slave_0 entered promiscuous mode [ 417.374671][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.385702][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.394466][ T7602] device bridge_slave_1 entered promiscuous mode [ 418.477128][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 419.150339][ T4273] Bluetooth: hci5: command 0x0409 tx timeout [ 419.348781][ T6276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.548187][ T7602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.804416][ T6276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.001668][ T7602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.162500][ T6276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.220141][ T7602] team0: Port device team_slave_0 added [ 420.235088][ T7655] overlayfs: failed to clone upperpath [ 420.264956][ T7602] team0: Port device team_slave_1 added [ 420.350272][ T6276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.611820][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.677786][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.062710][ T7602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.119667][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.134550][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.189961][ T7602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.192190][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 422.667390][ T7602] device hsr_slave_0 entered promiscuous mode [ 422.747004][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 423.412123][ T7602] device hsr_slave_1 entered promiscuous mode [ 423.468140][ T7602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.526384][ T7602] Cannot create hsr debugfs directory [ 424.393766][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 426.472726][ T4192] Bluetooth: hci5: command 0x0419 tx timeout [ 427.139383][ T7602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.201701][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 427.888223][ T7602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.960794][ T7602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.979521][ T7602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.147094][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.365660][ T7602] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.410489][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.435673][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.692397][ T7602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.778083][ T7602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.849332][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.250873][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.365347][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.372550][ T4627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.855981][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.055807][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.079752][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.086881][ T4627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.142319][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.172895][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.192533][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.240729][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.402539][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.457765][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.509690][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.529602][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 431.612630][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.706305][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.800421][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.895430][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.007008][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.073258][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.497457][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.542199][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.586609][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.648563][ T6276] device hsr_slave_0 left promiscuous mode [ 433.666406][ T6276] device hsr_slave_1 left promiscuous mode [ 433.691083][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.881702][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.544518][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.195252][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.250852][ T6276] device bridge_slave_1 left promiscuous mode [ 435.283940][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.483111][ T6276] device bridge_slave_0 left promiscuous mode [ 435.489453][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.082544][ T6276] device veth1_macvtap left promiscuous mode [ 436.089100][ T6276] device veth0_macvtap left promiscuous mode [ 436.245015][ T6276] device veth1_vlan left promiscuous mode [ 436.277200][ T6276] device veth0_vlan left promiscuous mode [ 436.629331][ T7865] No such timeout policy "syz1" [ 437.417521][ T7867] loop3: detected capacity change from 0 to 512 [ 437.715464][ T7867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.851502][ T7867] ext4 filesystem being mounted at /208/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.343762][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 438.364601][ T7867] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 438.510809][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 438.568347][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.620073][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.869102][ T6276] bond0 (unregistering): Released all slaves [ 439.919313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.926835][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.037800][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 440.761999][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.770624][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.867832][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.900017][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.931813][ T7602] device veth0_vlan entered promiscuous mode [ 440.939122][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.972491][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.988218][ T7602] device veth1_vlan entered promiscuous mode [ 441.053727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.066179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 441.094912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 441.122725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.160433][ T7602] device veth0_macvtap entered promiscuous mode [ 441.172014][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 441.200263][ T7602] device veth1_macvtap entered promiscuous mode [ 441.268851][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.312778][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.366436][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.422654][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.433194][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 441.479207][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.814596][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.007523][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.241929][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.279370][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.309772][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.338715][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.397434][ T1110] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 442.458544][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.585165][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.904650][ T7930] overlayfs: failed to clone upperpath [ 442.977741][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.092433][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.162499][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.164029][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.242008][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.262021][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.281968][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.311908][ T7602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.341937][ T7602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.378147][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.397006][ T1110] usb 4-1: config 0 has no interface number 0 [ 443.411459][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.443448][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.491853][ T7602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.542291][ T7602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.571320][ T7602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.572337][ T1110] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 443.604019][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.630092][ T7602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.641920][ T1110] usb 4-1: Product: syz [ 443.646195][ T1110] usb 4-1: Manufacturer: syz [ 443.650851][ T1110] usb 4-1: SerialNumber: syz [ 443.674396][ T1110] usb 4-1: config 0 descriptor?? [ 443.872629][ T4316] usb 4-1: USB disconnect, device number 5 [ 444.507389][ T4588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.530298][ T4588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.566718][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.608427][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.634014][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.666553][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.676640][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 450.486104][ T8035] overlayfs: failed to clone upperpath [ 451.648837][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 452.385936][ T8053] loop5: detected capacity change from 0 to 512 [ 453.048173][ T8053] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 453.365183][ T8053] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 453.435345][ T8053] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 453.689307][ T8053] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 453.858923][ T8053] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 454.053776][ T8053] EXT4-fs (loop5): failed to initialize system zone (-117) [ 454.078979][ T8053] EXT4-fs (loop5): mount failed [ 460.125915][ T8151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 464.224040][ T8204] loop3: detected capacity change from 0 to 512 [ 464.283966][ T8204] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 464.509066][ T8204] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 464.561655][ T8204] Quota error (device loop3): write_blk: dquota write failed [ 464.572274][ T8204] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 464.590418][ T8204] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1088: Failed to acquire dquot type 0 [ 464.741712][ T8204] EXT4-fs (loop3): 1 truncate cleaned up [ 464.926114][ T8204] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 465.094909][ T8221] loop2: detected capacity change from 0 to 7 [ 465.133232][ T8221] Dev loop2: unable to read RDB block 7 [ 465.139047][ T8221] loop2: AHDI p1 p2 p3 [ 465.143601][ T8221] loop2: partition table partially beyond EOD, truncated [ 465.154390][ T8221] loop2: p1 start 1601398130 is beyond EOD, truncated [ 465.161530][ T8221] loop2: p2 start 1702059890 is beyond EOD, truncated [ 465.261358][ T8204] Quota error (device loop3): write_blk: dquota write failed [ 465.502210][ T8204] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 465.512920][ T8204] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1088: Failed to acquire dquot type 0 [ 466.578503][ T8249] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 467.285887][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 471.482560][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 473.433418][ T8342] loop3: detected capacity change from 0 to 1024 [ 473.800205][ T8357] loop3: detected capacity change from 0 to 256 [ 473.889386][ T8357] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 474.056954][ T8357] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 474.101356][ T8357] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880733b87e0 iblock : 8, err : -5) [ 474.181140][ T8357] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 474.229845][ T8357] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 474.649607][ T8386] overlayfs: './file0' not a directory [ 477.337921][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.602052][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 477.926311][ T8421] overlayfs: failed to clone upperpath [ 477.993978][ T23] usb 6-1: config index 0 descriptor too short (expected 45860, got 36) [ 478.012129][ T23] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 478.040689][ T23] usb 6-1: config 0 has no interface number 0 [ 478.060914][ T23] usb 6-1: config 0 interface 184 has no altsetting 0 [ 478.292259][ T23] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 478.312348][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.347165][ T23] usb 6-1: Product: syz [ 478.387934][ T23] usb 6-1: Manufacturer: syz [ 478.427056][ T23] usb 6-1: SerialNumber: syz [ 478.464503][ T23] usb 6-1: config 0 descriptor?? [ 478.801746][ T23] smsc75xx v1.0.0 [ 479.732061][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 480.882451][ T8452] No such timeout policy "syz1" [ 480.904226][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 481.047053][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 481.994774][ T23] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 482.802084][ T23] usb 6-1: USB disconnect, device number 2 [ 483.474264][ T8497] No such timeout policy "syz1" [ 485.544788][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 486.182697][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 486.396629][ T8531] overlayfs: './file0' not a directory [ 487.126053][ T8537] xt_hashlimit: size too large, truncated to 1048576 [ 488.975289][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 489.975055][ T8596] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1185'. [ 490.758832][ T8598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 492.219704][ T8610] loop5: detected capacity change from 0 to 1024 [ 493.171780][ T8610] EXT4-fs (loop5): Ignoring removed oldalloc option [ 493.178523][ T8610] EXT4-fs (loop5): Ignoring removed bh option [ 493.184656][ T8610] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 493.197113][ T8610] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 493.197113][ T8610] [ 494.888380][ T8633] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 495.139693][ T8639] loop5: detected capacity change from 0 to 256 [ 495.185692][ T8639] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.337735][ T7602] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 496.389130][ T7602] FAT-fs (loop5): Filesystem has been set read-only [ 496.534802][ T7602] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 497.111983][ T8658] loop3: detected capacity change from 0 to 2048 [ 497.610221][ T8658] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 498.384579][ T8658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.448226][ T4627] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.554711][ T4627] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.724494][ T4627] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.138183][ T4627] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.392073][ T8690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 500.580834][ T8689] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 501.275539][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.282137][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.166367][ T8713] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1212'. [ 503.229881][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 503.352061][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 504.236430][ T8733] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 504.292651][ T8730] overlayfs: failed to clone upperpath [ 504.307520][ T8740] loop3: detected capacity change from 0 to 128 [ 504.431776][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.449742][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.470741][ T8691] device bridge_slave_0 entered promiscuous mode [ 504.486268][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.493589][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.501595][ T8691] device bridge_slave_1 entered promiscuous mode [ 504.539662][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.564560][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.603051][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.617767][ T8740] FAT-fs (loop3): Filesystem has been set read-only [ 504.662059][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.710283][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.723865][ T8691] team0: Port device team_slave_0 added [ 504.773753][ T8691] team0: Port device team_slave_1 added [ 504.782149][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.802081][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.827164][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 504.847162][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.868059][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.882107][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 505.067300][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.072433][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 505.101571][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.311994][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 505.383963][ T8740] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 505.469392][ T26] audit: type=1800 audit(1779471420.538:483): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1220" name="file2" dev="loop3" ino=1048602 res=0 errno=0 [ 505.501475][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.860244][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 506.067016][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.100365][ T4627] device hsr_slave_0 left promiscuous mode [ 507.106810][ T4627] device hsr_slave_1 left promiscuous mode [ 507.134267][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.141679][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.228951][ T8786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1226'. [ 507.249784][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.258534][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.269581][ T4627] device bridge_slave_1 left promiscuous mode [ 507.277953][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.301739][ T4627] device bridge_slave_0 left promiscuous mode [ 507.308642][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.391654][ T4627] device veth1_macvtap left promiscuous mode [ 507.426970][ T4627] device veth0_macvtap left promiscuous mode [ 507.456883][ T4627] device veth1_vlan left promiscuous mode [ 507.486589][ T4627] device veth0_vlan left promiscuous mode [ 508.061252][ T8792] loop3: detected capacity change from 0 to 1024 [ 508.526003][ T8792] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 508.697550][ T8792] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 508.962071][ T4316] Bluetooth: hci3: command 0x040f tx timeout [ 509.505506][ T8792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 509.656425][ T8792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 509.676224][ T8792] EXT4-fs (loop3): This should not happen!! Data will be lost [ 509.676224][ T8792] [ 509.690329][ T8792] EXT4-fs (loop3): Total free blocks count 0 [ 509.801106][ T8792] EXT4-fs (loop3): Free/Dirty block details [ 509.902058][ T8792] EXT4-fs (loop3): free_blocks=20480 [ 510.014962][ T8792] EXT4-fs (loop3): dirty_blocks=16 [ 510.139684][ T8792] EXT4-fs (loop3): Block reservation details [ 510.201675][ T8792] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 510.434617][ T8810] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 510.465420][ T4627] team0 (unregistering): Port device team_slave_1 removed [ 510.483440][ T8810] EXT4-fs (loop3): This should not happen!! Data will be lost [ 510.483440][ T8810] [ 510.506724][ T4627] team0 (unregistering): Port device team_slave_0 removed [ 510.583021][ T4627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.676556][ T4627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.596019][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 511.740088][ T4627] bond0 (unregistering): Released all slaves [ 511.951698][ T8691] device hsr_slave_0 entered promiscuous mode [ 511.976571][ T8691] device hsr_slave_1 entered promiscuous mode [ 512.009483][ T8691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.019607][ T8691] Cannot create hsr debugfs directory [ 514.712402][ T8691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 514.786634][ T8691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 514.845392][ T8691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 514.885119][ T8691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.942024][ T4311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 515.265782][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.278325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.307989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.696441][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.801551][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.826750][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.623171][ T4311] usb 4-1: not running at top speed; connect to a high speed hub [ 516.692591][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.699720][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.839148][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.892020][ T4311] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 516.899647][ T4311] usb 4-1: can't read configurations, error -71 [ 518.456767][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.513241][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.558217][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.565340][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.685598][ T26] audit: type=1326 audit(1779471433.758:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 518.731474][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.749503][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 518.761887][ T26] audit: type=1326 audit(1779471433.788:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 518.821069][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.853657][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.872415][ T26] audit: type=1326 audit(1779471433.788:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 518.912532][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 518.938488][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 518.983499][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.997616][ T26] audit: type=1326 audit(1779471433.788:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 519.098883][ T8691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.311635][ T26] audit: type=1326 audit(1779471433.788:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 519.343489][ T26] audit: type=1326 audit(1779471433.788:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 519.370012][ T8691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.502036][ T26] audit: type=1326 audit(1779471433.788:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 519.626316][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.643517][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.733423][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.752564][ T26] audit: type=1326 audit(1779471433.788:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 519.838381][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.928814][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.957637][ T26] audit: type=1326 audit(1779471433.788:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 520.102538][ T26] audit: type=1326 audit(1779471433.788:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.0.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 520.324898][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.332936][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.361380][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.501488][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.516047][ T8963] syz.4.1266 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 522.539325][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.623784][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 522.653677][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.677329][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.715380][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.766873][ T8691] device veth0_vlan entered promiscuous mode [ 522.837636][ T8691] device veth1_vlan entered promiscuous mode [ 522.957534][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.983211][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 523.019820][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.134063][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.274229][ T8691] device veth0_macvtap entered promiscuous mode [ 523.404836][ T8691] device veth1_macvtap entered promiscuous mode [ 523.502154][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.551190][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.792466][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.915775][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.990719][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.175601][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.608260][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.682053][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.737047][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.774678][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.818151][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.888759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.024044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.094186][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.514710][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.553864][ T9013] loop3: detected capacity change from 0 to 512 [ 526.573758][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.607780][ T9013] EXT4-fs (loop3): Ignoring removed nobh option [ 526.637948][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.685367][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.737981][ T9013] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 526.755509][ T9013] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.761917][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.896847][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.946836][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.976162][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.058270][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.087750][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.174372][ T8691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.247711][ T8691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.272919][ T8691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.307068][ T8691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.354027][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.590450][ T9054] overlayfs: failed to clone upperpath [ 529.598106][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.685860][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.723004][ T4588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.730825][ T4588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.771123][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.968649][ T9068] loop3: detected capacity change from 0 to 1024 [ 530.242369][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1203'. [ 532.911507][ T9068] EXT4-fs: error -4 creating inode table initialization thread [ 533.185073][ T9078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1294'. [ 533.290342][ T9068] EXT4-fs (loop3): mount failed [ 534.335605][ T9123] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 534.501997][ T4234] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 534.545196][ T9121] loop3: detected capacity change from 0 to 8192 [ 534.796343][ T9140] loop3: detected capacity change from 0 to 512 [ 534.865899][ T4234] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 40, changing to 7 [ 534.916835][ T9140] EXT4-fs (loop3): Test dummy encryption mode enabled [ 534.950866][ T9140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 535.087513][ T9148] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1315'. [ 535.274881][ T9140] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1314: bad orphan inode 131083 [ 535.378995][ T9140] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 535.801219][ T4234] usb 7-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 535.821876][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.829901][ T4234] usb 7-1: Product: syz [ 535.843864][ T4234] usb 7-1: Manufacturer: syz [ 535.848574][ T4234] usb 7-1: SerialNumber: syz [ 536.125198][ T9108] ipt_REJECT: TCP_RESET invalid for non-tcp [ 536.196957][ T9167] loop6: detected capacity change from 0 to 512 [ 536.218738][ T9167] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 537.742112][ T9178] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 538.020106][ T9172] overlayfs: failed to clone upperpath [ 538.211596][ T4234] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 538.271798][ T4234] usb 7-1: USB disconnect, device number 2 [ 538.308238][ T8916] udevd[8916]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.682876][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 540.682892][ T26] audit: type=1326 audit(1779471455.758:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 540.713612][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.907727][ T26] audit: type=1326 audit(1779471455.798:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.3.1331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01af86068e code=0x7ffc0000 [ 540.965044][ T9210] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1328'. [ 542.834129][ T9243] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 543.557902][ T9246] overlayfs: failed to clone upperpath [ 543.582599][ T26] audit: type=1326 audit(1779471455.798:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.3.1331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 544.523112][ T26] audit: type=1326 audit(1779471455.798:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.3.1331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 544.621953][ T26] audit: type=1326 audit(1779471455.808:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.3.1331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 544.731200][ T26] audit: type=1326 audit(1779471455.808:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.3.1331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 544.821904][ T26] audit: type=1326 audit(1779471455.808:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 544.976228][ T26] audit: type=1326 audit(1779471455.808:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 546.300716][ T26] audit: type=1326 audit(1779471455.818:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 546.341897][ T26] audit: type=1326 audit(1779471455.818:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 546.518777][ T26] audit: type=1326 audit(1779471455.818:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 546.827506][ T26] audit: type=1326 audit(1779471455.818:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.127284][ T26] audit: type=1326 audit(1779471455.818:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.361717][ T9286] overlayfs: failed to clone upperpath [ 547.373503][ T9289] loop6: detected capacity change from 0 to 512 [ 547.398672][ T26] audit: type=1326 audit(1779471455.818:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.466428][ T26] audit: type=1326 audit(1779471455.818:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.490830][ T9289] EXT4-fs (loop6): Test dummy encryption mode enabled [ 547.554182][ T9289] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1351: inode has both inline data and extents flags [ 547.581188][ T26] audit: type=1326 audit(1779471455.818:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.606116][ T26] audit: type=1326 audit(1779471455.818:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.640715][ T26] audit: type=1326 audit(1779471455.818:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.4.1324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1472ee59 code=0x7ffc0000 [ 547.694641][ T9289] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1351: couldn't read orphan inode 15 (err -117) [ 547.760360][ T9289] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 548.040350][ T9289] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 549.553793][ T9342] loop3: detected capacity change from 0 to 8 [ 549.616917][ T9342] SQUASHFS error: zlib decompression failed, data probably corrupt [ 549.651935][ T9342] SQUASHFS error: Failed to read block 0x9b: -5 [ 549.668709][ T9342] SQUASHFS error: Unable to read metadata cache entry [99] [ 549.741900][ T9342] SQUASHFS error: Unable to read inode 0x127 [ 551.543688][ T9361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1364'. [ 551.644557][ T9366] loop3: detected capacity change from 0 to 512 [ 555.259858][ T9431] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1380'. [ 556.601376][ T9432] loop6: detected capacity change from 0 to 512 [ 557.967444][ T9432] EXT4-fs (loop6): Unrecognized mount option "context=root" or missing value [ 562.732582][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.739122][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.216623][ T9488] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1394'. [ 563.429137][ T9504] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 563.445765][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 563.445779][ T26] audit: type=1326 audit(1779471478.518:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 563.582381][ T26] audit: type=1326 audit(1779471478.558:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.084703][ T26] audit: type=1326 audit(1779471478.558:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.172398][ T26] audit: type=1326 audit(1779471478.558:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.197060][ T26] audit: type=1326 audit(1779471478.558:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.221748][ T26] audit: type=1326 audit(1779471478.568:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.272385][ T26] audit: type=1326 audit(1779471478.568:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.317029][ T26] audit: type=1326 audit(1779471478.568:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.384938][ T26] audit: type=1326 audit(1779471478.568:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 565.500110][ T26] audit: type=1326 audit(1779471478.568:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9505 comm="syz.6.1401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 566.338818][ T9552] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1412'. [ 567.985367][ T9571] loop3: detected capacity change from 0 to 512 [ 568.037868][ T9571] EXT4-fs (loop3): Ignoring removed oldalloc option [ 568.061077][ T9578] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 568.109782][ T9571] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 569.525472][ T9605] loop3: detected capacity change from 0 to 16 [ 569.601049][ T9605] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 570.628150][ T9605] loop3: detected capacity change from 0 to 1024 [ 571.510805][ T9605] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 571.624709][ T9605] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.066703][ T9664] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 573.373959][ T9663] overlayfs: failed to clone upperpath [ 573.466615][ T9668] loop6: detected capacity change from 0 to 512 [ 573.580266][ T9668] EXT4-fs (loop6): Mount option "dioread_lock" incompatible with ext2 [ 574.192124][ T9672] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 576.917647][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 576.917664][ T26] audit: type=1326 audit(1779471491.988:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 576.998060][ T9704] loop6: detected capacity change from 0 to 1024 [ 577.002136][ T26] audit: type=1326 audit(1779471491.988:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.128298][ T26] audit: type=1326 audit(1779471491.998:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.227064][ T26] audit: type=1326 audit(1779471491.998:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.349420][ T26] audit: type=1326 audit(1779471491.998:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.412318][ T9715] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 577.449643][ T9714] overlayfs: failed to clone upperpath [ 577.507774][ T26] audit: type=1326 audit(1779471491.998:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.645865][ T26] audit: type=1326 audit(1779471491.998:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 577.744477][ T26] audit: type=1326 audit(1779471491.998:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 578.452133][ T9735] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 578.722222][ T26] audit: type=1326 audit(1779471491.998:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 578.811946][ T9742] device wlan1 entered promiscuous mode [ 578.844237][ T9746] loop6: detected capacity change from 0 to 16 [ 578.854913][ T26] audit: type=1326 audit(1779471491.998:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.6.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bbdabe59 code=0x7ffc0000 [ 578.885055][ T9742] binder: 9741:9742 ioctl 4018620d 0 returned -22 [ 578.992098][ T9746] erofs: (device loop6): mounted with root inode @ nid 36. [ 580.829375][ T9777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 581.292190][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 584.402332][ T9804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 586.530915][ T9827] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1477'. [ 587.602744][ T9838] overlayfs: failed to clone upperpath [ 589.643243][ T9865] loop3: detected capacity change from 0 to 128 [ 592.013839][ T4311] kernel write not supported for file /cpu/0/msr (pid: 4311 comm: kworker/0:7) [ 593.401490][ T9915] loop3: detected capacity change from 0 to 128 [ 593.502532][ T9915] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 593.534168][ T9915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.279692][ T9953] overlayfs: failed to clone upperpath [ 596.391538][ T9955] loop3: detected capacity change from 0 to 4096 [ 597.283247][ T9955] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 598.291952][ T9977] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1522'. [ 598.352107][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 598.381899][ T9977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 598.412381][ T9977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 605.495960][T10044] loop3: detected capacity change from 0 to 2048 [ 605.565824][T10044] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.649472][ T4271] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 606.741954][ T4271] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 314 with error 28 [ 606.810442][ T4271] EXT4-fs (loop3): This should not happen!! Data will be lost [ 606.810442][ T4271] [ 606.841865][ T4271] EXT4-fs (loop3): Total free blocks count 0 [ 606.848226][ T4271] EXT4-fs (loop3): Free/Dirty block details [ 606.870224][ T4271] EXT4-fs (loop3): free_blocks=66060288 [ 606.885231][ T4271] EXT4-fs (loop3): dirty_blocks=320 [ 606.890470][ T4271] EXT4-fs (loop3): Block reservation details [ 606.941933][ T4271] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 607.252271][T10063] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 607.340509][T10067] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 609.289363][T10078] loop3: detected capacity change from 0 to 1024 [ 609.480312][T10087] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 609.501010][T10078] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 609.663383][T10078] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 614.197874][ T4198] Bluetooth: hci3: link tx timeout [ 614.203862][ T4198] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.225198][ T4198] Bluetooth: hci3: link tx timeout [ 614.230513][ T4198] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 615.251686][T10138] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 615.358152][T10134] loop6: detected capacity change from 0 to 1024 [ 615.931233][T10140] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 617.357843][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 617.434401][T10134] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 617.706635][T10134] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 618.607318][T10169] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 618.815940][T10134] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 619.597803][T10177] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 621.391919][ T4273] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 621.762037][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.834246][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.886162][ T4273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.961906][ T4273] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.001336][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.058582][ T4273] usb 4-1: config 0 descriptor?? [ 622.994451][ T4273] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 623.009725][T10212] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 623.122733][ T4273] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 624.456291][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462678][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.899532][T10247] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 624.943631][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 624.943645][ T26] audit: type=1326 audit(1779471540.018:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 625.060231][ T26] audit: type=1326 audit(1779471540.018:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 625.406214][ T4273] usb 4-1: USB disconnect, device number 8 [ 625.455656][ T26] audit: type=1326 audit(1779471540.048:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 626.652825][T10256] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 626.754874][ T26] audit: type=1326 audit(1779471540.048:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.612643][ T26] audit: type=1326 audit(1779471540.048:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.636928][ T26] audit: type=1326 audit(1779471540.048:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.661211][ T26] audit: type=1326 audit(1779471540.048:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.690194][ T26] audit: type=1326 audit(1779471540.048:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.777146][ T26] audit: type=1326 audit(1779471540.048:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 627.840650][ T26] audit: type=1326 audit(1779471540.048:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.1610" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01af89fe59 code=0x7ffc0000 [ 628.020397][T10273] overlayfs: failed to clone upperpath [ 631.366288][T10293] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 631.829688][T10301] loop6: detected capacity change from 0 to 256 [ 632.514117][T10307] overlayfs: failed to clone upperpath [ 633.634399][T10318] loop3: detected capacity change from 0 to 2048 [ 633.782881][T10318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 633.796749][T10324] loop6: detected capacity change from 0 to 256 [ 634.705237][T10324] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.761217][T10318] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1634: No space for directory leaf checksum. Please run e2fsck -D. [ 634.782011][T10324] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 634.827443][ T9855] udevd[9855]: incorrect jbd checksum on /dev/loop3 [ 634.877474][T10318] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1634: checksumming directory block 0 [ 634.879568][T10324] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 634.960316][ T9855] udevd[9855]: incorrect jbd checksum on /dev/loop3 [ 635.612510][T10331] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805eb88e60 iblock : 0, err : -5) [ 635.622470][T10331] exFAT-fs (loop6): Filesystem has been set read-only [ 637.254236][T10344] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 637.819271][T10351] overlayfs: failed to clone upperpath [ 638.120002][T10356] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 639.925515][T10384] loop6: detected capacity change from 0 to 256 [ 639.978769][T10384] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 640.396371][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 640.396385][ T26] audit: type=1326 audit(1779471555.468:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 640.458474][ T26] audit: type=1326 audit(1779471555.528:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 640.562134][ T26] audit: type=1326 audit(1779471555.528:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 640.726828][ T26] audit: type=1326 audit(1779471555.528:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 640.842225][T10406] loop6: detected capacity change from 0 to 512 [ 640.959963][ T26] audit: type=1326 audit(1779471555.528:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 641.000950][T10406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 642.262356][T10406] EXT4-fs (loop6): 1 truncate cleaned up [ 642.268084][T10406] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 642.286488][ T26] audit: type=1326 audit(1779471555.528:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 642.363230][ T26] audit: type=1326 audit(1779471555.528:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 642.435709][T10406] EXT4-fs (loop6): Online resizing not supported with sparse_super2 [ 642.474226][ T26] audit: type=1326 audit(1779471555.528:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 642.611050][ T26] audit: type=1326 audit(1779471555.528:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 642.793238][ T4192] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 643.532080][ T4192] Bluetooth: hci1: Injecting HCI hardware error event [ 643.541531][ T4206] Bluetooth: hci1: hardware error 0x00 [ 643.732106][ T26] audit: type=1326 audit(1779471555.528:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.0.1658" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c35aaee59 code=0x7ffc0000 [ 643.829247][T10429] xt_CT: No such helper "pptp" [ 644.631450][T10436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 645.651892][ T4192] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 646.229132][T10462] overlayfs: failed to clone upperpath [ 646.275265][ T4192] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 40, changing to 7 [ 646.464251][ T4192] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 646.488385][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.523950][ T4192] usb 4-1: Product: syz [ 646.534415][ T4192] usb 4-1: Manufacturer: syz [ 646.554409][ T4192] usb 4-1: SerialNumber: syz [ 647.680000][ T4192] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 649.378223][ T4192] usb 4-1: USB disconnect, device number 9 [ 649.826999][ T9850] udevd[9850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.956517][T10499] loop3: detected capacity change from 0 to 1024 [ 650.029254][T10499] EXT4-fs (loop3): Ignoring removed nobh option [ 650.038893][T10499] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 650.052177][T10499] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 650.052177][T10499] [ 650.257910][T10506] loop3: detected capacity change from 0 to 4096 [ 651.185143][T10506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 651.221355][T10506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 651.244988][T10506] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 651.462585][T10520] KVM: debugfs: duplicate directory 10520-4 [ 653.580658][T10549] loop3: detected capacity change from 0 to 512 [ 653.662652][T10549] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 653.864364][T10549] EXT4-fs (loop3): orphan cleanup on readonly fs [ 654.024850][T10549] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 654.143011][T10549] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1713: attempt to clear invalid blocks 2 len 1 [ 654.317093][T10549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 654.444068][T10549] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1713: invalid indirect mapped block 1819239214 (level 0) [ 654.546035][T10549] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1713: invalid indirect mapped block 1819239214 (level 1) [ 654.596594][T10549] EXT4-fs (loop3): 1 truncate cleaned up [ 654.605525][T10549] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 655.107587][T10549] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 661.002761][T10614] overlayfs: failed to clone upperpath [ 661.170255][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1735'. [ 662.121920][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 664.946768][T10647] overlayfs: failed to clone upperpath [ 665.897610][T10654] loop6: detected capacity change from 0 to 1024 [ 673.006007][T10707] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 677.377405][T10743] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 680.422358][ T4234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 680.692041][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 680.842284][ T4234] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 680.876511][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.031953][ T4234] usb 4-1: config 0 has no interface number 0 [ 681.241954][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 682.188199][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.204282][ T4234] usb 4-1: Product: syz [ 682.761248][ T4234] usb 4-1: Manufacturer: syz [ 682.771883][ T4234] usb 4-1: SerialNumber: syz [ 682.794497][ T4234] usb 4-1: config 0 descriptor?? [ 683.033686][ T4234] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 683.046036][ T4234] usb 4-1: No valid video chain found. [ 683.056582][T10805] overlayfs: failed to clone upperpath [ 683.107075][T10808] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 683.161991][ T7218] usb 4-1: USB disconnect, device number 10 [ 683.245535][T10815] loop6: detected capacity change from 0 to 16 [ 683.298476][T10815] erofs: (device loop6): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 683.316046][T10814] loop3: detected capacity change from 0 to 2048 [ 683.472935][T10815] loop6: detected capacity change from 0 to 1024 [ 683.544284][T10815] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 683.731930][T10815] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.639502][T10842] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 685.663081][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.672318][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.756514][T10841] overlayfs: failed to clone upperpath [ 685.858169][T10850] loop6: detected capacity change from 0 to 128 [ 687.255067][T10850] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 687.315165][T10850] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 689.604920][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1811'. [ 689.626775][T10877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1811'. [ 689.750145][T10879] overlayfs: failed to clone upperpath [ 690.173808][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 690.173821][ T26] audit: type=1326 audit(1779471605.248:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.0.1827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c35aaee59 code=0x0 [ 692.395990][T10915] overlayfs: failed to clone upperpath [ 693.110842][T10920] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 695.067206][T10940] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 702.583692][T10994] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 702.680588][T11006] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 702.687689][T11006] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 703.032839][T11012] device hsr0 entered promiscuous mode [ 703.246335][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 704.360577][T11022] loop3: detected capacity change from 0 to 16 [ 704.465147][T11022] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 704.575865][T11022] loop3: detected capacity change from 0 to 1024 [ 704.732678][T11022] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 704.852366][T11022] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.585465][T11035] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 705.875154][T11042] mmap: syz.1.1871 (11042) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 705.887767][T11020] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 709.559083][T11076] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 709.831243][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 712.092883][T11100] device bridge_slave_1 left promiscuous mode [ 712.101021][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.620065][T11116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 713.787305][T11121] overlayfs: failed to resolve './file1': -2 [ 713.950870][T11122] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 716.451361][T11135] overlayfs: failed to clone upperpath [ 718.888540][T11162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 723.125821][T11181] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 726.289011][T11206] loop3: detected capacity change from 0 to 512 [ 726.389186][T11206] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext2 [ 727.643862][T11218] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 729.548125][T11220] loop3: detected capacity change from 0 to 512 [ 730.004953][T11220] EXT4-fs (loop3): Unrecognized mount option "context=root" or missing value [ 738.390051][T11279] loop3: detected capacity change from 0 to 512 [ 738.463446][T11279] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext2 [ 739.465416][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 741.442232][T11303] device syzkaller0 entered promiscuous mode [ 742.336361][T11324] overlayfs: failed to clone upperpath [ 742.426048][T11330] tipc: Started in network mode [ 742.440578][T11330] tipc: Node identity 9, cluster identity 4711 [ 742.450168][T11330] tipc: Node number set to 9 [ 742.456107][ T4192] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 742.703004][ T1110] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 743.431922][ T4192] usb 4-1: Using ep0 maxpacket: 8 [ 743.467675][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 743.552101][ T4192] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 743.581199][ T4192] usb 4-1: config 0 has no interface number 0 [ 743.642238][ T4192] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 743.774892][ T4192] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 743.795493][ T1110] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.835882][ T1110] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.847459][ T4192] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 743.861014][ T1110] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 743.890571][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.911558][ T4192] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 743.920915][ T4192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.950918][ T4192] usb 4-1: config 0 descriptor?? [ 743.950991][ T1110] usb 7-1: config 0 descriptor?? [ 744.163564][ T4192] ldusb 4-1:0.55: Interrupt in endpoint not found [ 744.765425][T11360] overlayfs: failed to clone upperpath [ 746.068963][ T4192] usb 4-1: USB disconnect, device number 11 [ 746.314689][ T4273] usb 7-1: USB disconnect, device number 3 [ 746.976232][T11392] loop6: detected capacity change from 0 to 1024 [ 747.028982][T11392] EXT4-fs (loop6): Ignoring removed orlov option [ 747.036576][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.043007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.098784][T11392] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 748.762712][T11425] No such timeout policy "syz1" [ 750.932900][T11440] loop3: detected capacity change from 0 to 16 [ 751.642179][T11440] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 751.786754][T11440] loop3: detected capacity change from 0 to 1024 [ 752.414821][T11440] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 752.459104][T11440] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.064496][T11460] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 756.475790][T11480] No such timeout policy "syz1" [ 760.051548][T11543] hub 8-0:1.0: USB hub found [ 760.056980][T11543] hub 8-0:1.0: 1 port detected [ 760.072546][T11543] No such timeout policy "syz1" [ 760.083927][T11543] loop6: detected capacity change from 0 to 16 [ 760.796216][T11543] erofs: (device loop6): mounted with root inode @ nid 36. [ 760.810045][T11542] attempt to access beyond end of device [ 760.810045][T11542] loop6: rw=524288, want=32, limit=16 [ 760.831840][T11542] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 760.846028][ T26] audit: type=1800 audit(1779471675.918:641): pid=11542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2028" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 761.199773][T11550] syz.4.2032 uses obsolete (PF_INET,SOCK_PACKET) [ 766.516013][T11593] hub 8-0:1.0: USB hub found [ 766.522196][T11593] hub 8-0:1.0: 1 port detected [ 766.538159][T11593] No such timeout policy "syz1" [ 766.549408][T11593] loop3: detected capacity change from 0 to 16 [ 767.175791][T11593] erofs: (device loop3): mounted with root inode @ nid 36. [ 767.195947][T11593] attempt to access beyond end of device [ 767.195947][T11593] loop3: rw=524288, want=32, limit=16 [ 767.213773][T11593] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 767.262992][ T26] audit: type=1800 audit(1779471682.298:642): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2041" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 767.499270][T11595] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.685706][T11647] No such timeout policy "syz1" [ 779.998779][T11682] hub 8-0:1.0: USB hub found [ 780.004218][T11682] hub 8-0:1.0: 1 port detected [ 780.016845][T11682] No such timeout policy "syz1" [ 780.026485][T11682] loop3: detected capacity change from 0 to 16 [ 780.270436][T11682] erofs: (device loop3): mounted with root inode @ nid 36. [ 781.108960][T11696] loop6: detected capacity change from 0 to 1024 [ 782.681954][T11696] EXT4-fs (loop6): Ignoring removed orlov option [ 782.874150][T11696] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 785.789850][T11738] binder: 11737:11738 ioctl 541b 0 returned -22 [ 785.941936][T11742] binder: 11737:11742 ioctl c0585611 2000000001c0 returned -22 [ 792.782078][T11779] hub 8-0:1.0: USB hub found [ 792.787360][T11779] hub 8-0:1.0: 1 port detected [ 792.800939][T11779] No such timeout policy "syz1" [ 792.811521][T11779] loop6: detected capacity change from 0 to 16 [ 793.090289][T11779] erofs: (device loop6): mounted with root inode @ nid 36. [ 794.815204][T11788] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 796.117167][T11799] loop6: detected capacity change from 0 to 1024 [ 796.893595][T11805] loop3: detected capacity change from 0 to 512 [ 797.467095][T11805] EXT4-fs (loop3): Unrecognized mount option "context=root" or missing value [ 797.549009][T11799] EXT4-fs (loop6): Ignoring removed orlov option [ 797.770889][T11799] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 800.075821][T11836] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 806.319564][T11890] loop6: detected capacity change from 0 to 16 [ 807.499353][T11896] loop3: detected capacity change from 0 to 512 [ 808.003844][T11896] EXT4-fs (loop3): Unrecognized mount option "context=root" or missing value [ 808.055437][T11890] erofs: (device loop6): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 808.283949][T11890] loop6: detected capacity change from 0 to 1024 [ 808.466880][T11890] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 808.484416][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.490714][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.492573][T11890] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.962261][T11912] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 813.113402][T11945] loop3: detected capacity change from 0 to 16 [ 813.161838][T11945] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 813.332512][T11945] loop3: detected capacity change from 0 to 1024 [ 813.410065][T11945] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 813.427394][T11945] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.286986][T11958] No such timeout policy "syz1" [ 817.809668][T11989] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 820.681011][T12023] hub 8-0:1.0: USB hub found [ 820.686343][T12023] hub 8-0:1.0: 1 port detected [ 820.700826][T12023] No such timeout policy "syz1" [ 821.449048][T12028] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 825.555261][T12064] binder: 12062:12064 ioctl 40106e80 2000000003c0 returned -22 [ 827.569077][T12072] loop6: detected capacity change from 0 to 1024 [ 827.727342][T12072] EXT4-fs (loop6): Ignoring removed orlov option [ 829.007366][T12072] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 830.350647][T12112] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 831.930624][T12114] overlayfs: failed to clone upperpath [ 834.274992][T12137] hub 8-0:1.0: USB hub found [ 834.280085][T12137] hub 8-0:1.0: 1 port detected [ 834.287645][T12137] No such timeout policy "syz1" [ 834.294107][T12137] loop6: detected capacity change from 0 to 16 [ 834.384387][T12137] erofs: (device loop6): mounted with root inode @ nid 36. [ 834.393587][T12137] attempt to access beyond end of device [ 834.393587][T12137] loop6: rw=524288, want=32, limit=16 [ 834.406784][T12137] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 834.426241][T12137] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 834.446017][ T26] audit: type=1800 audit(1779471749.498:643): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2198" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 836.215835][T12157] hub 8-0:1.0: USB hub found [ 836.221381][T12157] hub 8-0:1.0: 1 port detected [ 836.233951][T12157] loop3: detected capacity change from 0 to 16 [ 836.434644][T12157] erofs: (device loop3): mounted with root inode @ nid 36. [ 836.452068][T12157] attempt to access beyond end of device [ 836.452068][T12157] loop3: rw=524288, want=32, limit=16 [ 836.470438][T12157] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 836.503779][T12157] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 836.540667][ T26] audit: type=1800 audit(1779471751.558:644): pid=12157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2203" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 838.038533][T12177] No such timeout policy "syz1" [ 840.122386][T12194] overlayfs: failed to clone lowerpath [ 841.026667][T12208] No such timeout policy "syz1" [ 843.089030][T12225] overlayfs: failed to clone upperpath [ 846.701505][T12257] overlayfs: failed to clone upperpath [ 851.119810][T12305] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.303870][T12305] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.486073][T12305] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.594197][T12305] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.670147][T12305] device geneve2 entered promiscuous mode [ 851.862588][T12323] loop3: detected capacity change from 0 to 16 [ 852.077138][T12323] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 855.478142][T12343] [ 855.480612][T12343] ============================= [ 855.511994][T12343] WARNING: suspicious RCU usage [ 855.537207][T12343] syzkaller #0 Not tainted [ 855.556983][T12343] ----------------------------- [ 855.590136][T12343] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 855.633091][T12343] [ 855.633091][T12343] other info that might help us debug this: [ 855.633091][T12343] [ 855.714356][T12343] [ 855.714356][T12343] rcu_scheduler_active = 2, debug_locks = 1 [ 855.753143][T12343] 1 lock held by syz.6.2267/12343: [ 855.758462][T12343] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 855.776249][T12343] [ 855.776249][T12343] stack backtrace: [ 855.790817][T12343] CPU: 0 PID: 12343 Comm: syz.6.2267 Not tainted syzkaller #0 [ 855.798318][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.808396][T12343] Call Trace: [ 855.811707][T12343] [ 855.814659][T12343] dump_stack_lvl+0x188/0x250 [ 855.819365][T12343] ? load_image+0x400/0x400 [ 855.823882][T12343] ? show_regs_print_info+0x20/0x20 [ 855.829109][T12343] ? lockdep_rcu_suspicious+0x110/0x180 [ 855.834697][T12343] ? local_bh_enable+0x20/0x20 [ 855.839487][T12343] rhltable_lookup+0x7a9/0x7c0 [ 855.844277][T12343] ? local_bh_enable+0x20/0x20 [ 855.849070][T12343] ? mr_mfc_find_parent+0x190/0x190 [ 855.854311][T12343] ? mark_lock+0x94/0x320 [ 855.858662][T12343] ? local_bh_enable+0x20/0x20 [ 855.863450][T12343] ? mark_lock+0x94/0x320 [ 855.868061][T12343] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 855.874160][T12343] ? lock_chain_count+0x20/0x20 [ 855.879037][T12343] mr_mfc_find_any_parent+0xb6/0x1e0 [ 855.884349][T12343] ? local_bh_enable+0x20/0x20 [ 855.889139][T12343] ip_mr_forward+0x24c/0xf90 [ 855.893763][T12343] ipmr_mfc_add+0x23cc/0x2d40 [ 855.898485][T12343] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 855.903446][T12343] ? __lock_acquire+0x7d10/0x7d10 [ 855.908515][T12343] ip_mroute_setsockopt+0xeaf/0x1250 [ 855.913837][T12343] ? ipmr_rule_default+0x70/0x70 [ 855.918821][T12343] ? __might_sleep+0xf0/0xf0 [ 855.923437][T12343] ip_setsockopt+0x568/0x3130 [ 855.928156][T12343] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 855.933548][T12343] ? aa_sk_perm+0x7dc/0x910 [ 855.938076][T12343] ? aa_af_perm+0x340/0x340 [ 855.942591][T12343] ? __fget_files+0x40f/0x480 [ 855.947298][T12343] ? aa_sock_opt_perm+0x74/0x100 [ 855.952254][T12343] ? sock_common_setsockopt+0x32/0xb0 [ 855.957650][T12343] ? raw_setsockopt+0xc5/0x180 [ 855.962440][T12343] ? sock_common_recvmsg+0x1c0/0x1c0 [ 855.967752][T12343] __sys_setsockopt+0x2bf/0x3d0 [ 855.972639][T12343] __x64_sys_setsockopt+0xb1/0xc0 [ 855.977694][T12343] do_syscall_64+0x4c/0xa0 [ 855.982133][T12343] ? clear_bhb_loop+0x30/0x80 [ 855.986838][T12343] ? clear_bhb_loop+0x30/0x80 [ 855.991566][T12343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 855.997511][T12343] RIP: 0033:0x7ff8bbdabe59 [ 856.002184][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.021823][T12343] RSP: 002b:00007ff8ba005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.030252][T12343] RAX: ffffffffffffffda RBX: 00007ff8bc024fa0 RCX: 00007ff8bbdabe59 [ 856.038241][T12343] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 856.046223][T12343] RBP: 00007ff8bbe41d6f R08: 000000000000003c R09: 0000000000000000 [ 856.054204][T12343] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 856.062218][T12343] R13: 00007ff8bc025038 R14: 00007ff8bc024fa0 R15: 00007ffe776a9c58 [ 856.070321][T12343] [ 856.231868][T12343] [ 856.235861][T12343] ============================= [ 856.240880][T12343] WARNING: suspicious RCU usage [ 856.245901][T12343] syzkaller #0 Not tainted [ 856.250498][T12343] ----------------------------- [ 856.255553][T12343] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 856.264617][T12343] [ 856.264617][T12343] other info that might help us debug this: [ 856.264617][T12343] [ 856.281880][T12343] [ 856.281880][T12343] rcu_scheduler_active = 2, debug_locks = 1 [ 856.290330][T12343] 1 lock held by syz.6.2267/12343: [ 856.304589][T12343] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 856.322264][T12343] [ 856.322264][T12343] stack backtrace: [ 856.337701][T12343] CPU: 1 PID: 12343 Comm: syz.6.2267 Not tainted syzkaller #0 [ 856.345189][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.355260][T12343] Call Trace: [ 856.358552][T12343] [ 856.361501][T12343] dump_stack_lvl+0x188/0x250 [ 856.366202][T12343] ? load_image+0x400/0x400 [ 856.370730][T12343] ? show_regs_print_info+0x20/0x20 [ 856.375962][T12343] ? lockdep_rcu_suspicious+0x110/0x180 [ 856.381533][T12343] ? local_bh_enable+0x20/0x20 [ 856.386320][T12343] rhltable_lookup+0x52a/0x7c0 [ 856.391111][T12343] ? local_bh_enable+0x20/0x20 [ 856.395928][T12343] ? mr_mfc_find_parent+0x190/0x190 [ 856.401147][T12343] ? mark_lock+0x94/0x320 [ 856.405629][T12343] ? local_bh_enable+0x20/0x20 [ 856.410442][T12343] ? mark_lock+0x94/0x320 [ 856.414809][T12343] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 856.420818][T12343] ? lock_chain_count+0x20/0x20 [ 856.425695][T12343] mr_mfc_find_any_parent+0xb6/0x1e0 [ 856.431091][T12343] ? local_bh_enable+0x20/0x20 [ 856.435889][T12343] ip_mr_forward+0x24c/0xf90 [ 856.440609][T12343] ipmr_mfc_add+0x23cc/0x2d40 [ 856.445318][T12343] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 856.450281][T12343] ? __lock_acquire+0x7d10/0x7d10 [ 856.455362][T12343] ip_mroute_setsockopt+0xeaf/0x1250 [ 856.460681][T12343] ? ipmr_rule_default+0x70/0x70 [ 856.465661][T12343] ? __might_sleep+0xf0/0xf0 [ 856.470277][T12343] ip_setsockopt+0x568/0x3130 [ 856.474996][T12343] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 856.480387][T12343] ? aa_sk_perm+0x7dc/0x910 [ 856.484912][T12343] ? aa_af_perm+0x340/0x340 [ 856.489427][T12343] ? __fget_files+0x40f/0x480 [ 856.494129][T12343] ? aa_sock_opt_perm+0x74/0x100 [ 856.499082][T12343] ? sock_common_setsockopt+0x32/0xb0 [ 856.504486][T12343] ? raw_setsockopt+0xc5/0x180 [ 856.509274][T12343] ? sock_common_recvmsg+0x1c0/0x1c0 [ 856.514582][T12343] __sys_setsockopt+0x2bf/0x3d0 [ 856.519477][T12343] __x64_sys_setsockopt+0xb1/0xc0 [ 856.524547][T12343] do_syscall_64+0x4c/0xa0 [ 856.528995][T12343] ? clear_bhb_loop+0x30/0x80 [ 856.533686][T12343] ? clear_bhb_loop+0x30/0x80 [ 856.538384][T12343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 856.544295][T12343] RIP: 0033:0x7ff8bbdabe59 [ 856.548733][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.568375][T12343] RSP: 002b:00007ff8ba005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.576830][T12343] RAX: ffffffffffffffda RBX: 00007ff8bc024fa0 RCX: 00007ff8bbdabe59 [ 856.584829][T12343] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 856.592823][T12343] RBP: 00007ff8bbe41d6f R08: 000000000000003c R09: 0000000000000000 [ 856.600824][T12343] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 856.608812][T12343] R13: 00007ff8bc025038 R14: 00007ff8bc024fa0 R15: 00007ffe776a9c58 [ 856.616815][T12343] [ 856.619900][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.651310][T12343] [ 856.658655][T12343] ============================= [ 856.664030][T12343] WARNING: suspicious RCU usage [ 856.670286][T12343] syzkaller #0 Not tainted [ 856.680407][T12343] ----------------------------- [ 856.685573][T12343] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 856.699615][T12343] [ 856.699615][T12343] other info that might help us debug this: [ 856.699615][T12343] [ 856.710347][T12343] [ 856.710347][T12343] rcu_scheduler_active = 2, debug_locks = 1 [ 856.724423][T12343] 1 lock held by syz.6.2267/12343: [ 856.729661][T12343] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 856.747583][T12343] [ 856.747583][T12343] stack backtrace: [ 856.754861][T12343] CPU: 1 PID: 12343 Comm: syz.6.2267 Not tainted syzkaller #0 [ 856.762339][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.772422][T12343] Call Trace: [ 856.775729][T12343] [ 856.778671][T12343] dump_stack_lvl+0x188/0x250 [ 856.783418][T12343] ? load_image+0x400/0x400 [ 856.787943][T12343] ? show_regs_print_info+0x20/0x20 [ 856.793174][T12343] ? lockdep_rcu_suspicious+0x110/0x180 [ 856.798752][T12343] ? local_bh_enable+0x20/0x20 [ 856.803563][T12343] rhltable_lookup+0x61e/0x7c0 [ 856.808358][T12343] ? local_bh_enable+0x20/0x20 [ 856.813160][T12343] ? mr_mfc_find_parent+0x190/0x190 [ 856.818391][T12343] ? mark_lock+0x94/0x320 [ 856.822755][T12343] ? local_bh_enable+0x20/0x20 [ 856.827545][T12343] ? mark_lock+0x94/0x320 [ 856.831902][T12343] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 856.837909][T12343] ? lock_chain_count+0x20/0x20 [ 856.842786][T12343] mr_mfc_find_any_parent+0xb6/0x1e0 [ 856.848108][T12343] ? local_bh_enable+0x20/0x20 [ 856.852900][T12343] ip_mr_forward+0x24c/0xf90 [ 856.857525][T12343] ipmr_mfc_add+0x23cc/0x2d40 [ 856.862254][T12343] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 856.867219][T12343] ? __lock_acquire+0x7d10/0x7d10 [ 856.872287][T12343] ip_mroute_setsockopt+0xeaf/0x1250 [ 856.877607][T12343] ? ipmr_rule_default+0x70/0x70 [ 856.882587][T12343] ? __might_sleep+0xf0/0xf0 [ 856.887209][T12343] ip_setsockopt+0x568/0x3130 [ 856.891939][T12343] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 856.897338][T12343] ? aa_sk_perm+0x7dc/0x910 [ 856.901861][T12343] ? aa_af_perm+0x340/0x340 [ 856.906466][T12343] ? __fget_files+0x40f/0x480 [ 856.911168][T12343] ? aa_sock_opt_perm+0x74/0x100 [ 856.916151][T12343] ? sock_common_setsockopt+0x32/0xb0 [ 856.921544][T12343] ? raw_setsockopt+0xc5/0x180 [ 856.926325][T12343] ? sock_common_recvmsg+0x1c0/0x1c0 [ 856.931647][T12343] __sys_setsockopt+0x2bf/0x3d0 [ 856.936519][T12343] __x64_sys_setsockopt+0xb1/0xc0 [ 856.941573][T12343] do_syscall_64+0x4c/0xa0 [ 856.946006][T12343] ? clear_bhb_loop+0x30/0x80 [ 856.950714][T12343] ? clear_bhb_loop+0x30/0x80 [ 856.955422][T12343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 856.961353][T12343] RIP: 0033:0x7ff8bbdabe59 [ 856.965791][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.985407][T12343] RSP: 002b:00007ff8ba005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.993843][T12343] RAX: ffffffffffffffda RBX: 00007ff8bc024fa0 RCX: 00007ff8bbdabe59 [ 857.001825][T12343] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 857.009811][T12343] RBP: 00007ff8bbe41d6f R08: 000000000000003c R09: 0000000000000000 [ 857.017795][T12343] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 857.025780][T12343] R13: 00007ff8bc025038 R14: 00007ff8bc024fa0 R15: 00007ffe776a9c58 [ 857.033776][T12343]