last executing test programs: 11m23.250900882s ago: executing program 1 (id=486): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x9, 0x1, 0x458, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x2, 0x2, 0x73, 0xffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000100)={0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000e40)='./binderfs/binder0\x00') 11m18.892842606s ago: executing program 1 (id=494): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 11m17.17235743s ago: executing program 1 (id=498): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x10, 0x10001) 11m15.553976852s ago: executing program 1 (id=503): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x26d, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_setup(0x5, &(0x7f0000001040)=0x0) io_pgetevents(r5, 0x0, 0x2, &(0x7f0000001080)=[{}, {}], &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x5]}, 0x8}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x400448c8, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r7) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x0, 0x1, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000005280)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 11m11.723471722s ago: executing program 1 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 11m10.562803551s ago: executing program 1 (id=517): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 10m54.214996278s ago: executing program 32 (id=517): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 6m44.504330503s ago: executing program 5 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0}, &(0x7f0000000d00), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 6m44.462107454s ago: executing program 5 (id=1258): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6m37.080585321s ago: executing program 5 (id=1276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m36.882043152s ago: executing program 5 (id=1278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@nomblk_io_submit}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x140821, &(0x7f0000000b80)=ANY=[], 0xfe, 0x19c, &(0x7f0000000440)="$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") recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0xc0) 6m35.106775976s ago: executing program 5 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc0}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) 6m33.818871476s ago: executing program 5 (id=1285): gettid() timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) 6m33.449141459s ago: executing program 33 (id=1285): gettid() timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) 4m3.037546555s ago: executing program 4 (id=1745): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x10, 0x7, 0x4, 0x85f, 0x1}], &(0x7f0000000640)='GPL\x00', 0x200, 0x38, &(0x7f00000006c0)=""/56, 0x40f00, 0x21, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x5, 0x3, 0x5}, 0x10, 0x1be4c, r0, 0x9, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x3, 0x5, 0x6}, {0x1, 0x1, 0x1, 0x6}, {0x4, 0x1, 0x10, 0x3}, {0x2, 0x2, 0x6, 0x5}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x4, 0x10, 0x5}, {0x3, 0x3, 0xa, 0x1}, {0x5, 0x2, 0x6, 0x8}, {0x0, 0x2, 0x8, 0xc}], 0x10, 0x4, @void, @value}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0xa98) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x1000000) syz_open_dev$cec(0x0, 0x0, 0x80) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000200)=""/183, 0xc8}, {&(0x7f0000000340)=""/162, 0xfec2}, {&(0x7f00000004c0)=""/88, 0x65}, {&(0x7f0000000540)=""/215, 0x107}, {&(0x7f00000007c0)=""/218, 0xda}], 0x5, 0x80000001, 0x3f7a) 4m2.270064391s ago: executing program 4 (id=1747): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x69a0, &(0x7f0000000340)={0x0, 0x2d76, 0x8000, 0x0, 0x4e}, 0x0, &(0x7f00000001c0)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r8, r9], 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3m58.330796262s ago: executing program 4 (id=1755): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x40048c0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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") ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x9, 0x7, "21507f99621acf6dd385ce83b03efcce17bee4", 0x1, 0xb}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff010000000100000056000000", 0x1c}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.893452495s ago: executing program 4 (id=1758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$kcm(0x10, 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x25, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_delrule={0x94, 0x21, 0x10, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x14, 0xc1, 0x4a, 0x0, 0x0, 0x5, 0x10}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @local}]}, 0x94}}, 0x40080) 3m53.149629802s ago: executing program 4 (id=1766): syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb0180c2000000ffff"], 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x20000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) read$alg(r4, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = io_uring_setup(0x673d, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) 3m47.661841315s ago: executing program 4 (id=1777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a4df067cd747609034726b447faa9ef3d4395b53a568ef0a6303869244d9a1f0c04dab210fa67dc9563a64f89569871b5f", 0x31) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3m32.132864885s ago: executing program 34 (id=1777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a4df067cd747609034726b447faa9ef3d4395b53a568ef0a6303869244d9a1f0c04dab210fa67dc9563a64f89569871b5f", 0x31) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 12.153188676s ago: executing program 7 (id=2500): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000140), 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100001000000000000020000ac1414bb000000000000000000000000000000000000000000000000000000004e2400004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa0000000000000000000000000300000000000000060000000000000004ef00000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000a000000cd0000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/255], 0x150}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$kvm(0x0, 0x0, 0x101000, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) 8.243324676s ago: executing program 7 (id=2517): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) syz_open_procfs(0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.739495107s ago: executing program 7 (id=2528): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x40010) 6.734410798s ago: executing program 2 (id=2529): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) shutdown(r2, 0x1) write(r2, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) eventfd2(0x6, 0x80001) keyctl$setperm(0x5, r3, 0x10000601) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) 6.123095302s ago: executing program 3 (id=2530): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES16], 0x1, 0x236, &(0x7f0000000400)="$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") open(&(0x7f0000000140)='./file1\x00', 0x48081, 0x60) 5.708336916s ago: executing program 7 (id=2531): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x400) lseek(r0, 0xfe, 0x1) 5.336563208s ago: executing program 2 (id=2534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.336121098s ago: executing program 7 (id=2535): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@lazytime}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@noquota}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nodiscard}]}, 0x1, 0x521, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4400) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, 0x0) 5.202772499s ago: executing program 3 (id=2537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$kcm(0x10, 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40080) 5.15286498s ago: executing program 2 (id=2538): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) syz_open_procfs(0x0, &(0x7f0000000380)='oom_adj\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.587073704s ago: executing program 2 (id=2540): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 4.162934717s ago: executing program 6 (id=2541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @local}, {0x0, @random="f221fca96934"}, 0x16, {0x2, 0x0, @private=0xa010101}, 'veth0_virt_wifi\x00'}) 3.908047049s ago: executing program 3 (id=2542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.85991046s ago: executing program 6 (id=2543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) mkdirat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x120) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea5, 0x0, 0x0, r7}) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$cgroup_netprio_ifpriomap(r4, 0x0, 0x2, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="e000000010000100e3ff00000300000061656769733132380000000000000400"/204], 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) 3.85908679s ago: executing program 2 (id=2544): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() process_vm_readv(r2, &(0x7f0000001240)=[{&(0x7f0000000180)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000002400)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040d30455070000000000010902240001000040b109040000010300010009210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 2.745947478s ago: executing program 6 (id=2545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x7f}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x70e923e8, 0xa, 0x2, 0x6, 0x8, 0xc6, 0x10, 0x5, 0xc, 0x2, 0xc2, 0xb, 0x5}, {0x2, 0x400, 0x2, 0xe5, 0x7, 0x0, 0x6, 0x4, 0x9, 0x3a, 0x4, 0xf, 0x6}, {0x40, 0x9, 0x0, 0x4, 0x3, 0x6, 0xd4, 0x7, 0xb2, 0x9, 0x4, 0xa4, 0x200}], 0x40}) 2.57892818s ago: executing program 0 (id=2546): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.484925211s ago: executing program 0 (id=2547): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x1, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x64, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x110}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x140000cc) fchdir(r2) setsockopt$inet6_buf(r2, 0x29, 0xca, &(0x7f0000000400)="ac2bf72ae7d3f403381be693e66c792eaae1e13c2e20a3ae5c8d8bc3e6deb4e6d9c77dc0ceedf99098b0ec5ec75c17de0a292357fc5d60eb7f24d851315e085e222a660c2905c9d572a827609ba4d2697f4ccd649d6b30a07755f07770819be195d85e270e4815879930498868db08ac4a685ec35beade3633ba71af4b502b18e2584b0f9d9d4d2aca326486308492ca1f803ec2de91e081236608c57a89c4dc71ee341dda7873a12c49cf562609a41f6c6dfa5c36c9e5c9d2898fe371e4a9c78d0a8c782781429c1dac992332c40fe58eb145ae0695c9faff252d95fc3a3fd9067be8c2203e2ec740", 0xe9) open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) 2.383565062s ago: executing program 6 (id=2548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.361576641s ago: executing program 3 (id=2549): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280), 0x1, 0x42e, &(0x7f0000000940)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x192) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 2.295355262s ago: executing program 0 (id=2550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) 2.294862452s ago: executing program 7 (id=2551): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000440)={r3}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) 2.259639342s ago: executing program 6 (id=2552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="dfcdf3d8c666b8010000000f01c1f69dcf1a66b94c09000066b80000000066ba008000000f30f4b81e008ee066b9e80000000f3264f20fd05f35ba4200b07bee", 0x40}], 0x1, 0xf8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.137192963s ago: executing program 0 (id=2553): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) 2.090855484s ago: executing program 2 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020801010000000020000000050000072f401c6ddc8070749e8204e6b047bd76"], 0x14}, 0x1, 0x0, 0x0, 0x404c080}, 0x80080) 1.988723655s ago: executing program 3 (id=2555): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 761.051204ms ago: executing program 0 (id=2556): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f00000008c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 458.923086ms ago: executing program 6 (id=2557): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) fstat(r1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @broadcast}, 0x102, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8000000000000001, 0x480000000000000, 0xd}) 115.378019ms ago: executing program 3 (id=2558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$kcm(0x10, 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40080) 0s ago: executing program 0 (id=2559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r0, 0x0}) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x20401, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000300)={"ff035a08e384bc188d94d32d06bddc7aa96aa68ea2c439c14ce029be5457", 0x2, 0x0, 0x40, [0x101, 0x2, 0x3, 0x2, 0xa1, 0x8a, 0x5, 0x10, 0x16000000, 0x595, 0xbb75, 0x0, 0x0, 0x3, 0xf, 0xb4e, 0x6, 0x1]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): ): checking transaction log (loop5) [ 381.975244][ T7244] REISERFS (device loop5): Using r5 hash to sort names [ 382.268501][ T7271] loop4: detected capacity change from 0 to 256 [ 383.156462][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 386.328170][ T7323] loop3: detected capacity change from 0 to 64 [ 386.479342][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 386.633093][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 386.686615][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 386.699234][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 386.741496][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 386.752218][ T7333] loop4: detected capacity change from 0 to 2048 [ 386.754174][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 386.785188][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 386.821672][ T7333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.392741][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 391.468017][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 391.557789][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 391.675158][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 391.790561][ T7397] loop5: detected capacity change from 0 to 64 [ 391.855459][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 391.867762][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 391.875581][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 391.883407][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 391.891749][ T7392] wireguard: wg1: Could not create IPv4 socket [ 393.043004][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 396.282229][ T7450] loop4: detected capacity change from 0 to 64 [ 396.418171][ T5566] Bluetooth: hci0: command 0x0405 tx timeout [ 396.540885][ T7449] loop3: detected capacity change from 0 to 2048 [ 397.270094][ T7449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.098241][ T7477] loop4: detected capacity change from 0 to 21 [ 403.100130][ T7507] vivid-003: kernel_thread() failed [ 406.953764][ T4255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.579011][ T7614] wireguard: wg1: Could not create IPv4 socket [ 415.197066][ T7604] input: syz1 as /devices/virtual/input/input8 [ 419.961560][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.486980][ T7669] loop4: detected capacity change from 0 to 64 [ 422.425020][ T7674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.267059][ T7691] loop3: detected capacity change from 0 to 64 [ 424.736137][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 424.774210][ T7697] wireguard: wg1: Could not create IPv4 socket [ 424.788024][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.860'. [ 425.832460][ T7708] loop5: detected capacity change from 0 to 128 [ 425.858513][ T7710] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 425.917418][ T7710] batman_adv: batadv0: Adding interface: dummy0 [ 425.934137][ T7710] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.975440][ T7708] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 426.007443][ T7708] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 426.041629][ T7710] batman_adv: batadv0: Interface activated: dummy0 [ 426.111813][ T7711] batadv0: mtu less than device minimum [ 426.148428][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.161871][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.174551][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.187291][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.200053][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.212892][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.225678][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.238350][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 426.251142][ T7711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.539260][ T4182] Bluetooth: hci0: ACL packet for unknown connection handle 3840 [ 427.607925][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 427.618921][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.871'. [ 431.577608][ T4182] Bluetooth: hci0: ACL packet for unknown connection handle 3840 [ 432.129491][ T7778] wireguard: wg1: Could not create IPv4 socket [ 432.237501][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 432.271933][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 432.823316][ T5566] Bluetooth: hci0: command 0x0406 tx timeout [ 433.677026][ T7799] loop3: detected capacity change from 0 to 64 [ 434.549065][ T7806] loop3: detected capacity change from 0 to 21 [ 435.333218][ T4182] Bluetooth: hci4: ACL packet for unknown connection handle 3840 [ 436.818329][ T7822] overlayfs: missing 'lowerdir' [ 439.504538][ T6499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.609658][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.618438][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.036779][ T7863] loop5: detected capacity change from 0 to 40427 [ 441.080465][ T7866] overlayfs: missing 'lowerdir' [ 441.358683][ T7863] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 441.366650][ T7863] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 441.409101][ T7863] F2FS-fs (loop5): invalid crc value [ 441.517375][ T7863] F2FS-fs (loop5): Found nat_bits in checkpoint [ 441.703687][ T7863] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 441.711795][ T7863] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 442.103481][ T7879] attempt to access beyond end of device [ 442.103481][ T7879] loop5: rw=2049, want=78344, limit=40427 [ 442.955603][ T7887] input: syz1 as /devices/virtual/input/input9 [ 444.372127][ T7908] overlayfs: missing 'lowerdir' [ 447.360044][ T7931] loop5: detected capacity change from 0 to 40427 [ 447.658130][ T7931] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 447.666286][ T7931] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 447.823678][ T7931] F2FS-fs (loop5): invalid crc value [ 448.709639][ T7931] F2FS-fs (loop5): Found nat_bits in checkpoint [ 448.756854][ T7931] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 448.764944][ T7931] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 452.941800][ T7983] loop5: detected capacity change from 0 to 8192 [ 453.027382][ T7983] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 453.061783][ T7983] REISERFS (device loop5): using ordered data mode [ 453.069991][ T7983] reiserfs: using flush barriers [ 453.083196][ T7983] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 453.107970][ T7983] REISERFS (device loop5): checking transaction log (loop5) [ 453.157002][ T7983] REISERFS (device loop5): Using r5 hash to sort names [ 455.601451][ T8004] overlayfs: missing 'lowerdir' [ 458.003594][ T8022] loop4: detected capacity change from 0 to 2048 [ 458.318032][ T8022] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 459.439489][ T8022] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 460.884865][ T4182] Bluetooth: hci1: ACL packet for unknown connection handle 3840 [ 461.254632][ T8054] loop3: detected capacity change from 0 to 64 [ 465.157449][ T4182] Bluetooth: hci4: ACL packet for unknown connection handle 3840 [ 466.739378][ T8096] loop4: detected capacity change from 0 to 2048 [ 466.833163][ T8096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.622216][ T8112] loop3: detected capacity change from 0 to 40427 [ 468.700441][ T8112] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 468.709046][ T8112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 468.721814][ T8112] F2FS-fs (loop3): invalid crc value [ 468.777197][ T8112] F2FS-fs (loop3): Found nat_bits in checkpoint [ 468.837839][ T8112] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 468.845063][ T8112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 470.752408][ T6098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.582622][ T4182] Bluetooth: hci2: ACL packet for unknown connection handle 3840 [ 475.689001][ T8175] loop4: detected capacity change from 0 to 2048 [ 475.834742][ T8175] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 475.906652][ T8175] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 477.563265][ T4182] Bluetooth: hci1: ACL packet for unknown connection handle 3840 [ 478.438337][ T8204] wireguard: wg1: Could not create IPv4 socket [ 479.885353][ T8180] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 479.958908][ T8180] EXT4-fs (loop4): Remounting filesystem read-only [ 481.555039][ T8224] loop4: detected capacity change from 0 to 2048 [ 481.782470][ T8224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.860680][ T8253] loop4: detected capacity change from 0 to 40427 [ 486.972743][ T8253] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 486.994880][ T8253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 487.091310][ T8253] F2FS-fs (loop4): invalid crc value [ 487.159064][ T8253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 487.299432][ T8286] wireguard: wg1: Could not create IPv4 socket [ 491.143806][ T8321] overlayfs: missing 'workdir' [ 492.983427][ T8341] loop3: detected capacity change from 0 to 2048 [ 493.122824][ T8341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.356112][ T8369] overlayfs: missing 'workdir' [ 496.204724][ T8372] wireguard: wg1: Could not create IPv4 socket [ 496.771931][ T8380] loop5: detected capacity change from 0 to 8 [ 496.930143][ T8380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 496.960183][ T8380] SQUASHFS error: Failed to read block 0x91: -5 [ 496.969195][ T8380] SQUASHFS error: Unable to read metadata cache entry [8f] [ 496.983386][ T8380] SQUASHFS error: Unable to read inode 0x11f [ 497.908860][ T8393] vivid-000: ================= START STATUS ================= [ 498.097582][ T8393] vivid-000: Radio HW Seek Mode: Bounded [ 498.103355][ T8393] vivid-000: Radio Programmable HW Seek: false [ 498.334837][ T8393] vivid-000: RDS Rx I/O Mode: Block I/O [ 498.340543][ T8393] vivid-000: Generate RBDS Instead of RDS: false [ 498.584882][ T8393] vivid-000: RDS Reception: true [ 498.589919][ T8393] vivid-000: RDS Program Type: 0 inactive [ 498.773459][ T8393] vivid-000: RDS PS Name: inactive [ 498.894827][ T8393] vivid-000: RDS Radio Text: inactive [ 498.900420][ T8393] vivid-000: RDS Traffic Announcement: false inactive [ 499.234852][ T8393] vivid-000: RDS Traffic Program: false inactive [ 499.241269][ T8393] vivid-000: RDS Music: false inactive [ 499.338793][ T8393] vivid-000: ================== END STATUS ================== [ 502.049353][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.057649][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.428234][ T6013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.015437][ T8459] input: syz1 as /devices/virtual/input/input10 [ 506.390875][ T8477] vivid-001: ================= START STATUS ================= [ 506.417514][ T8477] vivid-001: Radio HW Seek Mode: Bounded [ 506.423749][ T8477] vivid-001: Radio Programmable HW Seek: false [ 506.450572][ T8477] vivid-001: RDS Rx I/O Mode: Block I/O [ 506.479138][ T8477] vivid-001: Generate RBDS Instead of RDS: false [ 506.506639][ T8477] vivid-001: RDS Reception: true [ 506.538247][ T8477] vivid-001: RDS Program Type: 0 inactive [ 506.593874][ T8477] vivid-001: RDS PS Name: inactive [ 506.667355][ T8477] vivid-001: RDS Radio Text: inactive [ 506.702035][ T8477] vivid-001: RDS Traffic Announcement: false inactive [ 507.288926][ T8477] vivid-001: RDS Traffic Program: false inactive [ 507.321690][ T8477] vivid-001: RDS Music: false inactive [ 507.510949][ T8477] vivid-001: ================== END STATUS ================== [ 508.586705][ T8513] dlm: dev_write: no op 0 74000000000000 [ 508.743821][ T4182] Bluetooth: hci4: ACL packet for unknown connection handle 3840 [ 510.203736][ T8528] loop4: detected capacity change from 0 to 40427 [ 510.248660][ T8528] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 510.257369][ T8528] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 510.268604][ T8528] F2FS-fs (loop4): invalid crc value [ 510.324649][ T8528] F2FS-fs (loop4): Found nat_bits in checkpoint [ 510.397154][ T8528] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 510.405577][ T8528] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 510.886102][ T8544] attempt to access beyond end of device [ 510.886102][ T8544] loop4: rw=2049, want=78344, limit=40427 [ 512.517405][ T8558] overlayfs: failed to clone upperpath [ 514.394542][ T4182] Bluetooth: hci4: ACL packet for unknown connection handle 3840 [ 515.716086][ T8593] vivid-000: ================= START STATUS ================= [ 515.800911][ T8593] vivid-000: Radio HW Seek Mode: Bounded [ 515.867831][ T8593] vivid-000: Radio Programmable HW Seek: false [ 515.899515][ T8593] vivid-000: RDS Rx I/O Mode: Block I/O [ 516.013801][ T8593] vivid-000: Generate RBDS Instead of RDS: false [ 516.034582][ T4182] Bluetooth: hci2: ACL packet for unknown connection handle 3840 [ 516.126700][ T8593] vivid-000: RDS Reception: true [ 516.202654][ T8593] vivid-000: RDS Program Type: 0 inactive [ 516.517829][ T8614] loop4: detected capacity change from 0 to 40427 [ 516.534820][ T8593] vivid-000: RDS PS Name: inactive [ 516.540831][ T8593] vivid-000: RDS Radio Text: inactive [ 516.548745][ T8593] vivid-000: RDS Traffic Announcement: false inactive [ 516.556334][ T8593] vivid-000: RDS Traffic Program: false inactive [ 516.563001][ T8593] vivid-000: RDS Music: false inactive [ 516.569097][ T8593] vivid-000: ================== END STATUS ================== [ 516.669534][ T8614] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 516.677413][ T8614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 516.688788][ T8614] F2FS-fs (loop4): invalid crc value [ 516.793145][ T8614] F2FS-fs (loop4): Found nat_bits in checkpoint [ 516.882218][ T8614] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 516.889650][ T8614] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 517.271849][ T8629] attempt to access beyond end of device [ 517.271849][ T8629] loop4: rw=2049, want=78344, limit=40427 [ 520.306928][ T8659] loop4: detected capacity change from 0 to 40427 [ 520.411566][ T8659] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 520.421349][ T8659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 520.437614][ T8659] F2FS-fs (loop4): invalid crc value [ 521.630689][ T8659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 521.701377][ T8659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 521.708574][ T8659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 521.762969][ T4182] Bluetooth: hci0: ACL packet for unknown connection handle 3840 [ 522.929903][ T8692] attempt to access beyond end of device [ 522.929903][ T8692] loop4: rw=2049, want=78344, limit=40427 [ 525.353721][ T8717] wireguard: wg1: Could not create IPv4 socket [ 525.984562][ T4182] Bluetooth: hci0: ACL packet for unknown connection handle 3840 [ 529.694610][ T8758] wireguard: wg1: Could not create IPv4 socket [ 530.207432][ T4182] Bluetooth: hci2: ACL packet for unknown connection handle 3840 [ 533.743940][ T4854] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.581810][ T8909] loop3: detected capacity change from 0 to 256 [ 545.775460][ T8909] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 546.791976][ T8938] loop4: detected capacity change from 0 to 2048 [ 547.041688][ T8938] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 548.037338][ T8946] loop3: detected capacity change from 0 to 40427 [ 548.180520][ T8946] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 548.188826][ T8946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 548.208525][ T8946] F2FS-fs (loop3): invalid crc value [ 548.266077][ T8938] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 548.382564][ T8946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 548.505503][ T8946] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 548.512681][ T8946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 548.773948][ T8960] attempt to access beyond end of device [ 548.773948][ T8960] loop3: rw=2049, want=78344, limit=40427 [ 549.116443][ T8953] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 549.374089][ T8953] EXT4-fs (loop4): Remounting filesystem read-only [ 554.238189][ T9009] loop4: detected capacity change from 0 to 64 [ 555.487268][ T9016] wireguard: wg1: Could not create IPv4 socket [ 557.725364][ T9043] futex_wake_op: syz.0.1272 tries to shift op by 35; fix this program [ 558.150099][ T9030] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 558.195237][ T9030] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 559.528774][ T9063] loop5: detected capacity change from 0 to 512 [ 559.629425][ T9060] loop3: detected capacity change from 0 to 40427 [ 559.701697][ T9063] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 559.724980][ T9063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 559.744478][ T9060] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 559.752445][ T9060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 559.765507][ T9060] F2FS-fs (loop3): invalid crc value [ 559.793192][ T9063] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1278: bad orphan inode 131083 [ 559.895478][ T9063] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,nomblk_io_submit,,errors=continue. Quota mode: none. [ 559.914309][ T9060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 560.072282][ T9060] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 560.079711][ T9060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 560.452943][ T9076] attempt to access beyond end of device [ 560.452943][ T9076] loop3: rw=2049, want=78344, limit=40427 [ 560.895898][ T9074] loop4: detected capacity change from 0 to 40427 [ 560.971829][ T9074] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 560.979686][ T9074] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 560.990850][ T9074] F2FS-fs (loop4): invalid crc value [ 561.076235][ T6378] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 561.137531][ T9074] F2FS-fs (loop4): Found nat_bits in checkpoint [ 561.251453][ T9074] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 561.258976][ T9074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 561.630496][ T9082] attempt to access beyond end of device [ 561.630496][ T9082] loop4: rw=2049, want=78344, limit=40427 [ 562.484308][ T6107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.604087][ T6107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.812900][ T6107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.891902][ T9087] loop3: detected capacity change from 0 to 2048 [ 562.971387][ T9087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.992495][ T6107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.406398][ T9096] loop3: detected capacity change from 0 to 16 [ 563.498126][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.504599][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.595711][ T9096] erofs: (device loop3): mounted with root inode @ nid 36. [ 563.710294][ T9096] attempt to access beyond end of device [ 563.710294][ T9096] loop3: rw=0, want=34359738368, limit=16 [ 564.337394][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 564.418154][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 564.442884][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 564.474601][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 564.514457][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 564.606948][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 564.680381][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.741401][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.828333][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.477676][ T9114] loop3: detected capacity change from 0 to 256 [ 565.621973][ T9114] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 566.133519][ T9099] chnl_net:caif_netlink_parms(): no params data found [ 566.405373][ T4216] Bluetooth: hci0: command 0x0409 tx timeout [ 566.705970][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.713237][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.772530][ T9136] loop3: detected capacity change from 0 to 40427 [ 566.795340][ T9099] device bridge_slave_0 entered promiscuous mode [ 566.878873][ T9136] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 566.887426][ T9136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 566.903796][ T9136] F2FS-fs (loop3): invalid crc value [ 566.913538][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.960139][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.969222][ T9136] F2FS-fs (loop3): Found nat_bits in checkpoint [ 567.006177][ T9099] device bridge_slave_1 entered promiscuous mode [ 567.031977][ T9136] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 567.039711][ T9136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 567.410346][ T9149] attempt to access beyond end of device [ 567.410346][ T9149] loop3: rw=2049, want=78344, limit=40427 [ 567.862826][ T6107] device hsr_slave_0 left promiscuous mode [ 567.902252][ T6107] device hsr_slave_1 left promiscuous mode [ 567.919896][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.960350][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.020376][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.076266][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.125046][ T6107] device bridge_slave_1 left promiscuous mode [ 568.141789][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.155076][ T6107] device bridge_slave_0 left promiscuous mode [ 568.161339][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.199686][ T6107] device veth1_macvtap left promiscuous mode [ 568.227790][ T6107] device veth0_macvtap left promiscuous mode [ 568.233940][ T6107] device veth1_vlan left promiscuous mode [ 568.250778][ T6107] device veth0_vlan left promiscuous mode [ 568.455115][ T1340] Bluetooth: hci0: command 0x041b tx timeout [ 568.711166][ T1278] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.780826][ T9164] loop3: detected capacity change from 0 to 2048 [ 568.833823][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 568.890550][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 568.909347][ T9164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.941999][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.992370][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.431409][ T6107] bond0 (unregistering): Released all slaves [ 569.668089][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.701971][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.770044][ T9099] team0: Port device team_slave_0 added [ 569.916469][ T9099] team0: Port device team_slave_1 added [ 570.050234][ T9180] loop3: detected capacity change from 0 to 64 [ 571.135652][ T9184] loop4: detected capacity change from 0 to 40427 [ 571.337646][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 571.384107][ T9184] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 571.392419][ T9184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 571.404933][ T9184] F2FS-fs (loop4): invalid crc value [ 571.460862][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.514285][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.548896][ T9184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 571.608290][ T9184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 571.615735][ T9184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 571.630311][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.700309][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.732001][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.835438][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.979400][ T9197] attempt to access beyond end of device [ 571.979400][ T9197] loop4: rw=2049, want=78344, limit=40427 [ 572.695470][ T9099] device hsr_slave_0 entered promiscuous mode [ 572.710490][ T9099] device hsr_slave_1 entered promiscuous mode [ 572.747554][ T9099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.801714][ T9099] Cannot create hsr debugfs directory [ 573.405087][ T5566] Bluetooth: hci0: command 0x0419 tx timeout [ 573.433370][ T9099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.497854][ T9099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.551355][ T9099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.641451][ T9099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.929512][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.147845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.162807][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.207976][ T9099] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.286870][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.332724][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.416359][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.423608][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.552326][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.595718][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.676550][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.842940][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.850225][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.992666][ T9247] loop4: detected capacity change from 0 to 40427 [ 575.007995][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.056269][ T9247] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 575.064613][ T9247] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 575.078279][ T9247] F2FS-fs (loop4): invalid crc value [ 575.102091][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.119355][ T9247] F2FS-fs (loop4): Found nat_bits in checkpoint [ 575.173316][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 575.222064][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.236273][ T9247] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 575.243474][ T9247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 575.289424][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.474597][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 575.610987][ T9259] attempt to access beyond end of device [ 575.610987][ T9259] loop4: rw=2049, want=78344, limit=40427 [ 575.879318][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.968699][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.038376][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.105675][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.155423][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.650207][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 576.691912][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 576.733422][ T9099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.471748][ T9292] loop4: detected capacity change from 0 to 8 [ 578.487741][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.517433][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.596112][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.611888][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.681460][ T9099] device veth0_vlan entered promiscuous mode [ 578.694914][ T9292] SQUASHFS error: Failed to read block 0x29b: -5 [ 578.702196][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.715779][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.723558][ T9292] SQUASHFS error: Unable to read metadata cache entry [299] [ 578.754324][ T9099] device veth1_vlan entered promiscuous mode [ 578.897832][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 578.962790][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 579.032280][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.062874][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.456836][ T9099] device veth0_macvtap entered promiscuous mode [ 580.173092][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.201961][ T9099] device veth1_macvtap entered promiscuous mode [ 580.451548][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.502661][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.554550][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.607981][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.618165][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.629750][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.639755][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.650886][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.667823][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.684317][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.721672][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.905585][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.955072][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.139773][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.211830][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.253306][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.294798][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.304651][ T9099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.344783][ T9099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.365873][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.377352][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.435188][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.463031][ T9099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.483441][ T9099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.496231][ T9099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.515343][ T9099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.392690][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.447398][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.550332][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 582.595357][ T6098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.631536][ T6098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.662153][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 584.612550][ T9382] wireguard: wg1: Could not create IPv4 socket [ 584.903031][ T9388] loop3: detected capacity change from 0 to 1024 [ 585.158659][ T9394] loop6: detected capacity change from 0 to 2048 [ 585.304153][ T9388] EXT4-fs (loop3): Test dummy encryption mode enabled [ 585.330428][ T9394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.378916][ T9388] EXT4-fs (loop3): Ignoring removed orlov option [ 585.922112][ T9388] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000006,commit=0x0000000000000005,orlov,barrier=0x0000000000000003,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 586.472061][ T9409] loop6: detected capacity change from 0 to 64 [ 586.804283][ T9388] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 591.117829][ T9475] wireguard: wg1: Could not create IPv4 socket [ 593.740912][ T9513] 9pnet: Insufficient options for proto=fd [ 594.231255][ T9521] loop3: detected capacity change from 0 to 2048 [ 594.362230][ T9521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.239164][ T9551] loop3: detected capacity change from 0 to 2048 [ 597.790276][ T9551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.427264][ T9568] loop6: detected capacity change from 0 to 2048 [ 598.447924][ T9570] loop3: detected capacity change from 0 to 64 [ 598.533787][ T9568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.925575][ T9576] loop6: detected capacity change from 0 to 64 [ 599.275938][ T9579] vivid-003: ================= START STATUS ================= [ 599.283767][ T9579] vivid-003: Radio HW Seek Mode: Bounded [ 599.290134][ T9579] vivid-003: Radio Programmable HW Seek: false [ 599.296589][ T9579] vivid-003: RDS Rx I/O Mode: Block I/O [ 599.302647][ T9579] vivid-003: Generate RBDS Instead of RDS: false [ 599.309400][ T9579] vivid-003: RDS Reception: true [ 599.316398][ T9579] vivid-003: RDS Program Type: 0 inactive [ 599.322318][ T9579] vivid-003: RDS PS Name: inactive [ 599.328458][ T9579] vivid-003: RDS Radio Text: inactive [ 599.333975][ T9579] vivid-003: RDS Traffic Announcement: false inactive [ 599.340842][ T9579] vivid-003: RDS Traffic Program: false inactive [ 599.347431][ T9579] vivid-003: RDS Music: false inactive [ 599.352936][ T9579] vivid-003: ================== END STATUS ================== [ 599.707051][ T9585] loop6: detected capacity change from 0 to 512 [ 599.738419][ T6013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.839427][ T9585] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 600.046963][ T9585] EXT4-fs (loop6): 1 truncate cleaned up [ 600.052799][ T9585] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 600.272069][ T9099] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 600.336961][ T9592] wireguard: wg1: Could not create IPv4 socket [ 602.159508][ T9604] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 604.254916][ T4179] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 604.674796][ T4179] usb 4-1: Using ep0 maxpacket: 32 [ 604.815404][ T4179] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 604.861526][ T4179] usb 4-1: config 0 has no interface number 0 [ 604.911407][ T4179] usb 4-1: config 0 interface 184 has no altsetting 0 [ 605.205610][ T4179] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 605.405765][ T4179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.432286][ T4179] usb 4-1: Product: syz [ 605.444100][ T4179] usb 4-1: Manufacturer: syz [ 605.469369][ T4179] usb 4-1: SerialNumber: syz [ 605.553272][ T4179] usb 4-1: config 0 descriptor?? [ 606.436726][ T4179] smsc75xx v1.0.0 [ 607.734928][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 607.764810][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 607.808204][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 607.854777][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 607.864469][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 607.934789][ T4179] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 607.966435][ T4179] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 608.015903][ T4179] usb 4-1: USB disconnect, device number 3 [ 608.710337][ T9730] loop6: detected capacity change from 0 to 2048 [ 608.852763][ T9730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.995254][ T9735] wireguard: wg1: Could not create IPv4 socket [ 609.894045][ T9745] vivid-003: ================= START STATUS ================= [ 610.235301][ T9745] vivid-003: Radio HW Seek Mode: Bounded [ 610.266393][ T9745] vivid-003: Radio Programmable HW Seek: false [ 610.401467][ T9745] vivid-003: RDS Rx I/O Mode: Block I/O [ 610.420388][ T9745] vivid-003: Generate RBDS Instead of RDS: false [ 610.434781][ T9745] vivid-003: RDS Reception: true [ 610.451070][ T9745] vivid-003: RDS Program Type: 0 inactive [ 610.462550][ T9745] vivid-003: RDS PS Name: inactive [ 610.468193][ T9745] vivid-003: RDS Radio Text: inactive [ 610.473890][ T9745] vivid-003: RDS Traffic Announcement: false inactive [ 610.481170][ T9745] vivid-003: RDS Traffic Program: false inactive [ 610.503609][ T9745] vivid-003: RDS Music: false inactive [ 610.513741][ T9745] vivid-003: ================== END STATUS ================== [ 610.980896][ T9778] loop6: detected capacity change from 0 to 2048 [ 611.072428][ T9778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.087762][ T9846] loop6: detected capacity change from 0 to 2048 [ 615.222684][ T9851] loop4: detected capacity change from 0 to 128 [ 615.256868][ T9846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.373856][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 615.373873][ T26] audit: type=1800 audit(1741934682.373:35): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1439" name="bus" dev="loop4" ino=1048625 res=0 errno=0 [ 615.383722][ T9853] wireguard: wg1: Could not create IPv4 socket [ 618.507745][ T9882] loop4: detected capacity change from 0 to 16 [ 618.660717][ T9882] erofs: (device loop4): mounted with root inode @ nid 36. [ 620.293053][ T9890] loop4: detected capacity change from 0 to 2048 [ 620.459953][ T9890] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.845315][ T9915] bond0: (slave wlan1): Releasing backup interface [ 626.054804][ T9953] vivid-001: kernel_thread() failed [ 626.182465][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.188833][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.457434][ T9966] loop4: detected capacity change from 0 to 512 [ 627.002885][ T9966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 627.028590][ T9964] loop3: detected capacity change from 0 to 2048 [ 627.751768][ T9964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.792040][ T9966] EXT4-fs (loop4): 1 orphan inode deleted [ 627.849281][ T9966] EXT4-fs (loop4): 1 truncate cleaned up [ 627.856088][ T9966] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 627.989131][ T9982] EXT4-fs error (device loop4): ext4_check_all_de:664: inode #12: block 7: comm syz.4.1478: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 628.267722][ T9982] EXT4-fs (loop4): Remounting filesystem read-only [ 628.274348][ T9982] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 631.789538][ T6098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 633.242333][T10041] vivid-001: ================= START STATUS ================= [ 633.250466][T10041] vivid-001: Radio HW Seek Mode: Bounded [ 633.256334][T10041] vivid-001: Radio Programmable HW Seek: false [ 633.262647][T10041] vivid-001: RDS Rx I/O Mode: Block I/O [ 633.268390][T10041] vivid-001: Generate RBDS Instead of RDS: false [ 633.274915][T10041] vivid-001: RDS Reception: true [ 633.280006][T10041] vivid-001: RDS Program Type: 0 inactive [ 633.286055][T10041] vivid-001: RDS PS Name: inactive [ 633.291454][T10041] vivid-001: RDS Radio Text: inactive [ 633.297166][T10041] vivid-001: RDS Traffic Announcement: false inactive [ 633.304239][T10041] vivid-001: RDS Traffic Program: false inactive [ 633.310851][T10041] vivid-001: RDS Music: false inactive [ 633.316582][T10041] vivid-001: ================== END STATUS ================== [ 636.691783][T10065] wireguard: wg1: Could not create IPv4 socket [ 638.370447][T10090] vivid-002: ================= START STATUS ================= [ 638.378280][T10090] vivid-002: Radio HW Seek Mode: Bounded [ 638.384019][T10090] vivid-002: Radio Programmable HW Seek: false [ 638.390395][T10090] vivid-002: RDS Rx I/O Mode: Block I/O [ 638.396250][T10090] vivid-002: Generate RBDS Instead of RDS: false [ 638.402759][T10090] vivid-002: RDS Reception: true [ 638.407905][T10090] vivid-002: RDS Program Type: 0 inactive [ 638.413822][T10090] vivid-002: RDS PS Name: inactive [ 638.419279][T10090] vivid-002: RDS Radio Text: inactive [ 638.425031][T10090] vivid-002: RDS Traffic Announcement: false inactive [ 638.431966][T10090] vivid-002: RDS Traffic Program: false inactive [ 638.438580][T10090] vivid-002: RDS Music: false inactive [ 638.444400][T10090] vivid-002: ================== END STATUS ================== [ 639.928092][T10113] loop4: detected capacity change from 0 to 1024 [ 639.993518][T10113] EXT4-fs (loop4): Ignoring removed orlov option [ 640.004840][T10113] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 640.067434][T10113] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 640.167056][T10113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1522'. [ 640.756444][T10124] wireguard: wg1: Could not create IPv4 socket [ 641.104971][ T1340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 641.520720][ T1340] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.541125][ T1340] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.573927][ T1340] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 642.583169][ T1340] usb 4-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 642.592061][ T1340] usb 4-1: Product: syz [ 642.615041][ T1340] usb 4-1: Manufacturer: syz [ 642.619773][ T1340] usb 4-1: SerialNumber: syz [ 642.627597][ T1340] usb 4-1: config 0 descriptor?? [ 642.712408][ T1340] usb 4-1: selecting invalid altsetting 0 [ 643.880161][ T1340] usb 4-1: USB disconnect, device number 4 [ 644.093807][T10159] loop6: detected capacity change from 0 to 40427 [ 644.365439][T10167] wireguard: wg1: Could not create IPv4 socket [ 644.640099][T10159] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 644.648152][T10159] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 644.660554][T10159] F2FS-fs (loop6): invalid crc value [ 644.838531][T10165] udevd[10165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.893890][T10159] F2FS-fs (loop6): Found nat_bits in checkpoint [ 644.960366][T10159] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 644.967634][T10159] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 645.507759][T10185] attempt to access beyond end of device [ 645.507759][T10185] loop6: rw=2049, want=78344, limit=40427 [ 648.645274][T10217] wireguard: wg1: Could not create IPv4 socket [ 651.481951][T10246] loop3: detected capacity change from 0 to 512 [ 651.757944][T10246] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 651.772791][T10246] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.029411][T10261] wireguard: wg1: Could not create IPv4 socket [ 652.869588][T10276] loop3: detected capacity change from 0 to 512 [ 653.044524][T10276] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 653.137722][T10276] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 653.222912][T10276] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.458442][T10276] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.1567: bit already cleared for inode 16 [ 654.573909][T10296] loop6: detected capacity change from 0 to 512 [ 654.737528][T10296] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 654.788122][T10296] EXT4-fs (loop6): inline encryption not supported [ 655.021738][T10307] loop4: detected capacity change from 0 to 40427 [ 655.099234][T10307] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 655.107089][T10307] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 655.120110][T10296] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,minixdf,discard,min_batch_time=0x0000000000000006,nogrpid,usrjquota=./file0,inlinecrypt,,errors=continue. Quota mode: writeback. [ 655.120672][T10307] F2FS-fs (loop4): invalid crc value [ 655.139972][T10296] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.178590][T10307] F2FS-fs (loop4): Found nat_bits in checkpoint [ 655.415747][T10322] wireguard: wg1: Could not create IPv4 socket [ 655.425160][T10307] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 655.432516][T10307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 655.589380][T10307] attempt to access beyond end of device [ 655.589380][T10307] loop4: rw=2049, want=78344, limit=40427 [ 657.911131][T10349] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 658.173420][T10354] loop4: detected capacity change from 0 to 64 [ 658.580309][T10356] loop3: detected capacity change from 0 to 40427 [ 658.729886][T10356] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 658.737779][T10356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 658.755073][T10356] F2FS-fs (loop3): invalid crc value [ 658.843382][T10356] F2FS-fs (loop3): Found nat_bits in checkpoint [ 658.892873][T10356] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 658.900205][T10356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 659.114854][T10356] attempt to access beyond end of device [ 659.114854][T10356] loop3: rw=2049, want=78344, limit=40427 [ 663.126398][ T4400] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.046268][T10406] loop4: detected capacity change from 0 to 512 [ 664.228746][T10406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 664.416421][T10406] EXT4-fs (loop4): 1 orphan inode deleted [ 664.437401][T10406] EXT4-fs (loop4): 1 truncate cleaned up [ 664.452706][T10406] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 665.283694][T10415] loop3: detected capacity change from 0 to 2048 [ 665.727279][T10415] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 665.801427][T10415] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 667.118281][T10423] loop4: detected capacity change from 0 to 1024 [ 667.645002][T10423] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 667.697831][T10423] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 667.853616][T10444] loop6: detected capacity change from 0 to 40427 [ 667.901310][T10444] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 667.909164][T10444] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 667.922001][T10444] F2FS-fs (loop6): invalid crc value [ 668.016085][T10444] F2FS-fs (loop6): Found nat_bits in checkpoint [ 668.079924][T10444] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 668.087215][T10444] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 668.192409][T10453] loop3: detected capacity change from 0 to 512 [ 668.321884][T10453] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 668.335173][T10453] EXT4-fs (loop3): inline encryption not supported [ 668.548897][T10458] attempt to access beyond end of device [ 668.548897][T10458] loop6: rw=2049, want=78344, limit=40427 [ 669.319342][T10453] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,minixdf,discard,min_batch_time=0x0000000000000006,nogrpid,usrjquota=./file0,inlinecrypt,,errors=continue. Quota mode: writeback. [ 669.347206][T10453] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.738740][T10476] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1628'. [ 672.057505][T10498] loop6: detected capacity change from 0 to 256 [ 672.375585][T10500] loop4: detected capacity change from 0 to 40427 [ 672.580402][T10500] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 672.588339][T10500] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 672.653653][T10500] F2FS-fs (loop4): invalid crc value [ 672.718041][T10500] F2FS-fs (loop4): Found nat_bits in checkpoint [ 672.790100][T10500] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 672.797371][T10500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 673.112328][T10513] attempt to access beyond end of device [ 673.112328][T10513] loop4: rw=2049, want=78344, limit=40427 [ 673.258905][T10517] loop6: detected capacity change from 0 to 64 [ 683.093848][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.146711][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 683.200736][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 683.246582][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 683.266624][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 683.274314][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 683.282283][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.290141][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.299230][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 683.308187][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 683.321052][T10598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.429313][T10598] net_ratelimit: 10 callbacks suppressed [ 683.429326][T10598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.568200][T10606] loop4: detected capacity change from 0 to 64 [ 685.519662][T10617] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1669'. [ 686.371702][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.401789][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.079137][T10641] loop3: detected capacity change from 0 to 16 [ 688.369931][T10641] erofs: (device loop3): mounted with root inode @ nid 36. [ 688.449017][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 693.709445][T10707] loop3: detected capacity change from 0 to 512 [ 693.959686][T10715] loop6: detected capacity change from 0 to 1024 [ 693.966595][T10707] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1695: iget: bad extended attribute block 1 [ 693.997262][T10707] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1695: couldn't read orphan inode 15 (err -117) [ 694.045777][T10707] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 694.238654][T10715] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 694.563907][T10715] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 695.482315][ T4854] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.558768][T10729] loop4: detected capacity change from 0 to 64 [ 696.443996][ T1340] Bluetooth: hci0: command 0x0405 tx timeout [ 698.365661][T10751] loop6: detected capacity change from 0 to 2048 [ 698.458592][T10751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.361974][T10777] loop6: detected capacity change from 0 to 64 [ 705.016839][T10795] loop6: detected capacity change from 0 to 40427 [ 705.110147][T10795] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 705.118050][T10795] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 705.165952][T10795] F2FS-fs (loop6): invalid crc value [ 705.355928][T10795] F2FS-fs (loop6): Found nat_bits in checkpoint [ 705.417454][T10795] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 705.424561][T10795] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 706.102578][T10808] attempt to access beyond end of device [ 706.102578][T10808] loop6: rw=2049, want=78344, limit=40427 [ 707.299954][T10815] loop4: detected capacity change from 0 to 512 [ 707.442983][T10815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 707.517914][T10815] EXT4-fs (loop4): 1 orphan inode deleted [ 707.523779][T10815] EXT4-fs (loop4): 1 truncate cleaned up [ 707.530547][T10815] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 707.886914][T10825] loop4: detected capacity change from 0 to 512 [ 708.016386][T10825] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 708.023624][T10825] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 708.878721][T10825] loop4: detected capacity change from 0 to 1024 [ 710.706826][T10858] loop3: detected capacity change from 0 to 40427 [ 710.819905][T10858] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 710.827808][T10858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 710.837750][T10858] F2FS-fs (loop3): invalid crc value [ 710.931884][T10858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 710.997838][T10858] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 711.005092][T10858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 712.738467][T10871] loop4: detected capacity change from 0 to 2048 [ 712.880596][T10871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.965002][T10909] loop6: detected capacity change from 0 to 512 [ 717.983751][T10909] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 718.042406][T10909] EXT4-fs (loop6): 1 orphan inode deleted [ 718.084874][T10909] EXT4-fs (loop6): 1 truncate cleaned up [ 718.090584][T10909] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 718.117044][T10910] loop4: detected capacity change from 0 to 2048 [ 718.219000][T10910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.855657][T10954] loop3: detected capacity change from 0 to 2048 [ 725.033033][T10954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 727.226660][ T6499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.497613][T10975] loop3: detected capacity change from 0 to 64 [ 736.529048][T11036] loop3: detected capacity change from 0 to 64 [ 737.737377][T11053] loop3: detected capacity change from 0 to 2048 [ 738.086707][T11053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.158637][T11103] loop3: detected capacity change from 0 to 40427 [ 743.211425][T11103] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 743.219289][T11103] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 743.231543][T11103] F2FS-fs (loop3): invalid crc value [ 743.785847][T11103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 743.832001][T11103] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 743.839139][T11103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 744.055563][T11112] attempt to access beyond end of device [ 744.055563][T11112] loop3: rw=2049, want=78344, limit=40427 [ 747.494386][ T4779] Bluetooth: hci4: command 0x0409 tx timeout [ 748.131214][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.204739][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.228966][T11116] chnl_net:caif_netlink_parms(): no params data found [ 749.400634][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.629946][ T4779] Bluetooth: hci4: command 0x041b tx timeout [ 749.642868][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.676209][T11116] device bridge_slave_0 entered promiscuous mode [ 750.848149][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.600704][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.609083][T11116] device bridge_slave_1 entered promiscuous mode [ 751.902712][ T4779] Bluetooth: hci4: command 0x040f tx timeout [ 751.945526][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.954426][T11160] loop3: detected capacity change from 0 to 2048 [ 752.260267][T11160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.270775][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.636099][T11116] team0: Port device team_slave_0 added [ 752.648448][T11169] loop6: detected capacity change from 0 to 64 [ 752.768844][T11116] team0: Port device team_slave_1 added [ 755.991825][T10833] Bluetooth: hci4: command 0x0419 tx timeout [ 756.377155][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.394198][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.552520][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.572260][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.579453][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.614833][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.689080][T11189] dlm: dev_write: no op 0 74000000000000 [ 758.216365][T11116] device hsr_slave_0 entered promiscuous mode [ 758.272986][T11116] device hsr_slave_1 entered promiscuous mode [ 759.098384][T11116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.114729][T11116] Cannot create hsr debugfs directory [ 759.241757][T11182] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1829'. [ 759.877781][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 761.076141][T11209] loop6: detected capacity change from 0 to 40427 [ 761.327488][T11116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 761.337718][T11116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 761.347826][T11116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 761.359733][T11116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 761.388253][T11209] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 761.396121][T11209] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 761.418750][T11209] F2FS-fs (loop6): invalid crc value [ 761.485692][T11209] F2FS-fs (loop6): Found nat_bits in checkpoint [ 761.605097][T11220] loop3: detected capacity change from 0 to 64 [ 761.641140][T11209] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 761.648369][T11209] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 764.353784][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.507669][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 765.517503][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.553952][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.195384][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 766.216208][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 766.297622][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.304759][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.405180][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 766.444189][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 766.476348][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 766.520034][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.527240][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.578634][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 766.629356][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 766.693771][T11116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.767238][T11116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.782814][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 766.799161][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 766.826129][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 766.849392][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 766.903325][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 766.943112][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 767.562509][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 767.838700][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 767.874792][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 767.887280][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 770.828011][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.911678][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.925590][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.979124][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.998439][T11274] loop6: detected capacity change from 0 to 2048 [ 771.104356][T11274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 771.131660][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.534602][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.544548][T11311] loop3: detected capacity change from 0 to 40427 [ 775.695477][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 775.709738][T11311] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 775.717601][T11311] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 775.729303][T11311] F2FS-fs (loop3): invalid crc value [ 775.758883][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 775.779184][T10833] Bluetooth: hci4: command 0x0405 tx timeout [ 775.792237][T11311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 775.853663][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.897494][T11311] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 775.905003][T11311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 776.138283][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 776.338250][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 776.698731][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 776.776508][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 776.927668][T11116] device veth0_vlan entered promiscuous mode [ 777.024204][T11116] device veth1_vlan entered promiscuous mode [ 777.846300][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 777.886357][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 778.117537][T11116] device veth0_macvtap entered promiscuous mode [ 778.332941][T11116] device veth1_macvtap entered promiscuous mode [ 778.903611][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.002820][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.014440][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.029461][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.039667][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.050730][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.061048][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.071829][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.107551][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.124735][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.148144][T11116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.175611][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.209442][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.268018][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 779.287796][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.316491][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.349215][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.378711][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.410936][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.461990][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.504346][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.534793][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.590098][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.621392][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.692639][T11116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.762009][T11116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.819814][T11116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.899894][T11116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.974694][T11116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.034020][T11363] loop6: detected capacity change from 0 to 64 [ 780.118394][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.162983][ T6107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.579070][T11382] vivid-001: kernel_thread() failed [ 784.759777][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.927077][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.063483][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.344798][T11404] loop6: detected capacity change from 0 to 64 [ 785.351848][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.376324][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.347771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 788.904366][T11435] loop6: detected capacity change from 0 to 64 [ 791.539061][T11464] dlm: dev_write: no op 0 74000000000000 [ 791.804710][T11471] loop7: detected capacity change from 0 to 40427 [ 791.865655][T11471] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 791.873484][T11471] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 791.896369][T11471] F2FS-fs (loop7): invalid crc value [ 792.016521][T11471] F2FS-fs (loop7): Found nat_bits in checkpoint [ 792.043892][ T9] device hsr_slave_0 left promiscuous mode [ 792.149273][T11471] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 792.156515][T11471] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 792.611788][T11485] attempt to access beyond end of device [ 792.611788][T11485] loop7: rw=2049, want=78344, limit=40427 [ 793.192059][ T9] device hsr_slave_1 left promiscuous mode [ 793.219092][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.913212][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.992030][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.050833][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.242684][ T9] device bridge_slave_1 left promiscuous mode [ 794.282336][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.533165][ T9] device bridge_slave_0 left promiscuous mode [ 794.552237][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.052771][ T9] device veth1_macvtap left promiscuous mode [ 795.090223][ T9] device veth0_macvtap left promiscuous mode [ 795.098007][ T9] device veth1_vlan left promiscuous mode [ 795.103843][ T9] device veth0_vlan left promiscuous mode [ 796.541983][T11516] loop6: detected capacity change from 0 to 40427 [ 797.390214][T11516] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 797.398097][T11516] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 797.437776][T11516] F2FS-fs (loop6): invalid crc value [ 797.475061][T11516] F2FS-fs (loop6): Found nat_bits in checkpoint [ 797.527602][T11516] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 797.534914][T11516] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 797.983584][T11535] loop7: detected capacity change from 0 to 40427 [ 798.498841][T11537] loop3: detected capacity change from 0 to 40427 [ 798.545262][T11535] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 798.553088][T11535] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 798.556249][T11537] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 798.569176][T11537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 798.602418][T11535] F2FS-fs (loop7): invalid crc value [ 798.602455][T11537] F2FS-fs (loop3): invalid crc value [ 798.642295][T11537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 798.705067][T11537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 798.712191][T11537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 798.875108][T11535] F2FS-fs (loop7): Found nat_bits in checkpoint [ 798.979749][T11547] attempt to access beyond end of device [ 798.979749][T11547] loop3: rw=2049, want=78344, limit=40427 [ 799.418537][T11535] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 799.425833][T11535] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 799.796717][T11556] attempt to access beyond end of device [ 799.796717][T11556] loop7: rw=2049, want=78344, limit=40427 [ 800.140178][ T9] team0 (unregistering): Port device team_slave_1 removed [ 800.240387][ T9] team0 (unregistering): Port device team_slave_0 removed [ 800.328413][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.411545][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.733373][ T9] bond0 (unregistering): Released all slaves [ 801.923572][T11567] dlm: dev_write: no op 0 74000000000000 [ 809.425653][T11648] loop7: detected capacity change from 0 to 40427 [ 809.435474][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.441803][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.520629][T11648] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 809.528531][T11648] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 809.539766][T11648] F2FS-fs (loop7): invalid crc value [ 809.583807][T11648] F2FS-fs (loop7): Found nat_bits in checkpoint [ 809.639036][T11648] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 809.646225][T11648] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 811.963513][T11692] loop6: detected capacity change from 0 to 1024 [ 820.268878][T11781] loop7: detected capacity change from 0 to 40427 [ 820.339983][T11781] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 820.347840][T11781] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 820.369703][T11781] F2FS-fs (loop7): invalid crc value [ 820.412610][T11781] F2FS-fs (loop7): Found nat_bits in checkpoint [ 821.223157][T11781] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 821.231021][T11781] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 821.667281][T11804] attempt to access beyond end of device [ 821.667281][T11804] loop7: rw=2049, want=78344, limit=40427 [ 825.343572][T11837] loop6: detected capacity change from 0 to 16 [ 825.463542][T11837] erofs: (device loop6): mounted with root inode @ nid 36. [ 825.542879][T11837] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 825.595836][ T4221] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 825.874970][ T4221] usb 4-1: Using ep0 maxpacket: 16 [ 826.015583][ T4221] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.184086][ T4221] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 826.470280][ T4221] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 19, changing to 8 [ 826.584853][ T4221] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9564, setting to 1024 [ 826.674969][ T4221] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 826.835080][ T4221] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.912156][ T4221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 826.946639][ T4221] usb 4-1: SerialNumber: syz [ 827.073029][T11835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 827.253235][T11835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 827.723336][ T4221] usb 4-1: USB disconnect, device number 5 [ 830.105753][T11908] loop6: detected capacity change from 0 to 40427 [ 830.730744][T11908] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 830.738631][T11908] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 830.764366][T11908] F2FS-fs (loop6): invalid crc value [ 830.807035][T11908] F2FS-fs (loop6): Found nat_bits in checkpoint [ 830.887101][T11908] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 830.894431][T11908] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 831.846053][T11939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 833.151386][T11956] loop7: detected capacity change from 0 to 64 [ 838.409562][T12031] loop7: detected capacity change from 0 to 16 [ 838.441302][T12034] loop3: detected capacity change from 0 to 512 [ 838.805988][T12043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 838.936332][T12031] erofs: (device loop7): mounted with root inode @ nid 36. [ 839.031129][T12034] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 839.459042][T12034] EXT4-fs (loop3): inline encryption not supported [ 840.210008][T12034] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,minixdf,discard,min_batch_time=0x0000000000000006,nogrpid,usrjquota=./file0,inlinecrypt,,errors=continue. Quota mode: writeback. [ 840.236004][T12034] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.190418][T12136] loop6: detected capacity change from 0 to 512 [ 847.023761][T12136] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 848.393291][T12136] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2054: corrupted inode contents [ 848.488063][T12136] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.2054: mark_inode_dirty error [ 848.587850][T12136] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2054: corrupted inode contents [ 848.790253][T12179] loop7: detected capacity change from 0 to 40427 [ 848.811351][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 848.827621][T12136] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2054: mark_inode_dirty error [ 848.875699][T12179] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 848.883486][T12179] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 848.885684][T12136] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2054: corrupted inode contents [ 848.909258][T12179] F2FS-fs (loop7): invalid crc value [ 848.942662][T12179] F2FS-fs (loop7): Found nat_bits in checkpoint [ 849.007178][T12179] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 849.014292][T12179] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 849.020336][T12194] loop3: detected capacity change from 0 to 16 [ 849.132725][T12194] erofs: (device loop3): mounted with root inode @ nid 36. [ 849.183297][T12136] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 849.254839][T12136] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2054: corrupted inode contents [ 849.875017][T12136] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.2054: mark_inode_dirty error [ 850.008799][T12136] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 850.086827][T12136] EXT4-fs (loop6): 1 truncate cleaned up [ 850.107926][T12204] loop3: detected capacity change from 0 to 1024 [ 850.151397][T12136] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 850.244990][T12136] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 850.911802][T12221] loop6: detected capacity change from 0 to 64 [ 851.316634][T12227] loop7: detected capacity change from 0 to 512 [ 851.792160][T12227] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,commit=0x0000000000000005,sb=0x0000000100000000,norecovery,errors=continue,,errors=continue. Quota mode: writeback. [ 851.935373][T12227] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.459274][T12244] loop6: detected capacity change from 0 to 40427 [ 852.509196][T12244] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 852.517034][T12244] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 852.528309][T12244] F2FS-fs (loop6): invalid crc value [ 852.603431][T12244] F2FS-fs (loop6): Found nat_bits in checkpoint [ 852.664340][T12261] loop7: detected capacity change from 0 to 512 [ 852.676052][T12244] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 852.683276][T12244] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 852.832211][T12261] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 852.905501][T12261] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.954982][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 853.317078][ T26] audit: type=1800 audit(1741934920.303:36): pid=12273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2085" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 853.338328][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 853.414548][T12277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 853.662051][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.683152][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 853.694041][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 854.369502][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 854.475262][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.484352][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.499438][ T1108] usb 4-1: SerialNumber: syz [ 854.545206][T12253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 854.555195][T12253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 854.738933][T12297] loop7: detected capacity change from 0 to 128 [ 854.812134][ T1108] usb 4-1: USB disconnect, device number 6 [ 854.991441][T12303] attempt to access beyond end of device [ 854.991441][T12303] loop7: rw=2049, want=585, limit=128 [ 855.209976][T12297] attempt to access beyond end of device [ 855.209976][T12297] loop7: rw=524288, want=225, limit=128 [ 855.264296][T12297] attempt to access beyond end of device [ 855.264296][T12297] loop7: rw=524288, want=401, limit=128 [ 855.282115][T12297] attempt to access beyond end of device [ 855.282115][T12297] loop7: rw=524288, want=585, limit=128 [ 855.317251][T12297] attempt to access beyond end of device [ 855.317251][T12297] loop7: rw=0, want=153, limit=128 [ 855.886553][T12297] attempt to access beyond end of device [ 855.886553][T12297] loop7: rw=0, want=153, limit=128 [ 856.046321][T12297] attempt to access beyond end of device [ 856.046321][T12297] loop7: rw=0, want=153, limit=128 [ 856.108987][T12297] attempt to access beyond end of device [ 856.108987][T12297] loop7: rw=0, want=153, limit=128 [ 856.123939][T12297] attempt to access beyond end of device [ 856.123939][T12297] loop7: rw=0, want=153, limit=128 [ 856.414898][T10811] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 856.453614][ T6098] attempt to access beyond end of device [ 856.453614][ T6098] loop7: rw=1, want=233, limit=128 [ 857.795703][T10811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.811298][T10811] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.826400][T10811] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 857.849847][T10811] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.975008][T10811] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 857.994771][T10811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.020443][T10811] usb 7-1: SerialNumber: syz [ 858.491601][T10811] usb 7-1: 0:2 : does not exist [ 858.540920][T10811] usb 7-1: unit 5 not found! [ 858.849773][T10811] usb 7-1: USB disconnect, device number 2 [ 859.774924][T10811] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 860.707255][T12391] loop7: detected capacity change from 0 to 40427 [ 860.744851][T10811] usb 7-1: Using ep0 maxpacket: 16 [ 860.855124][T12391] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 860.863581][T12391] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 860.874396][T12391] F2FS-fs (loop7): invalid crc value [ 860.904840][T10811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.921283][T10811] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 860.962901][T10811] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 860.983770][T10811] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 861.018891][T12391] F2FS-fs (loop7): Found nat_bits in checkpoint [ 861.054142][T12402] loop3: detected capacity change from 0 to 1024 [ 861.095220][T10811] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.104300][T10811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 861.114140][T12391] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 861.121564][T12391] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 861.214892][T10811] usb 7-1: SerialNumber: syz [ 861.332349][T12379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 861.365311][T12379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 861.808461][ T154] hfsplus: b-tree write err: -5, ino 4 [ 862.010672][T11376] udevd[11376]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.032164][T10811] usb 7-1: USB disconnect, device number 3 [ 862.396026][T12428] loop6: detected capacity change from 0 to 128 [ 863.533943][T12428] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 863.612077][T12428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.036521][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 867.044043][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 867.051487][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 867.059081][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 867.066689][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 867.074330][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 867.084055][T12479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 867.534823][T12479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 867.675460][ T4216] Bluetooth: hci4: command 0x0406 tx timeout [ 867.732809][T12480] loop6: detected capacity change from 0 to 512 [ 868.003624][T12480] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 868.050817][T12480] EXT4-fs (loop6): orphan cleanup on readonly fs [ 868.124226][T12480] Quota error (device loop6): v2_read_file_info: Free block number too big (0 >= 0). [ 868.154881][T12480] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 868.172145][T12480] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 868.232115][T12507] loop7: detected capacity change from 0 to 512 [ 868.265885][T12480] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2142: bg 0: block 40: padding at end of block bitmap is not set [ 868.304867][T12507] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 868.357468][T12480] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 868.409055][T12480] EXT4-fs (loop6): 1 truncate cleaned up [ 868.430429][T12480] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,user_xattr,journal_dev=0x0000000000000008,max_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 868.467913][T12507] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2150: corrupted inode contents [ 868.480559][T12507] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2150: mark_inode_dirty error [ 868.493092][T12507] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2150: corrupted inode contents [ 868.508637][T12507] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2150: mark_inode_dirty error [ 868.520987][T12507] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2150: corrupted inode contents [ 868.533978][T12507] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 868.549170][T12507] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2150: corrupted inode contents [ 868.570545][T12507] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2150: mark_inode_dirty error [ 868.585976][T12507] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 868.603944][T12507] EXT4-fs (loop7): 1 truncate cleaned up [ 868.610373][T12507] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 868.673730][T12507] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 869.193931][T12537] loop7: detected capacity change from 0 to 1024 [ 870.095428][T12537] hfsplus: xattr searching failed [ 870.159727][T12549] loop3: detected capacity change from 0 to 1024 [ 870.243940][T12559] loop6: detected capacity change from 0 to 512 [ 870.258177][T12549] EXT4-fs (loop3): Ignoring removed orlov option [ 870.300215][T12549] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 870.330694][T12559] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 870.385476][T12549] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 870.472744][T12559] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2164: corrupted inode contents [ 870.543684][ T26] audit: type=1800 audit(1741934937.543:37): pid=12570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2161" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 870.549605][T12559] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.2164: mark_inode_dirty error [ 870.580031][T12559] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2164: corrupted inode contents [ 870.694265][T12559] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2164: mark_inode_dirty error [ 870.709233][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.709300][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.760279][T12559] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2164: corrupted inode contents [ 870.854725][ T26] audit: type=1804 audit(1741934937.803:38): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2161" name="/newroot/428/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 870.902946][T12559] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 870.916693][T12559] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2164: corrupted inode contents [ 870.950975][T12559] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.2164: mark_inode_dirty error [ 870.982423][T12559] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 871.038341][T12559] EXT4-fs (loop6): 1 truncate cleaned up [ 871.044553][T12559] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 871.249202][T12559] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 873.172491][T12602] loop7: detected capacity change from 0 to 1764 [ 878.282596][T12635] loop7: detected capacity change from 0 to 512 [ 879.000880][T12635] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 879.219187][T12635] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2186: corrupted inode contents [ 879.293435][T12635] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2186: mark_inode_dirty error [ 880.289229][T12635] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2186: corrupted inode contents [ 880.315832][T12635] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2186: mark_inode_dirty error [ 880.330981][T12635] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2186: corrupted inode contents [ 880.332346][T12664] loop3: detected capacity change from 0 to 512 [ 880.354169][T12635] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 880.405249][T12635] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2186: corrupted inode contents [ 880.422103][T12635] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2186: mark_inode_dirty error [ 880.449708][T12635] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 880.467003][T12635] EXT4-fs (loop7): 1 truncate cleaned up [ 880.472936][T12635] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 880.525830][T12635] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 880.711976][T12664] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004735,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 880.761665][T12664] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.342346][T12674] loop6: detected capacity change from 0 to 512 [ 881.496947][T12674] EXT4-fs (loop6): Test dummy encryption mode enabled [ 881.580244][T12685] loop7: detected capacity change from 0 to 512 [ 881.611910][T12674] EXT4-fs (loop6): 1 truncate cleaned up [ 881.635485][T12674] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 881.672008][T12685] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 881.734938][ T4972] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 881.877181][T12685] EXT4-fs (loop7): 1 truncate cleaned up [ 881.884720][T12685] EXT4-fs (loop7): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 881.982500][T12674] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 882.005272][ T4972] usb 4-1: Using ep0 maxpacket: 8 [ 882.165105][ T4972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.293814][ T4972] usb 4-1: config 0 has no interfaces? [ 882.434367][ T4972] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 882.634789][ T4972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.683934][ T4972] usb 4-1: config 0 descriptor?? [ 883.004113][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 883.244697][ T21] usb 4-1: USB disconnect, device number 7 [ 884.099361][T12721] loop7: detected capacity change from 0 to 2048 [ 884.135042][T12721] EXT4-fs (loop7): Ignoring removed bh option [ 884.237658][T12721] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 885.564494][T12750] loop7: detected capacity change from 0 to 512 [ 885.606668][T12754] loop6: detected capacity change from 0 to 512 [ 886.158755][T12754] EXT4-fs (loop6): Test dummy encryption mode enabled [ 886.164964][T12750] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 886.165908][T12754] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 886.515368][T12763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 886.770011][T12754] EXT4-fs (loop6): 1 truncate cleaned up [ 886.778057][T12754] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000001,max_dir_size_kb=0x000000000000148a,,errors=continue. Quota mode: none. [ 886.917112][T12750] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2226: corrupted inode contents [ 886.960921][T12754] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 886.963221][T12750] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2226: mark_inode_dirty error [ 886.982756][T12750] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2226: corrupted inode contents [ 887.004575][T12750] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2226: mark_inode_dirty error [ 887.022941][T12750] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2226: corrupted inode contents [ 887.050612][T12750] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 887.067046][T12750] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2226: corrupted inode contents [ 887.081665][T12754] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.2228: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 887.125591][T12750] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2226: mark_inode_dirty error [ 887.175758][T12750] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 887.235834][T12750] EXT4-fs (loop7): 1 truncate cleaned up [ 887.241631][T12750] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 887.357049][T12750] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 890.254002][T12829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.728800][T12847] loop6: detected capacity change from 0 to 512 [ 892.019901][T12847] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 893.206727][T12847] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2254: corrupted inode contents [ 893.502118][T12847] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.2254: mark_inode_dirty error [ 893.555406][T12847] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2254: corrupted inode contents [ 893.773360][T12847] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2254: mark_inode_dirty error [ 894.075692][T12871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.240186][T12847] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2254: corrupted inode contents [ 894.316278][T12847] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 894.365911][T12847] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.2254: corrupted inode contents [ 894.394924][T12847] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.2254: mark_inode_dirty error [ 894.491514][T12847] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 894.566641][T12847] EXT4-fs (loop6): 1 truncate cleaned up [ 894.572354][T12847] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 894.664542][T12847] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 894.806396][ T21] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 895.286097][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.419586][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.600620][ T21] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 895.669615][ T21] usb 8-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 895.724801][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.769234][ T21] usb 8-1: config 0 descriptor?? [ 896.877088][ T21] wacom 0003:056A:00EF.0002: unbalanced collection at end of report description [ 896.896978][ T21] wacom 0003:056A:00EF.0002: parse failed [ 896.926305][ T21] wacom: probe of 0003:056A:00EF.0002 failed with error -22 [ 897.567070][ T21] usb 8-1: USB disconnect, device number 2 [ 898.069812][T12910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 898.464176][T12926] loop6: detected capacity change from 0 to 256 [ 899.346509][T12926] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 900.853869][T12956] 9pnet: Insufficient options for proto=fd [ 900.983701][T12962] loop3: detected capacity change from 0 to 256 [ 901.494813][T12978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 902.030976][T12962] loop3: detected capacity change from 0 to 512 [ 903.944811][ T4216] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 904.794653][ T4216] usb 8-1: Using ep0 maxpacket: 16 [ 904.925213][ T4216] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.950329][ T4216] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 905.004885][ T4216] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 19, changing to 8 [ 905.054777][ T4216] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9564, setting to 1024 [ 905.087126][ T4216] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 905.128299][T13030] loop3: detected capacity change from 0 to 2048 [ 905.234944][ T4216] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.319255][ T4216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 905.365982][T13030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.391943][ T4216] usb 8-1: SerialNumber: syz [ 905.786892][T13000] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 906.109372][T13000] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 906.381878][T11878] usb 8-1: USB disconnect, device number 3 [ 908.498414][T13065] 9pnet: Insufficient options for proto=fd [ 909.154675][T13074] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2331'. [ 910.144907][ T4216] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 910.385079][ T4216] usb 7-1: Using ep0 maxpacket: 16 [ 910.504914][ T4216] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.521597][ T4216] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 910.543006][ T4216] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 19, changing to 8 [ 910.566400][ T4216] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9564, setting to 1024 [ 910.589903][ T4216] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 910.684957][ T4216] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.714529][ T4216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 910.723107][ T4216] usb 7-1: SerialNumber: syz [ 910.765122][T13083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 910.785041][T13083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 911.029204][ T4216] usb 7-1: USB disconnect, device number 4 [ 911.732673][T13118] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2348'. [ 913.561399][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2354'. [ 914.584763][ T4217] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 914.954679][ T4217] usb 8-1: Using ep0 maxpacket: 16 [ 915.834763][ T4217] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 916.000136][ T4217] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 916.019894][ T4217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.044755][ T4217] usb 8-1: Product: syz [ 916.051501][ T4217] usb 8-1: Manufacturer: syz [ 916.078096][ T4217] usb 8-1: SerialNumber: syz [ 916.094027][ T4217] usb 8-1: config 0 descriptor?? [ 916.136410][ T4217] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 916.150005][ T4217] usb 8-1: Detected FT232RL [ 916.734166][ T4217] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 916.774808][ T4217] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 916.784713][T11878] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 916.804790][ T4217] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 916.831497][ T4217] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 916.869927][ T4217] usb 8-1: USB disconnect, device number 4 [ 916.916809][ T4217] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 916.949176][ T4217] ftdi_sio 8-1:0.0: device disconnected [ 917.194923][T11878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.225574][T11878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.234508][T11878] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 917.284647][T11878] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 917.515070][T11878] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.720212][T11878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.739608][T11878] usb 7-1: Product: syz [ 917.743815][T11878] usb 7-1: Manufacturer: syz [ 917.749053][T11878] usb 7-1: SerialNumber: syz [ 919.367488][T11878] usb 7-1: can't set config #1, error -71 [ 919.392468][T11878] usb 7-1: USB disconnect, device number 5 [ 922.304665][ T4216] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 922.404755][T12872] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 922.664710][T12872] usb 7-1: Using ep0 maxpacket: 16 [ 922.675061][ T4216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.716980][ T4216] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.744999][ T4216] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 922.784920][T12872] usb 7-1: config 0 has an invalid interface number: 81 but max is 1 [ 922.797069][T12872] usb 7-1: config 0 has an invalid interface number: 133 but max is 1 [ 922.813286][T12872] usb 7-1: config 0 has no interface number 0 [ 922.964669][T12872] usb 7-1: config 0 has no interface number 1 [ 922.975117][ T4216] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.984719][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.992793][ T4216] usb 4-1: Product: syz [ 922.998883][T12872] usb 7-1: config 0 interface 81 has no altsetting 0 [ 923.034654][T12872] usb 7-1: config 0 interface 133 has no altsetting 0 [ 923.064676][ T4216] usb 4-1: Manufacturer: syz [ 923.069320][ T4216] usb 4-1: SerialNumber: syz [ 923.239055][T12872] usb 7-1: New USB device found, idVendor=413c, idProduct=81b6, bcdDevice=18.0a [ 923.253742][T12872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.282650][T12872] usb 7-1: Product: syz [ 923.418665][T12872] usb 7-1: Manufacturer: syz [ 923.442587][T12872] usb 7-1: SerialNumber: syz [ 923.471412][T12872] usb 7-1: config 0 descriptor?? [ 924.466442][T12872] usb 7-1: USB disconnect, device number 6 [ 924.785072][ T4216] cdc_ncm 4-1:1.0: bind() failure [ 924.814981][ T4216] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 924.821913][ T4216] cdc_ncm 4-1:1.1: bind() failure [ 925.017297][T13306] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2420'. [ 926.270517][ T21] usb 4-1: USB disconnect, device number 8 [ 927.103971][T13322] process '/newroot/560/file0' started with executable stack [ 927.118027][T13319] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2424'. [ 929.419410][T13367] loop3: detected capacity change from 0 to 512 [ 929.508754][T13367] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 931.213067][T13394] loop3: detected capacity change from 0 to 512 [ 931.465925][T13394] EXT4-fs (loop3): 1 truncate cleaned up [ 931.474764][T13394] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 931.849275][T13394] EXT4-fs error (device loop3): ext4_xattr_block_find:1857: inode #12: comm syz.3.2455: corrupted xattr block 142 [ 931.923541][T13394] EXT4-fs (loop3): Remounting filesystem read-only [ 932.138622][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.145602][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.903018][T13407] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2457'. [ 937.855431][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 938.047959][T13459] loop7: detected capacity change from 0 to 512 [ 938.345968][T13459] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 938.428772][T13459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 938.562717][T13459] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.2475: corrupted in-inode xattr [ 938.725583][T13459] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2475: couldn't read orphan inode 15 (err -117) [ 938.983681][T13459] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 941.820485][ T4216] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 941.952558][T13514] loop3: detected capacity change from 0 to 128 [ 942.189886][T13520] attempt to access beyond end of device [ 942.189886][T13520] loop3: rw=2049, want=777, limit=128 [ 942.260721][ T4216] usb 7-1: Using ep0 maxpacket: 32 [ 942.550888][T13524] loop7: detected capacity change from 0 to 2048 [ 942.745633][ T4216] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 942.746035][ T4216] usb 7-1: config 0 has no interface number 0 [ 942.746288][ T4216] usb 7-1: config 0 interface 184 has no altsetting 0 [ 943.777981][T13524] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 944.032916][T13520] attempt to access beyond end of device [ 944.032916][T13520] loop3: rw=524288, want=225, limit=128 [ 944.045274][ T4216] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 944.087157][ T4216] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.146001][ T4216] usb 7-1: Product: syz [ 944.156553][T13520] attempt to access beyond end of device [ 944.156553][T13520] loop3: rw=524288, want=401, limit=128 [ 944.193855][ T4216] usb 7-1: Manufacturer: syz [ 944.205440][ T4216] usb 7-1: SerialNumber: syz [ 944.254654][ T4216] usb 7-1: config 0 descriptor?? [ 944.271978][ T9] attempt to access beyond end of device [ 944.271978][ T9] loop3: rw=1, want=233, limit=128 [ 944.303839][ T4216] smsc75xx v1.0.0 [ 945.004771][ T4216] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 945.032986][ T4216] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 945.061198][T13533] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2500'. [ 945.101100][ T4216] usb 7-1: USB disconnect, device number 7 [ 948.488252][ T26] audit: type=1326 audit(1741935015.493:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 948.679669][ T26] audit: type=1326 audit(1741935015.493:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 948.703485][ T26] audit: type=1326 audit(1741935015.523:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 948.772447][ T26] audit: type=1326 audit(1741935015.523:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.359039][ T26] audit: type=1326 audit(1741935015.523:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.381457][ T26] audit: type=1326 audit(1741935015.523:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.403901][ T26] audit: type=1326 audit(1741935015.523:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.426752][ T26] audit: type=1326 audit(1741935015.523:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.490969][T13594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 949.505060][ T26] audit: type=1326 audit(1741935015.523:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 949.841405][ T26] audit: type=1326 audit(1741935015.523:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.3.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8767169 code=0x7ffc0000 [ 950.153026][T13609] loop3: detected capacity change from 0 to 16 [ 950.610239][T13609] erofs: (device loop3): mounted with root inode @ nid 36. [ 950.696403][T13609] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 950.824911][T13609] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 950.858159][T13609] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 950.985304][T13622] loop7: detected capacity change from 0 to 512 [ 951.348967][T13622] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 952.157744][T13622] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2535: corrupted inode contents [ 952.238026][T13622] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #16: comm syz.7.2535: mark_inode_dirty error [ 952.333632][T13622] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2535: corrupted inode contents [ 952.361564][T13622] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2535: mark_inode_dirty error [ 952.385560][T13622] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2535: corrupted inode contents [ 952.575272][T13622] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 952.618387][T13622] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #16: comm syz.7.2535: corrupted inode contents [ 952.620245][T13646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.525174][T13622] EXT4-fs error (device loop7): ext4_truncate:4272: inode #16: comm syz.7.2535: mark_inode_dirty error [ 953.546340][T13622] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 953.574305][T13622] EXT4-fs (loop7): 1 truncate cleaned up [ 953.591947][T13622] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,lazytime,grpjquota=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa,errors=continue. Quota mode: writeback. [ 953.661586][T13622] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 953.932381][T13667] loop3: detected capacity change from 0 to 512 [ 954.003587][T13667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 954.065647][T13667] EXT4-fs (loop3): 1 truncate cleaned up [ 954.071348][T13667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 955.542872][ T4173] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 955.921338][T13688] loop6: detected capacity change from 0 to 2048 [ 956.156498][T13688] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 956.164280][T13688] UDF-fs: Scanning with blocksize 512 failed [ 1061.294562][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1061.301557][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6098/1:b..l [ 1061.310221][ C1] (detected by 1, t=10502 jiffies, g=57413, q=78) [ 1061.316739][ C1] task:kworker/u4:13 state:R running task stack:20920 pid: 6098 ppid: 2 flags:0x00004000 [ 1061.329260][ C1] Workqueue: bat_events batadv_nc_worker [ 1061.334964][ C1] Call Trace: [ 1061.338251][ C1] [ 1061.341203][ C1] __schedule+0x12c4/0x45b0 [ 1061.345842][ C1] ? validate_chain+0x112/0x5930 [ 1061.350939][ C1] ? mark_lock+0x98/0x340 [ 1061.355286][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1061.361287][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1061.367196][ C1] ? reacquire_held_locks+0x660/0x660 [ 1061.372590][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1061.377907][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1061.383037][ C1] ? __cond_resched+0xf0/0xf0 [ 1061.387752][ C1] irqentry_exit+0x53/0x80 [ 1061.392182][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1061.398178][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 1061.403477][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1061.423099][ C1] RSP: 0018:ffffc90003bdfa80 EFLAGS: 00000206 [ 1061.429196][ C1] RAX: 0000000000000001 RBX: 1ffff9200077bf5c RCX: 1ffff9200077befc [ 1061.437182][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 1061.445169][ C1] RBP: ffffc90003bdfbd8 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 1061.453169][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200077bf58 [ 1061.461328][ C1] R13: dffffc0000000000 R14: ffffc90003bdfae0 R15: 0000000000000246 [ 1061.469431][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1061.474842][ C1] ? rcu_lock_release+0x5/0x20 [ 1061.479627][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 1061.484680][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1061.490687][ C1] rcu_lock_acquire+0x2a/0x30 [ 1061.495379][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1061.500166][ C1] batadv_nc_worker+0xc1/0x5b0 [ 1061.504957][ C1] process_one_work+0x8a1/0x10c0 [ 1061.509932][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1061.515588][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1061.521155][ C1] ? kthread_data+0x4e/0xc0 [ 1061.525768][ C1] ? wq_worker_running+0x97/0x170 [ 1061.530810][ C1] worker_thread+0xaca/0x1280 [ 1061.535558][ C1] kthread+0x3f6/0x4f0 [ 1061.539677][ C1] ? rcu_lock_release+0x20/0x20 [ 1061.544549][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1061.549161][ C1] ret_from_fork+0x1f/0x30 [ 1061.553617][ C1] [ 1061.556650][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g57413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1061.567858][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1061.577833][ C1] rcu: RCU grace-period kthread stack dump: [ 1061.583728][ C1] task:rcu_preempt state:R running task stack:26144 pid: 15 ppid: 2 flags:0x00004000 [ 1061.594529][ C1] Call Trace: [ 1061.597823][ C1] [ 1061.600777][ C1] __schedule+0x12c4/0x45b0 [ 1061.605413][ C1] ? print_irqtrace_events+0x210/0x210 [ 1061.610903][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1061.616907][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1061.622833][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1061.628139][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1061.633267][ C1] ? __cond_resched+0xf0/0xf0 [ 1061.637973][ C1] ? debug_object_free+0x2c1/0x460 [ 1061.643105][ C1] ? rcu_is_watching+0x11/0xa0 [ 1061.647889][ C1] irqentry_exit+0x53/0x80 [ 1061.652668][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1061.658154][ C1] RIP: 0010:prepare_to_swait_event+0x1/0x340 [ 1061.664152][ C1] Code: 48 8b 74 24 20 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e1 83 e9 08 0f 0b eb 9c 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 89 d3 49 89 f5 49 89 fc 49 [ 1061.683949][ C1] RSP: 0018:ffffc90000d47c90 EFLAGS: 00000246 [ 1061.690064][ C1] RAX: 0000000000000000 RBX: ffffc90000d47d68 RCX: ffff88813ff23b80 [ 1061.698048][ C1] RDX: 0000000000000402 RSI: ffffc90000d47d60 RDI: ffffffff8cb238e0 [ 1061.706034][ C1] RBP: ffffc90000d47df0 R08: ffffffff8a495222 R09: ffffc90000d47a40 [ 1061.714020][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1061.722002][ C1] R13: ffffc90000d47d60 R14: 0000000000000000 R15: 0000000000000000 [ 1061.729995][ C1] ? schedule_timeout+0x202/0x300 [ 1061.735051][ C1] rcu_gp_fqs_loop+0x28a/0x1080 [ 1061.739925][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1061.745137][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1061.750353][ C1] ? rcu_gp_init+0xdae/0x1140 [ 1061.755053][ C1] ? rcu_gp_init+0x1140/0x1140 [ 1061.759837][ C1] ? finish_swait+0xc5/0x1d0 [ 1061.764459][ C1] rcu_gp_kthread+0xa4/0x360 [ 1061.769416][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1061.774285][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1061.779412][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1061.785328][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 1061.790373][ C1] kthread+0x3f6/0x4f0 [ 1061.794455][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1061.799581][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1061.804186][ C1] ret_from_fork+0x1f/0x30 [ 1061.808637][ C1] [ 1061.811662][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1061.818124][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1061.823353][ C0] NMI backtrace for cpu 0 [ 1061.823369][ C0] CPU: 0 PID: 13680 Comm: syz.2.2554 Not tainted 5.15.179-syzkaller #0 [ 1061.823386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1061.823396][ C0] RIP: 0010:lock_acquire+0x20d/0x4f0 [ 1061.823415][ C0] Code: 3d ab 8a e8 65 31 dd 08 b8 ff ff ff ff 65 0f c1 05 38 96 9f 7e 83 f8 01 0f 85 a4 01 00 00 49 89 de 48 c1 eb 03 42 80 3c 2b 00 <74> 08 4c 89 f7 e8 a9 ac 67 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 [ 1061.823429][ C0] RSP: 0018:ffffc90002ddf680 EFLAGS: 00000046 [ 1061.823444][ C0] RAX: 0000000000000001 RBX: 1ffff920005bbedc RCX: ffffffff81639d52 [ 1061.823457][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 1061.823475][ C0] RBP: ffffc90002ddf7c8 R08: dffffc0000000000 R09: fffffbfff2131e1a [ 1061.823488][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005bbed8 [ 1061.823500][ C0] R13: dffffc0000000000 R14: ffffc90002ddf6e0 R15: 0000000000000046 [ 1061.823512][ C0] FS: 00007f6a970676c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1061.823527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.823539][ C0] CR2: 0000000000000000 CR3: 00000000632e1000 CR4: 00000000003506f0 [ 1061.823553][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1061.823563][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1061.823573][ C0] Call Trace: [ 1061.823579][ C0] [ 1061.823585][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 1061.823604][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1061.823622][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1061.823640][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 1061.823665][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1061.823683][ C0] ? nmi_handle+0xf7/0x370 [ 1061.823701][ C0] ? lock_acquire+0x20d/0x4f0 [ 1061.823717][ C0] ? default_do_nmi+0x62/0x150 [ 1061.823737][ C0] ? exc_nmi+0xa8/0x100 [ 1061.823754][ C0] ? end_repeat_nmi+0x16/0x31 [ 1061.823776][ C0] ? validate_chain+0x112/0x5930 [ 1061.823793][ C0] ? lock_acquire+0x20d/0x4f0 [ 1061.823809][ C0] ? lock_acquire+0x20d/0x4f0 [ 1061.823826][ C0] ? lock_acquire+0x20d/0x4f0 [ 1061.823842][ C0] [ 1061.823846][ C0] [ 1061.823854][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1061.823871][ C0] ? ktime_get+0x31/0x270 [ 1061.823889][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 1061.823908][ C0] ? ktime_get+0x7f/0x270 [ 1061.823922][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 1061.823940][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 1061.823955][ C0] ? ktime_get+0x7f/0x270 [ 1061.823971][ C0] seqcount_lockdep_reader_access+0xf8/0x220 [ 1061.823989][ C0] ? ktime_get+0x7f/0x270 [ 1061.824005][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 1061.824021][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 1061.824040][ C0] ? ktime_get+0x7f/0x270 [ 1061.824055][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 1061.824076][ C0] ktime_get+0x7f/0x270 [ 1061.824094][ C0] clockevents_program_min_delta+0x55/0x410 [ 1061.824115][ C0] ? ktime_get+0x242/0x270 [ 1061.824132][ C0] ? clockevents_program_event+0x21e/0x310 [ 1061.824151][ C0] hrtimer_start_range_ns+0xada/0xc80 [ 1061.824175][ C0] posixtimer_rearm+0x1ad/0x3f0 [ 1061.824196][ C0] ? alarmtimer_resume+0x50/0x50 [ 1061.824215][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 1061.824236][ C0] dequeue_signal+0x1ed/0x520 [ 1061.824257][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 1061.824272][ C0] ? unhandled_signal+0x150/0x150 [ 1061.824294][ C0] ? uprobe_deny_signal+0x74/0x230 [ 1061.824313][ C0] ? get_signal+0xb3/0x14e0 [ 1061.824330][ C0] get_signal+0x52e/0x14e0 [ 1061.824354][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 1061.824375][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 1061.824398][ C0] ? __might_fault+0xb4/0x110 [ 1061.824419][ C0] ? _copy_from_user+0x10f/0x170 [ 1061.824436][ C0] ? restore_altstack+0x274/0x400 [ 1061.824454][ C0] ? get_sigframe_size+0x10/0x10 [ 1061.824479][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 1061.824507][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 1061.824528][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 1061.824546][ C0] exit_to_user_mode_loop+0x97/0x130 [ 1061.824564][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1061.824581][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 1061.824600][ C0] do_syscall_64+0x47/0xb0 [ 1061.824616][ C0] ? clear_bhb_loop+0x15/0x70 [ 1061.824633][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1061.824651][ C0] RIP: 0033:0x7f6a991fe167 [ 1061.824667][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1061.824680][ C0] RSP: 002b:00007f6a97067038 EFLAGS: 00000246 [ 1061.824693][ C0] RAX: 0000000000000113 RBX: 00007f6a99416fa0 RCX: 00007f6a991fe169 [ 1061.824705][ C0] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1061.824716][ C0] RBP: 00007f6a9927f2a0 R08: 0000000008000f28 R09: 0000000000000000 [ 1061.824726][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.824736][ C0] R13: 0000000000000000 R14: 00007f6a99416fa0 R15: 00007ffce4965518 [ 1061.824756][ C0]