last executing test programs: 13.496179031s ago: executing program 1 (id=1301): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpjquota}, {@usrjquota}, {@block_validity}, {@lazytime}, {@quota}, {@acl}, {@i_version}]}, 0x3, 0x43b, &(0x7f0000000780)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x20042, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800004, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x500000000000000}]) 12.788765606s ago: executing program 1 (id=1303): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 12.788279206s ago: executing program 3 (id=1304): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0x100800001) 11.101230741s ago: executing program 1 (id=1307): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000001000000ff0f00000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000034004f65a70be9b342915a7fd29d69740e706d211bbed0a79765ca13de7e72386b7048ecf7878a6e001f98dd24052820ad9918812216b19fa9fe5edfcbd64b6f1e28d9d02f38fbcdbfb43c3f2c764b7fc4414c32558d451f2b16cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$P9_RWALK(r6, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x23) r7 = socket$tipc(0x1e, 0x2, 0x0) listen(r7, 0x7ff) 10.841255245s ago: executing program 4 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 9.80109111s ago: executing program 2 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)={0x14, 0x13, 0x3, 0x5, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) (fail_nth: 3) 9.452949532s ago: executing program 0 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xc, 0x98d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040), 0x0, 0x4f00, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1, 0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 9.452530332s ago: executing program 3 (id=1313): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209000002000000"], 0x10}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 9.37122729s ago: executing program 4 (id=1314): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x3d0, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3a0, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xd}}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 9.141701781s ago: executing program 1 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) getpeername(r4, 0x0, &(0x7f0000000100)) 9.03688983s ago: executing program 2 (id=1316): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0202}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000740)={0x3, 0x0, 0xffffd3de, 0x0, 0xfffffff9}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8.843938398s ago: executing program 4 (id=1317): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 7.285196051s ago: executing program 0 (id=1318): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r3}) 7.221692767s ago: executing program 2 (id=1319): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e0000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_macvtap\x00', {0x4}, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 6.872925369s ago: executing program 3 (id=1320): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008004000b7040000000000008500000033000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) close(r0) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="2503000019002551075c0165ff0ffc02802000030004000500e1000cee0209001a030000", 0x33a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x123c, 0x13, 0x3, 0x5, 0x70bd2c, 0x25dfdbbe, {0x7, 0x0, 0x8}, [@generic="52b52cd493e31b0f", @nested={0x10f7, 0xe0, 0x0, 0x1, [@typed={0x80, 0x1a, 0x0, 0x0, @binary="ccd83553bd75645c1d5abf1ed500cd8d71d17c53494508555a853dc8245af697525ff8e8ae9315edaa6b6dde503d163eefb83a4835ea2322c269b70e319998418462682c074163b28f144042fb52bc448a6ecaf064e09511a39bf5afe1cc60dfb23e3b4ae67264c67ede451ccb1685ccd0eafa9818702fbdd908d265"}, @generic="9c0cc7e4701d3298", @generic="73c094d107f59a9dfe993ba93ba876aef30337ade8dd6e688135d8ab3016c445eff202f62bf42684308ff38c0a442cc3e6022f1aa87c25a911cee2863249", @generic="de0cc923a83f71938080c1841b2520073cac0b17aa962d4658b34a1db4141c5d7f94216588d53108b84a744f456f3a4e99f1b0f990f7b01ee7f075b3c44c676f360df91820485b406eee2381c4e683d8145c456378b809130de7bd98e71d5e958ed9f2f03a6aba9d176e07e0a12dd254b98db9199bce416bf945e16461a5fd45dc71ed31366bf137f2c332833e4bfd80dc41334a0376862f188c9157d6fba39c464c5e74f4e0b8fa3a0f509d5f020a4410351f4fe8317724d3d13825c463209d12b7fd1a794d0610449ec553c1c6d63126fc77a6ff0c8d0d5bc4569aa5d3e8b78104538eec07d17833db7213a614d22bf5b38573d8248b017b8e2696beae2eea6c9b07ca3d20a8798caf465bb82487444ca1c4a8b85e009c690a17777dfd7c04871e7d0747f84fe6992d57bcfce3fcceb6103a3b1dc45741393236ced95c7b60a35c64d03200c882de471bab57c4c344eb42bfebd7e653a0f6588647829058e3a8c87d40559611b81324d1e752ddacc1954de145a6663f4d80337db16283acfd3cdee1b010e0d5cacb5204403d831f11c1a84a2284f4e15594101ef1a2144ccb0e4d13af9d4cbb8f857211cf1ffb569a3499ab565ca274cde7e47bbd7baf402082ffed5a981e1c9a46953bef34f6fdb9df961a6647808f6ac2d4b30595bc199375b16a419764ed231ffe604c4a87a0499734438fd8d379363eb2bab82f722a58f8c69e800cf194babf5597f8fc4b42c8438ea3a4d604051996be47856af79747d91ea8ba43555c9ad71245bfee2bf0803c34075a76b07984bf445e6e8141d2efd1ad3b2e62a2f5e734c63c7afa9d437d8fbe04e0f6db129665657a64944a7ea250b466672b497ad320b8dca16ca398948fb4df28d682dd696b5d4286fc6e3a2c55b7b26a1bd86ff898f482c2209dd146efecd771a7c1ffbdba4006c98da4f2551fbbc06a6be0355044b791e2d725ec602854b18c68a660c876430bf9ec7e90e574278ae6c1163f8b3befc51deb4e04f9ad3c198929d98915df28f99c95323bd92bccc851d139b8812df557f150933df6d5a9fc6eb71e9305afb0553748ee24e795f5a8377091cdb3468e4f19ba3ab63a8e181687b28416688cf87b5b5c1de9548040a81df1dd144ab75b11084c4129be4350c5a8c6d163b75f2dadeb93d6e3728490c3f3614828ad6031570582536cc8a357211453eea471755a5dfb292988af19968842009e559e45abc132891b8ecb43155d1ec52ce5e3de3830599fe9a81fb20dbc262026697697c31a3e6af93df13c8ff3d02f7219a92bcec25c1f9cfd74a253bc0a716f43de04d6ec5d8d51e8de98dea79851be802ba8cbff13732f089528a59406237a5e73ed482b5dd7983f2632556c304d0163bfbfb9a028a0974b40d88fec296afea35568e4693720b444fd8275ef4d45b28f4d914be6fa059d5e4b43e95999bb73ad1878c17f75329e885880414c04d9e45fb598c14ccbc9fb5b393a7c72aea6ce1f5cfdc8e8af515ad6c8eb9aa7f09e8047d71e6b60a7c566d49f70ae915d0cb4f482b5bf7af77233207aa6c81f9cc6db7e665f1aea8777adac648f41d72d06e7a963c60c535a466bf1cb3dbd3b5e4605b7eb5d8d312b2a216267e9eccfa07421c7bdf623f71e858f69e454ba6732d69aaa28baf6319b7f3de80e9e78be5572245a4d6f6849bdfa621a8c32a733b3e68306a8437f3b80a70cf33992ff46d3e2cb92a1e4856c6bb70bc4984908cd6b8900e3cad12fce27cc11c595dee5c08809bcfafcb4417cc1c571dd3a2daf0094ea69bc5e956eaef7db130a63b843df5a2d7a03d405222dbd1ff2fd879ff475c1401b3c235b83bb6bf3c283fc7f0a270e1b19709ba45edf3719cef5087553059c8730e4ff85f7657de28c340295b4ec7829560274cc765db13a025caa486c1c497ba0b9a4330bf6c2e5961bb5704fff8f2d948fc4f5af34a5c12ee73a7ca5c98ab11c4f355b4168b07730c0720ce6da2c3c5b4f6f466e957d6c53e0a6b8af959672d8d926eba30e8bf56802ee7517adc97afe480b5912fbb3efec058c65bf8d11441696cfa8cd6372e682123323bae933513b224b5404b1c49c36d7374eef1d0b00c8af70d915df0b545f2a77a6062eee91f2767b8dec6e392109020225d1b5effa226525ca769e9c5dc2e6808de9ba72032e47c13581cc3b48c4f1a24260db3118aea6ab9f0436a0ed2888262c34fb983b9e8f2a6c87e0920433e9b652ec3b740f7fd92f55458780cf650fcd98617c6f9b2b854ce4ee2e8532268ab6778401312bb9a493bfb370624e994d9f93a206d7bd28b93166b38128616eef9bf6bd54d9748d4a2886427afda01c6722b6ef536f58d0794dfe44f1b90a4ef8ac0db3d778ad83336edaa7165be341f250544a0ca24a665a8ee6659a81bf15e3a9b695b474a5f965a725439973609b5195ce3dec93f9ed7a5ddcfc27aaded84e4ff05e19303909267fd88530dce5ff9ec1241d90922dc785a594d134649bbe447f310e3805893c1a3171be88ee760a18a17be32727145570d58d133398fe784f1827c19ca0f60ad68b40700273473bfd83a18833befdab508b300c70edabb1c1d12ffa9f85991f69615a3aafada3cac9c79b12744430097b8d71d1064cf2ac9f3c7d98f667d957891aba92e50a983c8a42f957de2fac2e8da9b6ed7090554c20ed94096346f2f94c15b4211e75ebe46b6fa51ecb70f2e428ee87667a94cc9525dc75bb8cda9f3ccffe4563c1d4463e508e60f92c01cfb0f800e43759505d3feb3bbd71938742030b8d9adc278018dacb54f9b624e20934be5b575ae85ba148d5ce3a97c79eaf4823d69f45ac9eda9f4b5a36ca8b558b89786dee6e029c2fc5a55670b9b4026a06ee7048a25c29cd9eadb996ded7b304d14774446d7278da7c967e6008f46b3daa2419a2f0861a1a10ab72d311f5eedb19552a90f2359eaa1f724c73bf943386ac1c29a01018c54dd62867d75de930770f9bf74dc874d0b6a6ccee9950026f66962f46030f6d640fd82d2d26370bf9952118bf9c87cd2dcf8adfcda3d588f7dd52da2cadec8e5eb8dd734d2190a29fe58224b89c95b323a9d49bbd5be092daefcc137d330ee649f9db62bd3ef22b27062589b3ed74e9f4fbd0f5c712622b57ba7343b7b3549aa8e9abde7fddc34951b0fb3571411c0588ee0775c2124d8f986f535c449dd1588978086a8cbe8d07206e2996221a91feb7edd34b580d0d4339d9bef7531504c9e5de2216faa07d5cfe69c595d4d6e3241c3fb147634e4b537cac69796db8dee0d2132c1164bb4c9bed59b7080115ca9b64f368609cd1ec412ef702982eb0c0ce1a9d48e1966a0451c2fb0c51b0fbd474b38391555a751063736c92410db6d6b6eadace4747d1c07816c4d76bbc5937a76cdc5ef154efc2d702046cac592f9efa1569cc0e8056d69486a32ddd0b391dda3a107aafa248c1153bbf4fe37ef34b4257ee729c37d0cf25c3e46b59844f3a5bd8f69917df563459047e903f4446d37e82318513ef1ff191d786481dfaa524e4f0f509997389410a3c4afc11ea926091f16d5a761be0ddbd827d9742e3ab1765241e9ee4df474a68a75d3e27db85dc6545f63d61ac513a0f12e9d1bfdb8b6f542725c95ed46b34049e02745330b1fd643cf60b05411a732d5cb16ac5d1c7a139811ae9fa4bfc83ea4b367d8da746c26975033ec397675c42ccb77070879db25dfee0439e52501e06bcc9e97c9a5358fe4152304bec394dc46745b406857a284e9166714ca750c62cb6c1e9f00eade052c27c88d1c465e4b1b21b59973d4b643ca434db19823feb0a1a32bf577e1b51e2271039e1870031f18c4b5b463147671bf9fdbb613587d23f8c5a13b15c94bc9e6ab123c73d16622eef26974fdbcb13014d0c1053b6c5a8e86f2a6075cae634829dce6957ba032be1efbe6fb5ad8045833bc60918d1fc73b8ad4e911576f291615fff815c23d272716fcce6f2154f6ed06116ec05730e7c91c9862c89723026183ed204493c97b485b49a37e6944db68653436cce188ea90c9cb00daf63a21f2ab2898575b8d903a45974cd9fa739457a56484f96d1a5aa951b8bafc4858b67983b21f63d3fcfac1d70815fbd527e77743ef39a949a378cca70d1be21bf635afb62bd77d608f4ecb4866dc9eb06d84845452add24a3b1a612a8b5b48847fd197fd9ed1672838691ad0527846f5252900466b86693579863a45e1e8c68fd07fe52f6c8450333f600e90363c5d00b943b287bc9a277b600ee64325cd3f07f7ac5296a1a1a91a98d592e8b9c086caee8c16e92177d0c9f7b1866a13ea1eda9f8c39d71ae6240e8a121379d18a81664b04d6a57f81761b2582c77f0ff0c2a38e8cef001e72adb2565a0541812a3272e9615170d486b77d27ea2f0d0b1ab2278f4dfa8f4adba87aff54c2c8934f2f15a7b084349506e65bd0242aa02989ca824849e8b7094aafbe80bb4bd7eed4a8a4ff4e08fbe057fcaa873d34b1fe4d58f6e50e2b36b49f9dbae0d64e97bdb9690e9609ddc164bb7c3d28cdf38ea03fb7131c842be4883ee758b00f473ca19253b26fa5a185f1c8b68c3a18d4e76efa31fc2ab51d157960453cca45ccae9132512e225558fb86815ed53f922b6aaed54d47debe6fda5039b67dd9ab2a1808cf3103be4b66a5e46339cd1949774614bf48687ffcbe87fcbf9040cd16da5b2fc85d2341014bc9a2c0f98c8bbe1ad92b0c905aa214fb71b7abf557815861b9e884ee8f64ce91bfd123ae1a0cd4d0f7e79876e0d6319b2e5779f267bfd5f91ae3f6759a2be781a6efdc58c8423aef97b1a4a68e3ecdc6743cbac92373074b176e98ab1f89354ffa25d9a1d0a659c7e44ab76bcbb760c1e62c24ebc625df988e557cb69dc25d735f7d7171169581a0199898bf932098b4f669bc1709dd53139adb7a2a3aa77439806981abf1a359610fe79ddaac68e929539565aca376fbffdd0d6adf69d391f8fc5f12b9e8a586fcc9ba835e4763d21b74d303e1ee13faea82474d85aacc6302c2883273e1884ad5a5634153a0d5563905874b9b72363419d9be6ba46d9170431a1e65e509d7075ccc33f6582d932630b84e02f428ec8a4e5115781d499e54aca81bef27656667ab9777178cd62bc75543617a3e36efafcd9ac86e53556cfd1acca62833fa2936401d0502c1052655ceac8d13dae2ea55b4b112330ae18305633605b2c5fea63a864b08214c29ac68456e7cc38bf82aab9b590e7d2a553d08d1a67cd3a213a054dc93a9179445dbbcecbe2b15fc607b684a4358c7ae5743b4dd5a0d4007e73df7f33d14960c7274902b42db09302cacef315fd49042d9fa71d509bb921023e0bbadee2a5651c477fed8ad9beccd9acef42eaa832381e451319370305f410aac17899ac20e50a23ee8479af16f8b33e0cf777747b6f3c34686dc3ade4dc7c59b0b1b88d3f057cf12ae95bc8a5392af5f93b5fdfe95247a72fc21c749acd833cb07f4ed2652cffbf80e3f0ce1c25d0100807fa466b81b4b21827d49a6ab47577066e5d24a00c6d3421b75177c3679010103817fd552261206722f617d76906690f53edfcda29dbd068e872ae20b0a574717f46ecff6a0a0e84e2816921aed98dd0ba372e1756e0086d82729107f4b51f9a96fc08a1eb1c03d6d63cc9a83ee3eab5af00bf7ff45ed150a390a04c6738aee791f61c5bfb585b7c49a511c7ce9d68674d37c07406bfa3acc57f13e975845f3793a036ad0e42421eb5e562f0cf3631c6f1dc74332c6b27d1637fd2c47591e6", @generic="514fc4908166878b11cad612e8d51df6f1512636cac7fea71a07ae13eb18ad818e3a35a3b6", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0xc4, 0x0, 0x0, @fd=r5}, @nested={0x6e, 0xdc, 0x0, 0x1, [@generic="54bd635e2f5ba58e0a15a87f485421d8d8b9a40944dfe7e68539535837d614040086dcfc5663d7fc948373a7d7461af7ce0df465457dafc2c11a336930", @generic="0bef2af7b765", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="4dacafda194dd514469749839b674c35b13d81"]}, @nested={0x60, 0xc2, 0x0, 0x1, [@generic="0d8e288403ebcdac519b564c4179301e951fdfd230714a865148211cdd1f93195a8f31c72d4d4d0baf89ad01ce32", @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@multicast1}, @generic="68ef18a1a775a70354d343e971660fcc6eb116ebda841ab43ca4cda0e1dcea1a40f57ec5dde7"]}, @nested={0x46, 0x8d, 0x0, 0x1, [@typed={0xc, 0x12a, 0x0, 0x0, @u64=0x5}, @generic="ad5be63f1fd3ae8bd3aa3f6b60d5548739364a4fd57a27f97e926f6842262800d462a2f51ff35d1239bc93360b016c7eed12eaca1de1"]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x123c}, 0x1, 0x0, 0x0, 0x40000}, 0x200080c1) 6.684900796s ago: executing program 3 (id=1321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x6, {0x6, 0x0, "3d7da329"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x36, &(0x7f0000000440)={0x40, 0x18, 0xfffffffffffffdcf, "000000fbffffffe5ffffff0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.684030426s ago: executing program 1 (id=1322): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000280)={[{@nossd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000800032100"/28], 0x48) 5.77187759s ago: executing program 4 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000016000000b40000007f00000000000000775a961de38892057a0e5756", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000f107419c1af41c41000000851000000600000018100400", @ANYRES32=r3, @ANYBLOB="000000000000000079000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000700000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close_range(r3, r4, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x45, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$cont(0x9, r8, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) recvmmsg(r9, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000010000000700000000"]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000540)={0x6, 0x7, 0x1, 'queue0\x00', 0x14}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000050201c0"]) (async) r13 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000040)) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040010000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1804000000000000000000000000030018110000", @ANYRES32=r14, @ANYRES16=r5, @ANYRES8=r3], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.630351723s ago: executing program 4 (id=1324): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0x100800001) 5.301026213s ago: executing program 0 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 4.229308921s ago: executing program 0 (id=1326): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000001000000ff0f00000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000034004f65a70be9b342915a7fd29d69740e706d211bbed0a79765ca13de7e72386b7048ecf7878a6e001f98dd24052820ad9918812216b19fa9fe5edfcbd64b6f1e28d9d02f38fbcdbfb43c3f2c764b7fc4414c32558d451f2b16cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$P9_RWALK(r6, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x23) r7 = socket$tipc(0x1e, 0x2, 0x0) listen(r7, 0x7ff) 3.887327963s ago: executing program 2 (id=1327): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xf, &(0x7f0000000340)=@ringbuf, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r4, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x58}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c000c000000850000001500000095000000000000a688e125801fae3200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 2.761304276s ago: executing program 0 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xc, 0x98d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040), 0x0, 0x4f00, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1, 0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 2.17881722s ago: executing program 3 (id=1329): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0202}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000740)={0x3, 0x0, 0xffffd3de, 0x0, 0xfffffff9}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.917870184s ago: executing program 2 (id=1330): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20880) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x4001}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}, {0x95, 0x0, 0x15}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 233.825939ms ago: executing program 4 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000004c0)="b9", 0x1) sendto$inet(r1, &(0x7f00000000c0)='}', 0x34000, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYBLOB="adffa888000000001c12000000000100766c616e000000000c00028006000100000000003b407b08000500313df8456e3382e7522e4e014c9399aa3cf22b3947962da1ced3f3148800000000000000000eda24149c1705df635dd434ccda8c758d11fa31543b797d182defdc6ebcee30c01fc20751a245919e55de3211c494", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 90.126841ms ago: executing program 3 (id=1332): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209000002000000"], 0x10}}, 0x0) (fail_nth: 3) socket$pppoe(0x18, 0x1, 0x0) 881.64µs ago: executing program 2 (id=1333): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 420.71µs ago: executing program 0 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) getpeername(r4, 0x0, &(0x7f0000000100)) 0s ago: executing program 1 (id=1335): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r3}) kernel console output (not intermixed with test programs): 510004][ T7615] IPv6: Can't replace route, no match found [ 478.666056][ T7619] loop0: detected capacity change from 0 to 256 [ 479.861819][ T7636] FAULT_INJECTION: forcing a failure. [ 479.861819][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.899954][ T7636] CPU: 1 PID: 7636 Comm: syz.3.882 Not tainted 5.15.167-syzkaller #0 [ 479.908099][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 479.918182][ T7636] Call Trace: [ 479.921485][ T7636] [ 479.924461][ T7636] dump_stack_lvl+0x1e3/0x2d0 [ 479.929174][ T7636] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 479.934842][ T7636] ? panic+0x860/0x860 [ 479.938966][ T7636] should_fail+0x38a/0x4c0 [ 479.943439][ T7636] strncpy_from_user+0x32/0x370 [ 479.948328][ T7636] bpf_prog_load+0x185/0x1b60 [ 479.953045][ T7636] ? map_freeze+0x360/0x360 [ 479.957571][ T7636] ? __might_fault+0xb8/0x110 [ 479.962271][ T7636] ? __might_fault+0xb4/0x110 [ 479.966949][ T7636] ? bpf_lsm_bpf+0x5/0x10 [ 479.971366][ T7636] ? security_bpf+0x7d/0xa0 [ 479.975922][ T7636] __sys_bpf+0x343/0x670 [ 479.980170][ T7636] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 479.985557][ T7636] ? syscall_enter_from_user_mode+0x2e/0x240 [ 479.991538][ T7636] ? lockdep_hardirqs_on+0x94/0x130 [ 479.996745][ T7636] __x64_sys_bpf+0x78/0x90 [ 480.001160][ T7636] do_syscall_64+0x3b/0xb0 [ 480.005571][ T7636] ? clear_bhb_loop+0x15/0x70 [ 480.010241][ T7636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.016129][ T7636] RIP: 0033:0x7fc876c14ff9 [ 480.020539][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.040137][ T7636] RSP: 002b:00007fc87508d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.048700][ T7636] RAX: ffffffffffffffda RBX: 00007fc876dccf80 RCX: 00007fc876c14ff9 [ 480.056690][ T7636] RDX: 0000000000000080 RSI: 0000000020000440 RDI: 0000000000000005 [ 480.064671][ T7636] RBP: 00007fc87508d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.072640][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.080606][ T7636] R13: 0000000000000001 R14: 00007fc876dccf80 R15: 00007fffe9d02fb8 [ 480.088587][ T7636] [ 480.156556][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 480.166517][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.174692][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.605654][ T7651] loop4: detected capacity change from 0 to 8 [ 480.772583][ T7400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.800780][ T7651] SQUASHFS error: xz decompression failed, data probably corrupt [ 480.833386][ T7651] SQUASHFS error: Failed to read block 0x108: -5 [ 480.837561][ T7400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.839855][ T7651] SQUASHFS error: Unable to read metadata cache entry [106] [ 480.881875][ T7651] SQUASHFS error: Unable to read inode 0x11f [ 480.889470][ T7400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.967967][ T7400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 482.007449][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.017993][ T7672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 482.088554][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.126371][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.161442][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.257817][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.282716][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.328987][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.336164][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.415064][ T7646] loop2: detected capacity change from 0 to 32768 [ 482.433273][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.466347][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.482624][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.512096][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.519263][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.554766][ T7646] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.883 (7646) [ 482.571170][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.615593][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.663061][ T7646] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 482.674901][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.696104][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.721953][ T7646] BTRFS info (device loop2): use zlib compression, level 3 [ 482.749116][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.752506][ T7646] BTRFS info (device loop2): using free space tree [ 482.778252][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.814842][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.832976][ T7646] BTRFS info (device loop2): has skinny extents [ 482.875256][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.911502][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.950743][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.039831][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.100368][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.119453][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.190022][ T7646] BTRFS info (device loop2): enabling ssd optimizations [ 484.215146][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.286339][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.779642][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.971876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.006339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.059245][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.087090][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.133360][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.141296][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.205182][ T7400] device veth0_vlan entered promiscuous mode [ 485.238373][ T7400] device veth1_vlan entered promiscuous mode [ 485.361806][ T3570] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 485.413755][ T7400] device veth0_macvtap entered promiscuous mode [ 485.445226][ T7400] device veth1_macvtap entered promiscuous mode [ 485.507031][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.548617][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.581389][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.611217][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.622431][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.634695][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.644974][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.708543][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.851886][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.926418][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.972962][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.043231][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.080095][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.088136][ T3570] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.112066][ T3570] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.141644][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.195794][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.220205][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.144388][ T3570] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.181344][ T3570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.189763][ T3570] usb 5-1: SerialNumber: syz [ 487.239023][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.251054][ T7778] loop2: detected capacity change from 0 to 32768 [ 487.271403][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.291979][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.301932][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.312437][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.322326][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.332830][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.344218][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.354794][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.379630][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.389229][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.398839][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.407847][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.416661][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.442995][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.463780][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.472876][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.486417][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.511623][ T7400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.541215][ T7778] XFS (loop2): Mounting V5 Filesystem [ 487.559068][ T7400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.569607][ T7400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.610547][ T7400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.624395][ T3570] usb 5-1: 0:2 : does not exist [ 487.780064][ T7778] XFS (loop2): Ending clean mount [ 487.800506][ T7778] XFS (loop2): Quotacheck needed: Please wait. [ 487.837750][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.868681][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.911562][ T7778] XFS (loop2): Quotacheck: Done. [ 487.930471][ T26] audit: type=1800 audit(1728201570.983:23): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.900" name="file1" dev="loop2" ino=5766 res=0 errno=0 [ 487.941004][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.982778][ T3570] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 487.992333][ T3570] usb 5-1: unit 255 not found! [ 488.025062][ T26] audit: type=1804 audit(1728201571.033:24): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.900" name="/newroot/108/file2/file1" dev="loop2" ino=5766 res=1 errno=0 [ 488.067453][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.084142][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.105644][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 488.200069][ T3570] usb 5-1: USB disconnect, device number 6 [ 488.309650][ T4916] XFS (loop2): Unmounting Filesystem [ 488.545067][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.902'. [ 488.931229][ T26] audit: type=1326 audit(1728201571.983:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83af4dcff9 code=0x7ffc0000 [ 488.964433][ T7828] dlm: dev_write: no op 0 74000000000000 [ 489.019287][ T26] audit: type=1326 audit(1728201572.023:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83af4dcff9 code=0x7ffc0000 [ 489.114204][ T26] audit: type=1326 audit(1728201572.023:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83af4dcff9 code=0x7ffc0000 [ 489.242105][ T26] audit: type=1326 audit(1728201572.023:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83af4dcff9 code=0x7ffc0000 [ 489.264041][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.314363][ T7841] loop1: detected capacity change from 0 to 47 [ 489.345129][ T26] audit: type=1326 audit(1728201572.023:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83af4dcff9 code=0x7ffc0000 [ 489.518190][ T7852] MINIX-fs: deleted inode referenced: 9 [ 489.527576][ T7851] loop2: detected capacity change from 0 to 512 [ 489.552024][ T3619] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 489.652766][ T7851] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.911: casefold flag without casefold feature [ 489.670859][ T7851] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.911: couldn't read orphan inode 15 (err -117) [ 489.690610][ T7851] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.871987][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 490.295268][ T3619] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 490.304896][ T3619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.313722][ T3619] usb 5-1: Product: syz [ 490.318064][ T3619] usb 5-1: Manufacturer: syz [ 490.322960][ T3619] usb 5-1: SerialNumber: syz [ 490.338660][ T3619] usb 5-1: config 0 descriptor?? [ 490.382146][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 490.395358][ T3619] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 490.411836][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 490.431777][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.451890][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.461069][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.478743][ T13] usb 2-1: config 0 descriptor?? [ 490.502104][ T7852] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 490.851951][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 490.858107][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 490.890562][ T13] usb 2-1: USB disconnect, device number 7 [ 491.071770][ T7752] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 491.154193][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 491.194204][ T7839] loop4: detected capacity change from 0 to 40427 [ 491.196503][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.251511][ T7839] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 491.252815][ T7877] FAULT_INJECTION: forcing a failure. [ 491.252815][ T7877] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 491.276515][ T7839] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 491.285760][ T7877] CPU: 0 PID: 7877 Comm: syz.2.916 Not tainted 5.15.167-syzkaller #0 [ 491.293884][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.303970][ T7877] Call Trace: [ 491.307270][ T7877] [ 491.310232][ T7877] dump_stack_lvl+0x1e3/0x2d0 [ 491.314944][ T7877] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 491.320620][ T7877] ? panic+0x860/0x860 [ 491.324731][ T7877] ? __lock_acquire+0x1295/0x1ff0 [ 491.329802][ T7877] should_fail+0x38a/0x4c0 [ 491.334262][ T7877] prepare_alloc_pages+0x1db/0x5b0 [ 491.339412][ T7877] __alloc_pages+0x14f/0x700 [ 491.344037][ T7877] ? __rmqueue_pcplist+0x2030/0x2030 [ 491.349359][ T7877] ? __lock_acquire+0x1ff0/0x1ff0 [ 491.354414][ T7877] ? alloc_pages+0x458/0x570 [ 491.359030][ T7877] skb_page_frag_refill+0x220/0x4b0 [ 491.364254][ T7877] tun_get_user+0x1bd7/0x40f0 [ 491.368983][ T7877] ? tun_ring_recv+0xcc0/0xcc0 [ 491.370021][ T7839] F2FS-fs (loop4): Found nat_bits in checkpoint [ 491.373811][ T7877] ? rcu_lock_release+0x5/0x20 [ 491.373859][ T7877] tun_chr_write_iter+0x10c/0x1e0 [ 491.373885][ T7877] vfs_write+0xacd/0xe50 [ 491.373918][ T7877] ? file_end_write+0x250/0x250 [ 491.373949][ T7877] ? __fget_files+0x413/0x480 [ 491.373983][ T7877] ? __fdget_pos+0x1e9/0x380 [ 491.374005][ T7877] ? ksys_write+0x77/0x2c0 [ 491.374031][ T7877] ksys_write+0x1a2/0x2c0 [ 491.374053][ T7877] ? print_irqtrace_events+0x210/0x210 [ 491.374079][ T7877] ? __ia32_sys_read+0x80/0x80 [ 491.374102][ T7877] ? syscall_enter_from_user_mode+0x2e/0x240 [ 491.374128][ T7877] ? lockdep_hardirqs_on+0x94/0x130 [ 491.374152][ T7877] ? syscall_enter_from_user_mode+0x2e/0x240 [ 491.374180][ T7877] do_syscall_64+0x3b/0xb0 [ 491.374199][ T7877] ? clear_bhb_loop+0x15/0x70 [ 491.374220][ T7877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.374246][ T7877] RIP: 0033:0x7f2ba3d49adf [ 491.374269][ T7877] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 491.374289][ T7877] RSP: 002b:00007f2ba21c3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 491.374313][ T7877] RAX: ffffffffffffffda RBX: 00007f2ba3f02f80 RCX: 00007f2ba3d49adf [ 491.374329][ T7877] RDX: 000000000000008e RSI: 0000000020000100 RDI: 00000000000000c8 [ 491.374343][ T7877] RBP: 00007f2ba21c3090 R08: 0000000000000000 R09: 0000000000000000 [ 491.374356][ T7877] R10: 000000000000008e R11: 0000000000000293 R12: 0000000000000001 [ 491.374369][ T7877] R13: 0000000000000001 R14: 00007f2ba3f02f80 R15: 00007ffcbaf87b38 [ 491.374399][ T7877] [ 491.458284][ T7752] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.578844][ T7752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.580408][ T7839] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 491.589203][ T7752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 491.598169][ T7839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.610987][ T7752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.687199][ T7887] loop1: detected capacity change from 0 to 256 [ 491.698828][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.730500][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.762050][ T7752] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 491.771140][ T7752] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 491.806970][ T7752] usb 4-1: Product: syz [ 491.811184][ T7752] usb 4-1: Manufacturer: syz [ 491.829414][ T7887] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 491.921044][ T7752] cdc_wdm 4-1:1.0: skipping garbage [ 491.928608][ T7752] cdc_wdm 4-1:1.0: skipping garbage [ 491.948662][ T7752] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 491.954989][ T7752] cdc_wdm 4-1:1.0: Unknown control protocol [ 491.955558][ T7889] loop2: detected capacity change from 0 to 8192 [ 492.168605][ T7889] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 492.190059][ T7889] REISERFS (device loop2): using ordered data mode [ 492.208491][ T3619] (null): failure reading functionality [ 492.223320][ T7889] reiserfs: using flush barriers [ 492.242053][ T7889] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 492.246519][ T7895] udc-core: couldn't find an available UDC or it's busy [ 492.269616][ T3619] i2c i2c-1: connected i2c-tiny-usb device [ 492.296878][ T7895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.709697][ T3619] usb 5-1: USB disconnect, device number 7 [ 492.957848][ T7889] REISERFS (device loop2): checking transaction log (loop2) [ 493.260552][ T7900] loop1: detected capacity change from 0 to 512 [ 493.372583][ T7900] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.924: casefold flag without casefold feature [ 493.393004][ T7900] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.924: couldn't read orphan inode 15 (err -117) [ 493.408927][ T7889] REISERFS (device loop2): Using tea hash to sort names [ 493.428596][ T7889] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 493.457709][ T7900] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 493.488058][ T7905] loop4: detected capacity change from 0 to 128 [ 493.768521][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 493.875465][ T7905] EXT4-fs (loop4): Test dummy encryption mode enabled [ 493.901187][ T7905] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 493.965112][ T7905] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038 (0x7fffffff) [ 494.097072][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.111313][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.156652][ T7905] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 494.172391][ T7901] device bridge_slave_0 entered promiscuous mode [ 494.185552][ T3617] usb 4-1: USB disconnect, device number 6 [ 494.445313][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.535042][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.574792][ T7901] device bridge_slave_1 entered promiscuous mode [ 495.082715][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.168258][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.372073][ T7901] team0: Port device team_slave_0 added [ 495.401490][ T7901] team0: Port device team_slave_1 added [ 495.443831][ T7752] Bluetooth: hci7: command 0x0409 tx timeout [ 495.511398][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.531999][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.577098][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.588290][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 495.608971][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.621492][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.653038][ T7940] loop2: detected capacity change from 0 to 4096 [ 495.668977][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.757024][ T7940] NILFS (loop2): invalid segment: Checksum error in segment payload [ 495.791511][ T7901] device hsr_slave_0 entered promiscuous mode [ 495.802767][ T7940] NILFS (loop2): trying rollback from an earlier position [ 495.810437][ T7940] NILFS (loop2): invalid segment: Checksum error in segment payload [ 495.819182][ T7940] NILFS (loop2): error -22 while searching super root [ 495.827335][ T7901] device hsr_slave_1 entered promiscuous mode [ 495.836117][ T7901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.847939][ T7901] Cannot create hsr debugfs directory [ 495.969106][ T7940] loop2: detected capacity change from 0 to 1024 [ 496.022508][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 496.036799][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 496.060340][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.067570][ T7940] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.930: bad orphan inode 2097152 [ 496.084207][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.086909][ T7940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 496.102683][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.122100][ T13] usb 4-1: config 0 descriptor?? [ 496.142535][ T7938] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 496.169393][ T7950] overlayfs: unrecognized mount option "subj_role=ext2" or missing value [ 496.217123][ T7952] loop4: detected capacity change from 0 to 1024 [ 496.218912][ T7901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.289563][ T7952] EXT4-fs (loop4): Ignoring removed bh option [ 496.352074][ T7952] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 69: comm syz.4.933: lblock 8 mapped to illegal pblock 69 (length 1) [ 496.382149][ T7952] Quota error (device loop4): write_blk: dquota write failed [ 496.401887][ T7952] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 68: comm syz.4.933: lblock 7 mapped to illegal pblock 68 (length 1) [ 496.427393][ T7952] Quota error (device loop4): write_blk: dquota write failed [ 496.437819][ T7952] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 67: comm syz.4.933: lblock 6 mapped to illegal pblock 67 (length 1) [ 496.441237][ T7901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.457261][ T7952] Quota error (device loop4): write_blk: dquota write failed [ 496.473889][ T7952] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 496.474048][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.932'. [ 496.484128][ T7952] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 48: comm syz.4.933: lblock 0 mapped to illegal pblock 48 (length 1) [ 496.518330][ T7952] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 496.535024][ T7952] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.933: Failed to acquire dquot type 0 [ 496.541941][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 496.554748][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 496.585629][ T7952] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 496.596560][ T13] usb 4-1: USB disconnect, device number 7 [ 496.598710][ T7952] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.933: mark_inode_dirty error [ 496.626311][ T7952] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 496.658204][ T7952] EXT4-fs (loop4): 1 orphan inode deleted [ 496.662280][ T7901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.672440][ T154] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 496.690049][ T7952] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,i_version,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 496.721584][ T154] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 496.731539][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:2: Failed to release dquot type 0 [ 496.805172][ T7959] loop2: detected capacity change from 0 to 4096 [ 496.832906][ T7901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.848036][ T5627] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 496.869940][ T5627] EXT4-fs error (device loop4): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 496.915915][ T7959] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 496.940369][ T7959] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 496.958370][ T7959] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 497.184652][ T7901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.207794][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 497.241618][ T7901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.261968][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 497.262075][ T7901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.289395][ T7968] block nbd1: Unsupported socket: shutdown callout must be supported. [ 497.483277][ T6367] Bluetooth: hci7: command 0x041b tx timeout [ 498.415066][ T7901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.439798][ T7979] loop4: detected capacity change from 0 to 512 [ 498.545277][ T7982] loop2: detected capacity change from 0 to 1024 [ 498.660359][ T7979] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.941: casefold flag without casefold feature [ 498.675847][ T7985] loop1: detected capacity change from 0 to 1024 [ 498.708695][ T7979] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.941: couldn't read orphan inode 15 (err -117) [ 498.747493][ T7979] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 498.781711][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.824888][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.845423][ T7988] openvswitch: netlink: IP tunnel dst address not specified [ 498.864760][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.880171][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.957378][ T7982] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 498.996656][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.047507][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.100567][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.107895][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.147539][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.193746][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.251137][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.272277][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.279398][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.306748][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.463792][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.502794][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.544049][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.752305][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.060725][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.099671][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.169416][ T7400] hfsplus: bad catalog entry type [ 500.175612][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.175640][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.198271][ T7535] Bluetooth: hci7: command 0x040f tx timeout [ 500.206317][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.245413][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.266476][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.368019][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.415231][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.515180][ T8014] loop2: detected capacity change from 0 to 47 [ 501.192642][ T8014] MINIX-fs: deleted inode referenced: 9 [ 501.282630][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.290262][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.339864][ T5899] hfsplus: b-tree write err: -5, ino 4 [ 501.394108][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.436652][ T7301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.465634][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.472077][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.524092][ T7530] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 501.536663][ T7301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.603858][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.622750][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.685250][ T7301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.737947][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.746061][ T7752] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 501.761404][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.792720][ T7301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.831231][ T7901] device veth0_vlan entered promiscuous mode [ 501.842677][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.856649][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.881226][ T7901] device veth1_vlan entered promiscuous mode [ 501.902080][ T7530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 501.930946][ T7530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 501.953639][ T7530] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.982632][ T7530] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.990515][ T7901] device veth0_macvtap entered promiscuous mode [ 502.012378][ T7530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.022287][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.030709][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.065329][ T7530] usb 3-1: config 0 descriptor?? [ 502.080098][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.087668][ T8014] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 502.112023][ T7752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.127200][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.127278][ T7752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.149479][ T7901] device veth1_macvtap entered promiscuous mode [ 502.191816][ T7752] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 502.201162][ T7752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.231642][ T7752] usb 4-1: config 0 descriptor?? [ 502.238064][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.247050][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.254995][ T7527] Bluetooth: hci7: command 0x0419 tx timeout [ 502.318468][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.330538][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.345281][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.356211][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.366661][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.377344][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.387274][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.398421][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.408440][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.418962][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.428889][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.439874][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.449808][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.451999][ T7530] usbhid 3-1:0.0: can't add hid device: -71 [ 502.461039][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.476708][ T7530] usbhid: probe of 3-1:0.0 failed with error -71 [ 502.478718][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.509202][ T7530] usb 3-1: USB disconnect, device number 15 [ 502.530190][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.553958][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.607784][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.619444][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.629752][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.640652][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.651427][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.663615][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.673605][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.684531][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.694521][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.705895][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.716009][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.726540][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.736885][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.747470][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.758834][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.773816][ T7752] pyra 0003:1E7D:2C24.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 502.803070][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.832422][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.848035][ T7901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.863861][ T7901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.873116][ T7901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.882205][ T7901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.802436][ T3617] usb 4-1: USB disconnect, device number 8 [ 504.073868][ T8052] loop4: detected capacity change from 0 to 1024 [ 504.188926][ T8052] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 504.357806][ T7530] Bluetooth: hci1: command 0x0409 tx timeout [ 504.549789][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 504.764805][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.802897][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.933380][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.998867][ T8046] loop2: detected capacity change from 0 to 32768 [ 505.122139][ T8046] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.953 (8046) [ 505.179097][ T8046] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 505.189296][ T8046] BTRFS info (device loop2): enabling auto defrag [ 505.196376][ T8046] BTRFS info (device loop2): max_inline at 0 [ 505.223797][ T8046] BTRFS info (device loop2): enabling ssd optimizations [ 505.248211][ T8046] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 505.260363][ T8046] BTRFS info (device loop2): trying to use backup root at mount time [ 505.270385][ T8046] BTRFS info (device loop2): using free space tree [ 505.277149][ T8046] BTRFS info (device loop2): has skinny extents [ 505.294851][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.316811][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.402356][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.430015][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.447169][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.458827][ T8034] device bridge_slave_0 entered promiscuous mode [ 505.539656][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.573623][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.625119][ T8034] device bridge_slave_1 entered promiscuous mode [ 506.027186][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.032022][ T3619] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 506.094994][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.220952][ T8034] team0: Port device team_slave_0 added [ 506.221251][ T3617] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 506.254089][ T8034] team0: Port device team_slave_1 added [ 506.350480][ T3619] usb 4-1: Using ep0 maxpacket: 32 [ 506.394313][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.401303][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.425117][ T8102] loop0: detected capacity change from 0 to 32768 [ 506.434705][ T1075] Bluetooth: hci1: command 0x041b tx timeout [ 506.455256][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.476502][ T8073] loop4: detected capacity change from 0 to 32768 [ 506.479555][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.491232][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.518538][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 506.524898][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.608697][ T8073] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 506.672441][ T3617] usb 3-1: config 7 has an invalid interface number: 128 but max is 10 [ 506.683510][ T3617] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 11 [ 506.747075][ T3617] usb 3-1: config 7 has no interface number 0 [ 506.764197][ T3617] usb 3-1: config 7 interface 128 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 506.775168][ T3619] usb 4-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 506.791810][ T3619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.801112][ T3617] usb 3-1: config 7 interface 128 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 506.821448][ T3619] usb 4-1: Product: syz [ 506.827116][ T8073] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 506.839324][ T3619] usb 4-1: Manufacturer: syz [ 506.845598][ T3617] usb 3-1: config 7 interface 128 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 506.870409][ T3619] usb 4-1: SerialNumber: syz [ 507.357600][ T3617] usb 3-1: config 7 interface 128 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 507.364911][ T8073] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 13ms [ 507.369697][ T3619] usb 4-1: config 0 descriptor?? [ 507.380775][ T3617] usb 3-1: config 7 interface 128 has no altsetting 0 [ 507.388396][ T3617] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 507.397812][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.436139][ T3619] xr_serial 4-1:0.0: skipping garbage [ 507.452823][ T3617] usb 3-1: can't set config #7, error -71 [ 507.466456][ T3570] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 507.481976][ T3617] usb 3-1: USB disconnect, device number 16 [ 507.495037][ T3570] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 507.699658][ T3570] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 204ms [ 507.720353][ T7530] usb 4-1: USB disconnect, device number 9 [ 507.728824][ T3570] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 507.776911][ T8073] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 508.212097][ T8140] loop0: detected capacity change from 0 to 2048 [ 508.273042][ T8140] loop0: p3 < > p4 < > [ 508.277272][ T8140] loop0: partition table partially beyond EOD, truncated [ 508.326189][ T8140] loop0: p3 start 4284289 is beyond EOD, truncated [ 508.407282][ T8145] loop2: detected capacity change from 0 to 512 [ 508.438599][ T8034] device hsr_slave_0 entered promiscuous mode [ 508.455953][ T3028] loop0: p3 < > p4 < > [ 508.460164][ T3028] loop0: partition table partially beyond EOD, truncated [ 508.485735][ T3028] loop0: p3 start 4284289 is beyond EOD, truncated [ 508.494320][ T8034] device hsr_slave_1 entered promiscuous mode [ 508.502617][ T3570] Bluetooth: hci1: command 0x040f tx timeout [ 508.514912][ T8145] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.961: casefold flag without casefold feature [ 508.532322][ T8145] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.961: couldn't read orphan inode 15 (err -117) [ 508.561822][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.581565][ T8034] Cannot create hsr debugfs directory [ 508.584136][ T8145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.634194][ T7301] device hsr_slave_0 left promiscuous mode [ 508.642005][ T7301] device hsr_slave_1 left promiscuous mode [ 508.648775][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.667023][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.685844][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.700372][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.720172][ T7301] device bridge_slave_1 left promiscuous mode [ 508.735015][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.796428][ T7301] device bridge_slave_0 left promiscuous mode [ 508.824387][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.848594][ T7301] device veth1_macvtap left promiscuous mode [ 508.854813][ T7301] device veth0_macvtap left promiscuous mode [ 508.860900][ T7301] device veth1_vlan left promiscuous mode [ 508.867431][ T7301] device veth0_vlan left promiscuous mode [ 509.332896][ T6322] udevd[6322]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 509.649267][ T8164] loop0: detected capacity change from 0 to 4096 [ 509.704721][ T7301] team0 (unregistering): Port device team_slave_1 removed [ 509.723224][ T7301] team0 (unregistering): Port device team_slave_0 removed [ 509.747469][ T8164] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 509.778992][ T7301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.823719][ T7301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.837573][ T8164] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 510.113607][ T26] audit: type=1804 audit(1728201593.153:30): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.967" name="/newroot/4/bus/bus" dev="loop0" ino=33 res=1 errno=0 [ 510.158447][ T7301] bond0 (unregistering): Released all slaves [ 510.201335][ T465] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 510.277587][ T7901] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 510.571817][ T2989] Bluetooth: hci1: command 0x0419 tx timeout [ 510.770574][ T8183] capability: warning: `syz.3.972' uses deprecated v2 capabilities in a way that may be insecure [ 510.966047][ T8198] tmpfs: Unknown parameter 'quo}a' [ 511.918475][ T8222] loop0: detected capacity change from 0 to 512 [ 512.125058][ T8222] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.980: casefold flag without casefold feature [ 512.223056][ T8222] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.980: couldn't read orphan inode 15 (err -117) [ 512.358584][ T8222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.791907][ T2989] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 513.218166][ T8034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.241987][ T2989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.285197][ T2989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.336543][ T2989] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 513.387204][ T2989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.436292][ T2989] usb 5-1: config 0 descriptor?? [ 513.465574][ T8034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.508719][ T8034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.546876][ T8034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.893581][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.947868][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.972746][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.015327][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.029724][ T2989] pyra 0003:1E7D:2C24.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 514.055781][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.112607][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.162637][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.169774][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.247528][ T7529] usb 5-1: USB disconnect, device number 8 [ 514.294562][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.323106][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.353308][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.373988][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.381128][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.450555][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.481266][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.513125][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.555766][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.609112][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.638077][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.679149][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.722413][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.751230][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.792822][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.845614][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.879550][ T8034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.895915][ T8271] tmpfs: Unknown parameter 'fsmagic' [ 515.018192][ T8235] loop2: detected capacity change from 0 to 65536 [ 515.462959][ T8278] loop4: detected capacity change from 0 to 32768 [ 515.513825][ T8278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.989 (8278) [ 515.539356][ T8278] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 515.548161][ T8278] BTRFS info (device loop4): enabling auto defrag [ 515.554749][ T8278] BTRFS info (device loop4): max_inline at 0 [ 515.560792][ T8278] BTRFS info (device loop4): enabling ssd optimizations [ 515.568247][ T8278] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 515.578265][ T8278] BTRFS info (device loop4): use lzo compression, level 0 [ 515.585523][ T8278] BTRFS info (device loop4): using free space tree [ 515.594524][ T8278] BTRFS info (device loop4): has skinny extents [ 515.652174][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.691253][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.714297][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.738030][ T8261] loop0: detected capacity change from 0 to 40427 [ 515.823467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.843921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.916169][ T8261] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 515.963777][ T8261] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 516.032794][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.045822][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.122075][ T8261] F2FS-fs (loop0): invalid crc value [ 516.186673][ T8034] device veth0_vlan entered promiscuous mode [ 516.205957][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.234107][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.293760][ T8261] F2FS-fs (loop0): Found nat_bits in checkpoint [ 516.308916][ T8034] device veth1_vlan entered promiscuous mode [ 516.466134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.524089][ T8261] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 516.527411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.531172][ T8261] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 516.671134][ T8034] device veth0_macvtap entered promiscuous mode [ 517.429166][ T7901] attempt to access beyond end of device [ 517.429166][ T7901] loop0: rw=2049, want=45112, limit=40427 [ 517.895880][ T8034] device veth1_macvtap entered promiscuous mode [ 517.917125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.932898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 518.030576][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.121203][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.177281][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.221920][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.271930][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.321024][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.351970][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.375909][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.425833][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.441924][ T7752] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 518.473556][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.494105][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.552839][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.579881][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.594527][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.617043][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.643091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.662215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.695021][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.706308][ T7752] usb 3-1: Using ep0 maxpacket: 32 [ 518.723029][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.742567][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.764743][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.792399][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.812976][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.823732][ T7752] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 518.945314][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.008374][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.015620][ T7752] usb 3-1: config 0 has no interface number 0 [ 519.041556][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.062087][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.082329][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.106706][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.126509][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.150915][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.170998][ T8365] loop4: detected capacity change from 0 to 32768 [ 519.173347][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.196552][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.215631][ T7752] usb 3-1: New USB device found, idVendor=12d1, idProduct=8ee2, bcdDevice=77.c8 [ 519.226417][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.235123][ T7752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.244428][ T7752] usb 3-1: Product: syz [ 519.252135][ T7752] usb 3-1: Manufacturer: syz [ 519.256794][ T7752] usb 3-1: SerialNumber: syz [ 519.263028][ T8365] XFS: ikeep mount option is deprecated. [ 519.267880][ T8034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.280727][ T8034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.292628][ T7752] usb 3-1: config 0 descriptor?? [ 519.300534][ T7529] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 519.310747][ T8034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.320077][ T8034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.333503][ T7752] option 3-1:0.135: GSM modem (1-port) converter detected [ 519.357679][ T8365] XFS (loop4): Mounting V5 Filesystem [ 519.449725][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.467889][ T3761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.502357][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.513115][ T3761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.529088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.537337][ T3618] usb 3-1: USB disconnect, device number 17 [ 519.547988][ T8365] XFS (loop4): Ending clean mount [ 519.548449][ T3618] option 3-1:0.135: device disconnected [ 519.573705][ T8365] XFS (loop4): Quotacheck needed: Please wait. [ 519.576079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.664251][ T7529] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 519.711861][ T7529] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 519.755398][ T7529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.975653][ T7529] usb 4-1: config 0 descriptor?? [ 519.982193][ T8365] XFS (loop4): Quotacheck: Done. [ 520.015712][ T7529] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 521.071575][ T8425] loop2: detected capacity change from 0 to 128 [ 521.390693][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 521.440285][ T5627] XFS (loop4): Unmounting Filesystem [ 521.773843][ T8453] loop1: detected capacity change from 0 to 512 [ 521.917617][ T8453] EXT4-fs (loop1): fragment/cluster size (262144) != block size (2048) [ 522.010364][ T3617] usb 4-1: USB disconnect, device number 10 [ 522.116647][ T8461] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1011'. [ 522.152583][ T8461] loop0: detected capacity change from 0 to 128 [ 522.361570][ T8461] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 522.533323][ T8459] loop2: detected capacity change from 0 to 1024 [ 522.800887][ T8459] EXT4-fs (loop2): Mount option "journal_path=./file0" incompatible with ext2 [ 523.018392][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 523.806241][ T8495] loop2: detected capacity change from 0 to 128 [ 523.846336][ T8491] device wireguard0 entered promiscuous mode [ 523.867443][ T8491] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 523.897404][ T8495] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 524.155327][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.500107][ T8470] loop0: detected capacity change from 0 to 32768 [ 524.780571][ T8470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1016 (8470) [ 524.895609][ T8470] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 524.957339][ T8470] BTRFS info (device loop0): use no compression [ 524.971786][ T8470] BTRFS info (device loop0): force zlib compression, level 3 [ 524.979372][ T8470] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 525.009186][ T8470] BTRFS info (device loop0): use lzo compression, level 0 [ 525.060793][ T8470] BTRFS info (device loop0): turning on flush-on-commit [ 525.111230][ T8470] BTRFS info (device loop0): enabling auto defrag [ 525.140254][ T8470] BTRFS info (device loop0): using free space tree [ 525.170991][ T8470] BTRFS info (device loop0): has skinny extents [ 525.491887][ T3618] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 526.371260][ T8511] loop2: detected capacity change from 0 to 32768 [ 526.628210][ T8470] BTRFS error (device loop0): open_ctree failed [ 526.686730][ T8511] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1025 (8511) [ 526.902245][ T3618] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 526.960686][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.104444][ T3618] usb 2-1: Product: syz [ 527.175817][ T3618] usb 2-1: Manufacturer: syz [ 527.238052][ T3618] usb 2-1: SerialNumber: syz [ 527.564854][ T3618] usb 2-1: config 0 descriptor?? [ 527.604058][ T3618] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 008 [ 527.660382][ T8551] loop4: detected capacity change from 0 to 47 [ 527.666772][ T8511] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 527.691930][ T8511] BTRFS info (device loop2): force zlib compression, level 3 [ 527.702847][ T8511] BTRFS info (device loop2): force clearing of disk cache [ 527.713013][ T8511] BTRFS info (device loop2): setting nodatasum [ 527.719251][ T8511] BTRFS info (device loop2): allowing degraded mounts [ 527.728147][ T8511] BTRFS info (device loop2): enabling disk space caching [ 527.735844][ T8511] BTRFS info (device loop2): disk space caching is enabled [ 527.743726][ T8511] BTRFS info (device loop2): has skinny extents [ 527.895120][ T8551] FAULT_INJECTION: forcing a failure. [ 527.895120][ T8551] name failslab, interval 1, probability 0, space 0, times 1 [ 527.984806][ T8551] CPU: 1 PID: 8551 Comm: syz.4.1036 Not tainted 5.15.167-syzkaller #0 [ 527.993032][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.003118][ T8551] Call Trace: [ 528.006423][ T8551] [ 528.009374][ T8551] dump_stack_lvl+0x1e3/0x2d0 [ 528.014096][ T8551] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 528.019766][ T8551] ? panic+0x860/0x860 [ 528.023886][ T8551] ? __might_sleep+0xc0/0xc0 [ 528.028521][ T8551] should_fail+0x38a/0x4c0 [ 528.032994][ T8551] should_failslab+0x5/0x20 [ 528.037542][ T8551] slab_pre_alloc_hook+0x53/0xc0 [ 528.042528][ T8551] __kmalloc+0x6e/0x300 [ 528.046723][ T8551] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 528.052496][ T8551] tomoyo_realpath_from_path+0xd8/0x5e0 [ 528.058103][ T8551] tomoyo_path_number_perm+0x225/0x810 [ 528.063615][ T8551] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 528.069154][ T8551] ? __fget_files+0x413/0x480 [ 528.073879][ T8551] security_file_ioctl+0x6d/0xa0 [ 528.078849][ T8551] __se_sys_ioctl+0x47/0x160 [ 528.083471][ T8551] do_syscall_64+0x3b/0xb0 [ 528.087929][ T8551] ? clear_bhb_loop+0x15/0x70 [ 528.092659][ T8551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.098615][ T8551] RIP: 0033:0x7f6206ffaff9 [ 528.103074][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.122713][ T8551] RSP: 002b:00007f6205473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.131268][ T8551] RAX: ffffffffffffffda RBX: 00007f62071b2f80 RCX: 00007f6206ffaff9 [ 528.138206][ T8572] loop0: detected capacity change from 0 to 47 [ 528.139267][ T8551] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 000000000000000d [ 528.153496][ T8551] RBP: 00007f6205473090 R08: 0000000000000000 R09: 0000000000000000 [ 528.161498][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.169534][ T8551] R13: 0000000000000000 R14: 00007f62071b2f80 R15: 00007fff7d3c5e88 [ 528.177714][ T8551] [ 528.181968][ T8518] udc-core: couldn't find an available UDC or it's busy [ 528.191998][ T3618] (null): failure reading functionality [ 528.195822][ T8518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 528.200184][ T8551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.229199][ T8551] program syz.4.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.253443][ T3618] i2c i2c-1: connected i2c-tiny-usb device [ 528.346648][ T8572] program syz.0.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.487534][ T8135] usb 2-1: USB disconnect, device number 8 [ 528.511944][ T8511] BTRFS error (device loop2): open_ctree failed [ 528.881526][ T8583] loop0: detected capacity change from 0 to 1024 [ 529.187537][ T8583] EXT4-fs (loop0): Ignoring removed bh option [ 529.584754][ T8583] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 69: comm syz.0.1041: lblock 8 mapped to illegal pblock 69 (length 1) [ 529.670386][ T8583] Quota error (device loop0): write_blk: dquota write failed [ 529.696880][ T8583] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 68: comm syz.0.1041: lblock 7 mapped to illegal pblock 68 (length 1) [ 529.718087][ T8583] Quota error (device loop0): write_blk: dquota write failed [ 529.730420][ T8583] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 67: comm syz.0.1041: lblock 6 mapped to illegal pblock 67 (length 1) [ 529.746849][ T8583] Quota error (device loop0): write_blk: dquota write failed [ 529.758573][ T8583] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 529.760539][ T8595] loop4: detected capacity change from 0 to 512 [ 529.768882][ T8583] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.1041: lblock 0 mapped to illegal pblock 48 (length 1) [ 530.532191][ T8583] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 530.544525][ T8583] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1041: Failed to acquire dquot type 0 [ 530.568709][ T8583] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 530.585177][ T8583] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.1041: mark_inode_dirty error [ 530.629557][ T8583] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 530.655599][ T8595] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 530.655599][ T8595] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 530.655599][ T8595] [ 530.736222][ T8583] EXT4-fs (loop0): 1 orphan inode deleted [ 530.762493][ T3763] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 530.787367][ T8583] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,i_version,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 531.000613][ T3763] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 531.670366][ T8595] EXT4-fs (loop4): 1 orphan inode deleted [ 531.697829][ T3763] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:11: Failed to release dquot type 0 [ 531.732125][ T8595] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 531.831943][ T8595] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff) [ 532.060529][ T8619] loop2: detected capacity change from 0 to 2048 [ 532.068375][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1051'. [ 532.438518][ T8619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.652810][ T8627] loop1: detected capacity change from 0 to 512 [ 532.731445][ T7901] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 532.759582][ T8627] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 532.759582][ T8627] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 532.759582][ T8627] [ 532.774065][ T7901] EXT4-fs error (device loop0): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 532.917680][ T8627] EXT4-fs (loop1): 1 orphan inode deleted [ 532.926239][ T8627] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback. [ 532.986362][ T8627] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 533.154276][ T8637] loop4: detected capacity change from 0 to 1024 [ 534.506965][ T8637] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 534.516795][ T8637] EXT4-fs (loop4): group descriptors corrupted! [ 534.699706][ T8642] openvswitch: netlink: IP tunnel dst address not specified [ 535.847350][ T8668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1065'. [ 536.012049][ T7753] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 536.261854][ T7753] usb 1-1: Using ep0 maxpacket: 8 [ 537.352215][ T7753] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 537.372276][ T7753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.380317][ T7753] usb 1-1: Product: syz [ 537.446286][ T7753] usb 1-1: Manufacturer: syz [ 537.472502][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 537.511856][ T7753] usb 1-1: SerialNumber: syz [ 537.543526][ T7753] usb 1-1: config 0 descriptor?? [ 537.564464][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 537.642695][ T7753] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 539.353037][ T8702] loop4: detected capacity change from 0 to 512 [ 539.437931][ T8702] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.531898][ T8702] EXT4-fs (loop4): orphan cleanup on readonly fs [ 539.550795][ T8709] loop1: detected capacity change from 0 to 512 [ 539.572186][ T8702] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3879: comm syz.4.1075: Allocating blocks 41-42 which overlap fs metadata [ 539.624056][ T8709] EXT4-fs (loop1): orphan cleanup on readonly fs [ 539.636679][ T8704] loop2: detected capacity change from 0 to 8192 [ 539.657777][ T8702] EXT4-fs (loop4): Remounting filesystem read-only [ 539.666697][ T8709] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.1078: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 539.695105][ T8702] Quota error (device loop4): write_blk: dquota write failed [ 539.709844][ T8704] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 539.737928][ T8704] REISERFS (device loop2): using ordered data mode [ 539.751886][ T8702] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 539.771851][ T8704] reiserfs: using flush barriers [ 539.805163][ T8709] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 539.809998][ T8702] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1075: Failed to acquire dquot type 0 [ 539.821891][ T8704] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 539.828464][ T8709] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 539.860252][ T8704] REISERFS (device loop2): checking transaction log (loop2) [ 539.863417][ T8702] EXT4-fs (loop4): 1 truncate cleaned up [ 539.876794][ T8704] REISERFS (device loop2): Using r5 hash to sort names [ 539.891495][ T8702] EXT4-fs (loop4): pa ffff888057142d20: logic 1, phys. 41, len 23 [ 539.899776][ T8702] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 539.901880][ T8704] REISERFS (device loop2): using 3.5.x disk format [ 539.910577][ T8709] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 539.931293][ T8709] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 539.951568][ T8702] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 540.055572][ T8704] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 540.226807][ T8664] loop0: detected capacity change from 0 to 512 [ 540.403306][ T7753] gspca_sonixj: reg_r err -110 [ 540.416543][ T26] audit: type=1804 audit(1728201623.473:31): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1076" name="/newroot/149/file0/file0" dev="loop2" ino=2 res=1 errno=0 [ 540.501884][ T7753] sonixj: probe of 1-1:0.0 failed with error -110 [ 540.674961][ T8664] EXT4-fs error (device loop0): ext4_quota_enable:6387: comm syz.0.1064: inode #50331648: comm syz.0.1064: iget: illegal inode # [ 540.728129][ T8664] EXT4-fs (loop0): Remounting filesystem read-only [ 540.747599][ T8664] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz.0.1064: Bad quota inode: 50331648, type: 2 [ 541.015075][ T8664] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 541.495154][ T8664] EXT4-fs (loop0): mount failed [ 541.714560][ T7753] usb 1-1: USB disconnect, device number 7 [ 541.867093][ T8702] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.1075: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 541.896267][ T8729] loop0: detected capacity change from 0 to 512 [ 541.960005][ T8729] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1084: casefold flag without casefold feature [ 542.088969][ T8725] loop1: detected capacity change from 0 to 40427 [ 542.101843][ T8729] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1084: couldn't read orphan inode 15 (err -117) [ 542.128665][ T8729] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 542.328767][ T5627] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 542.400672][ T8725] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 542.452218][ T8725] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 542.478225][ T8725] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 542.581510][ T5627] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 543.362169][ T8741] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 543.386011][ T8741] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 543.533060][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.594047][ T8749] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 543.642736][ T8746] loop1: detected capacity change from 0 to 128 [ 543.665057][ T8752] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.685672][ T8749] CIFS mount error: No usable UNC path provided in device string! [ 543.685672][ T8749] [ 543.708795][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.742806][ T8749] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 543.772138][ T8752] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.781451][ T8752] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 543.832059][ T8752] netlink: 'syz.3.1090': attribute type 2 has an invalid length. [ 543.839877][ T8752] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.877386][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.893256][ T8746] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.912083][ T8746] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038 (0x7fffffff) [ 543.932944][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.946119][ T8754] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.956396][ T8754] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 543.967166][ T8754] netlink: 'syz.3.1090': attribute type 2 has an invalid length. [ 543.975910][ T8754] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.998657][ T8751] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 544.000841][ T8760] loop0: detected capacity change from 0 to 1024 [ 544.020267][ T8746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.028199][ T8746] IPv6: NLM_F_CREATE should be set when creating new route [ 544.072713][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.140546][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.342943][ T8769] loop2: detected capacity change from 0 to 128 [ 544.498699][ T8769] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 544.539098][ T8769] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 544.898065][ T144] hfsplus: b-tree write err: -5, ino 4 [ 545.141934][ T154] tipc: Left network mode [ 545.622517][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 545.964926][ T8799] loop2: detected capacity change from 0 to 8192 [ 546.020254][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.072148][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.110708][ T8775] device bridge_slave_0 entered promiscuous mode [ 546.212085][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.220958][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.262696][ T8775] device bridge_slave_1 entered promiscuous mode [ 546.283382][ T8776] loop1: detected capacity change from 0 to 40427 [ 546.356990][ T8776] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 546.404186][ T8776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 546.437950][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.449579][ T8776] F2FS-fs (loop1): invalid crc value [ 546.546222][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.782709][ T8141] Bluetooth: hci6: command 0x0409 tx timeout [ 546.825280][ T8775] team0: Port device team_slave_0 added [ 546.835883][ T8776] F2FS-fs (loop1): Found nat_bits in checkpoint [ 547.026790][ T8775] team0: Port device team_slave_1 added [ 547.252250][ T8776] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 547.259905][ T8776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 547.605732][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.631951][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.020918][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.045425][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.063384][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.151923][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.276278][ T8034] attempt to access beyond end of device [ 548.276278][ T8034] loop1: rw=2049, want=45120, limit=40427 [ 548.468060][ T8775] device hsr_slave_0 entered promiscuous mode [ 548.502464][ T8775] device hsr_slave_1 entered promiscuous mode [ 548.512096][ T8775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.548578][ T8775] Cannot create hsr debugfs directory [ 548.795546][ T154] device hsr_slave_0 left promiscuous mode [ 548.825987][ T8138] Bluetooth: hci6: command 0x041b tx timeout [ 548.832181][ T154] device hsr_slave_1 left promiscuous mode [ 548.844652][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.881926][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.910363][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.939944][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.972625][ T154] device bridge_slave_1 left promiscuous mode [ 548.980743][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.036661][ T154] device bridge_slave_0 left promiscuous mode [ 549.088130][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.749256][ T8848] loop1: detected capacity change from 0 to 512 [ 549.799861][ T154] device veth1_macvtap left promiscuous mode [ 549.806673][ T154] device veth0_macvtap left promiscuous mode [ 549.833185][ T154] device veth1_vlan left promiscuous mode [ 549.839050][ T154] device veth0_vlan left promiscuous mode [ 549.999584][ T8848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 550.012336][ T8848] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 550.919358][ T8138] Bluetooth: hci6: command 0x040f tx timeout [ 551.149264][ T8864] loop2: detected capacity change from 0 to 128 [ 551.168541][ T154] team0 (unregistering): Port device team_slave_1 removed [ 551.211347][ T154] team0 (unregistering): Port device team_slave_0 removed [ 551.244050][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.264177][ T8864] ufs: Invalid option: "0x000000000000000400000000000000000000003" or missing value [ 551.319176][ T8864] ufs: wrong mount options [ 551.332980][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.561447][ T154] bond0 (unregistering): Released all slaves [ 551.982765][ T8860] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.999855][ T8860] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 552.013556][ T8860] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 552.031404][ T8860] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 552.058428][ T8864] tipc: Started in network mode [ 552.109890][ T8874] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 552.112105][ T8864] tipc: Node identity f7, cluster identity 4711 [ 552.158377][ T8864] tipc: Node number set to 247 [ 553.239244][ T3614] Bluetooth: hci6: command 0x0419 tx timeout [ 554.228466][ T8900] loop2: detected capacity change from 0 to 64 [ 554.467786][ T8900] device ip6tnl1 entered promiscuous mode [ 554.611811][ T8878] loop0: detected capacity change from 0 to 32768 [ 554.703754][ T8878] jfs: Unrecognized mount option "ƒrrors=remount-ro" or missing value [ 554.849840][ T8922] loop1: detected capacity change from 0 to 1024 [ 554.962159][ T8923] netlink: 'syz.2.1124': attribute type 6 has an invalid length. [ 554.992506][ T8922] hfsplus: bad catalog entry type [ 555.001129][ T26] audit: type=1326 audit(1728201638.053:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.1.1123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb455572ff9 code=0x0 [ 555.049510][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 555.180165][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 555.298883][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1125'. [ 555.321865][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1125'. [ 555.425052][ T8775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.451415][ T8775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.567607][ T8775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.707800][ T8944] loop0: detected capacity change from 0 to 512 [ 555.785108][ T4216] hfsplus: b-tree write err: -5, ino 4 [ 555.799098][ T8775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.674569][ T8944] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1127: casefold flag without casefold feature [ 556.732443][ T8944] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1127: couldn't read orphan inode 15 (err -117) [ 556.759302][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.795547][ T8944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 556.852543][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.861558][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.877293][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.206181][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 557.357245][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.417449][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.424652][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.564443][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 557.631072][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 557.693860][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.752107][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.759286][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.818055][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 557.913786][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.955902][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 558.047429][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.075213][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 558.109466][ T8979] loop0: detected capacity change from 0 to 1024 [ 558.123115][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 558.152961][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 558.176882][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.206930][ T8979] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 558.226220][ T8953] loop1: detected capacity change from 0 to 32768 [ 558.228928][ T8775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.288217][ T8979] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 558.292811][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.322244][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 558.349308][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 558.401411][ T8953] XFS (loop1): Mounting V5 Filesystem [ 558.451263][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.570999][ T8953] XFS (loop1): Ending clean mount [ 558.755623][ T8034] XFS (loop1): Unmounting Filesystem [ 558.981447][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.991303][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.044053][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.740254][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.944593][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.003307][ T9039] loop0: detected capacity change from 0 to 512 [ 560.921133][ T9039] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1140: casefold flag without casefold feature [ 560.947857][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 560.993342][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.023398][ T9039] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1140: couldn't read orphan inode 15 (err -117) [ 561.040822][ T9057] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1142'. [ 561.053103][ T8775] device veth0_vlan entered promiscuous mode [ 561.091195][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.099908][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 561.108150][ T9039] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 561.196778][ T8775] device veth1_vlan entered promiscuous mode [ 561.722471][ T8775] device veth0_macvtap entered promiscuous mode [ 561.833504][ T8775] device veth1_macvtap entered promiscuous mode [ 561.971270][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.021771][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.052086][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.077256][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.091039][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.121725][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.131623][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.160457][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.181937][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.201708][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.221735][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.249109][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.268065][ T9088] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1139'. [ 562.286026][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.307412][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.330078][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.349313][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 562.369121][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.389862][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 562.427259][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.444023][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.463903][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 562.537684][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.621588][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.669571][ T9073] loop2: detected capacity change from 0 to 32768 [ 562.681713][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.699435][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.711565][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.722560][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.733268][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.744190][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.758473][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.779513][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.795560][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.816714][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.836462][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.849390][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.861441][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.878383][ T9097] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1149'. [ 562.891609][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 562.928715][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.935134][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.958743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.967745][ T9100] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1146'. [ 562.977519][ T9100] unsupported nla_type 14345 [ 562.988909][ T9077] loop1: detected capacity change from 0 to 32768 [ 562.992958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 563.036243][ T8775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.078524][ T8775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.090232][ T9077] jfs_rename: dtInsert returned -EIO [ 563.107355][ T8775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.118153][ T8775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.142540][ T9073] JBD2: Ignoring recovery information on journal [ 563.300970][ T9073] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 563.467580][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.497456][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.520557][ T9073] (syz.2.1144,9073,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 563.569915][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 563.888753][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.908981][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.980235][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 564.100702][ T8138] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 564.264407][ T4916] ocfs2: Unmounting device (7,2) on (node local) [ 565.314104][ T8138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.333326][ T8138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.343820][ T8138] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 565.361893][ T8138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.420581][ T8138] usb 2-1: config 0 descriptor?? [ 565.555919][ T9148] loop2: detected capacity change from 0 to 512 [ 565.705264][ T9148] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1155: casefold flag without casefold feature [ 565.779766][ T9148] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1155: couldn't read orphan inode 15 (err -117) [ 565.844121][ T9148] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 566.082157][ T8138] usbhid 2-1:0.0: can't add hid device: -32 [ 566.109440][ T8138] usbhid: probe of 2-1:0.0 failed with error -32 [ 566.249444][ T9176] loop4: detected capacity change from 0 to 1024 [ 566.307425][ T9176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.108472][ T8138] usb 2-1: USB disconnect, device number 9 [ 567.114720][ T9193] Unsupported ieee802154 address type: 0 [ 567.249613][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 567.485097][ T9203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1162'. [ 569.048524][ T9196] loop1: detected capacity change from 0 to 40427 [ 569.234712][ T9196] F2FS-fs (loop1): invalid crc value [ 569.441266][ T9196] F2FS-fs (loop1): Found nat_bits in checkpoint [ 569.709487][ T9196] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 569.858066][ T9229] loop2: detected capacity change from 0 to 1024 [ 570.795860][ T8034] attempt to access beyond end of device [ 570.795860][ T8034] loop1: rw=2049, want=45104, limit=40427 [ 570.851884][ T7753] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 570.887474][ T9229] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 571.191910][ T3614] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 571.271968][ T7753] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.312524][ T7753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.571962][ T7753] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 571.587326][ T7753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 571.605989][ T7753] usb 1-1: SerialNumber: syz [ 571.822213][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.982573][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.153225][ T3614] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 572.298406][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.406118][ T3614] usb 5-1: config 0 descriptor?? [ 572.444898][ T7753] usb 1-1: 0:2 : does not exist [ 572.449878][ T7753] usb 1-1: unit 255 not found! [ 572.561941][ T7753] usb 1-1: USB disconnect, device number 8 [ 572.635772][ T6322] udevd[6322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.648645][ T9264] loop0: detected capacity change from 0 to 512 [ 573.711866][ T3614] usbhid 5-1:0.0: can't add hid device: -32 [ 573.717890][ T3614] usbhid: probe of 5-1:0.0 failed with error -32 [ 573.815272][ T9264] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1177: casefold flag without casefold feature [ 573.842222][ T9264] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1177: couldn't read orphan inode 15 (err -117) [ 573.879931][ T9264] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 574.103310][ T9257] loop1: detected capacity change from 0 to 32768 [ 574.400926][ T9257] JBD2: Ignoring recovery information on journal [ 574.594440][ T9257] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 574.723719][ T9257] (syz.1.1175,9257,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 574.795193][ T8141] usb 5-1: USB disconnect, device number 9 [ 574.984574][ T8034] ocfs2: Unmounting device (7,1) on (node local) [ 575.851035][ T9298] loop0: detected capacity change from 0 to 1024 [ 576.328615][ T9298] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 577.163963][ T9280] loop4: detected capacity change from 0 to 32768 [ 577.223743][ T9280] XFS: ikeep mount option is deprecated. [ 577.417547][ T9280] XFS (loop4): Mounting V5 Filesystem [ 577.485657][ T9292] loop1: detected capacity change from 0 to 40427 [ 577.550098][ T9280] XFS (loop4): Ending clean mount [ 577.567389][ T9280] XFS (loop4): Quotacheck needed: Please wait. [ 577.596694][ T9292] F2FS-fs (loop1): invalid crc value [ 577.794605][ T9292] F2FS-fs (loop1): Found nat_bits in checkpoint [ 577.821980][ T9280] XFS (loop4): Quotacheck: Done. [ 577.936340][ T8775] XFS (loop4): Unmounting Filesystem [ 578.085303][ T9292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 579.132549][ T8034] attempt to access beyond end of device [ 579.132549][ T8034] loop1: rw=2049, want=45104, limit=40427 [ 579.581848][ T3614] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 579.972143][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.013763][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.075612][ T3614] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 580.124725][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.188105][ T3614] usb 5-1: config 0 descriptor?? [ 580.702453][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 580.746110][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.141873][ T3614] usbhid 5-1:0.0: can't add hid device: -32 [ 581.148032][ T3614] usbhid: probe of 5-1:0.0 failed with error -32 [ 581.937655][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 582.729474][ T8135] usb 5-1: USB disconnect, device number 10 [ 584.378894][ T9418] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 584.378894][ T9418] The task syz.4.1205 (9418) triggered the difference, watch for misbehavior. [ 584.622842][ T9421] loop1: detected capacity change from 0 to 512 [ 584.737911][ T9403] loop0: detected capacity change from 0 to 40427 [ 584.745847][ T9421] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1209: casefold flag without casefold feature [ 584.800995][ T9421] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1209: couldn't read orphan inode 15 (err -117) [ 584.830717][ T9403] F2FS-fs (loop0): invalid crc value [ 584.873904][ T9403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 584.882007][ T9421] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 585.191173][ T9403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 586.796982][ T9447] loop2: detected capacity change from 0 to 512 [ 586.890547][ T9447] EXT4-fs (loop2): fragment/cluster size (33554432) != block size (2048) [ 587.481758][ T8141] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 588.421957][ T8141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.459648][ T8141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.490383][ T8141] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 588.520849][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.571876][ T8141] usb 3-1: config 0 descriptor?? [ 589.075636][ T9466] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1222'. [ 589.113921][ T9466] loop4: detected capacity change from 0 to 128 [ 589.222927][ T9466] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 589.469156][ T8141] usbhid 3-1:0.0: can't add hid device: -32 [ 589.508379][ T8141] usbhid: probe of 3-1:0.0 failed with error -32 [ 593.057607][ T2989] usb 3-1: USB disconnect, device number 18 [ 593.209712][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1227'. [ 593.231366][ T26] audit: type=1326 audit(1728201676.283:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.296695][ T9492] dlm: dev_write: no op 0 74000000000000 [ 593.386451][ T26] audit: type=1326 audit(1728201676.353:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.439442][ T26] audit: type=1326 audit(1728201676.353:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.495284][ T26] audit: type=1326 audit(1728201676.353:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.570473][ T26] audit: type=1326 audit(1728201676.353:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.652021][ T26] audit: type=1326 audit(1728201676.353:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 593.681762][ T26] audit: type=1326 audit(1728201676.383:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3d4aff9 code=0x7ffc0000 [ 594.217934][ T26] audit: type=1326 audit(1728201676.423:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.0.1229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faadd79bff9 code=0x0 [ 594.522892][ T9519] loop0: detected capacity change from 0 to 512 [ 594.733042][ T9519] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1234: casefold flag without casefold feature [ 594.820616][ T9519] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1234: couldn't read orphan inode 15 (err -117) [ 595.323228][ T9519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 597.308939][ T8135] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 597.738297][ T8135] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 597.763148][ T8135] usb 5-1: can't read configurations, error -71 [ 602.814909][ T8135] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 603.103447][ T9594] loop2: detected capacity change from 0 to 1764 [ 603.222131][ T8135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.243583][ T8135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.294387][ T8135] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 603.339127][ T8135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.368480][ T8135] usb 2-1: config 0 descriptor?? [ 605.532025][ T8135] usbhid 2-1:0.0: can't add hid device: -32 [ 605.538049][ T8135] usbhid: probe of 2-1:0.0 failed with error -32 [ 606.616686][ T9640] loop0: detected capacity change from 0 to 1024 [ 606.664867][ T8141] usb 2-1: USB disconnect, device number 10 [ 607.871352][ T9648] loop4: detected capacity change from 0 to 32768 [ 607.880942][ T9640] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 608.352768][ T9648] XFS (loop4): Mounting V5 Filesystem [ 608.417548][ T9632] loop2: detected capacity change from 0 to 40427 [ 608.862898][ T9680] 9pnet: Insufficient options for proto=fd [ 609.045035][ T9648] XFS (loop4): Ending clean mount [ 609.059041][ T9648] XFS (loop4): Quotacheck needed: Please wait. [ 610.999683][ T9648] XFS (loop4): Quotacheck: Done. [ 611.117225][ T9700] loop0: detected capacity change from 0 to 512 [ 611.130057][ T8775] XFS (loop4): Unmounting Filesystem [ 611.278533][ T9700] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1281: casefold flag without casefold feature [ 611.292326][ T9700] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1281: couldn't read orphan inode 15 (err -117) [ 611.422436][ T9700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 611.862133][ T7753] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 612.252713][ T7753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.284978][ T7753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.340499][ T7753] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 612.384070][ T7753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.506023][ T7753] usb 4-1: config 0 descriptor?? [ 613.051879][ T8135] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 613.372813][ T9725] loop4: detected capacity change from 0 to 1024 [ 613.492075][ T8135] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.510968][ T8135] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 613.523848][ T9725] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 613.591024][ T8135] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.621800][ T8135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 613.656194][ T8135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 613.701847][ T7753] usbhid 4-1:0.0: can't add hid device: -32 [ 613.707860][ T7753] usbhid: probe of 4-1:0.0 failed with error -32 [ 613.832127][ T8135] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.850602][ T8135] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.869228][ T8135] usb 1-1: Product: syz [ 613.891834][ T8135] usb 1-1: Manufacturer: syz [ 613.966958][ T8135] cdc_wdm 1-1:1.0: skipping garbage [ 613.987141][ T8135] cdc_wdm 1-1:1.0: skipping garbage [ 614.010406][ T8135] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 614.026840][ T8135] cdc_wdm 1-1:1.0: Unknown control protocol [ 614.164494][ T9723] loop1: detected capacity change from 0 to 40427 [ 614.206122][ T9723] F2FS-fs (loop1): invalid crc value [ 614.214186][ T7530] usb 1-1: USB disconnect, device number 9 [ 614.228915][ T9723] F2FS-fs (loop1): Found nat_bits in checkpoint [ 614.331831][ T9723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 614.611467][ T9736] loop2: detected capacity change from 0 to 4096 [ 614.640044][ T9731] loop4: detected capacity change from 0 to 32768 [ 614.707284][ T9731] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1288 (9731) [ 614.842149][ T9731] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 614.896701][ T9736] ntfs: volume version 3.1. [ 614.919776][ T9731] BTRFS info (device loop4): enabling disk space caching [ 614.969009][ T9731] BTRFS info (device loop4): force clearing of disk cache [ 615.016815][ T9731] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 615.126131][ T9731] BTRFS info (device loop4): use zstd compression, level 3 [ 615.341757][ T7530] usb 4-1: USB disconnect, device number 11 [ 615.348026][ T9731] BTRFS info (device loop4): turning on sync discard [ 615.498768][ T9731] BTRFS info (device loop4): disk space caching is enabled [ 615.665628][ T9731] BTRFS info (device loop4): has skinny extents [ 616.171875][ T8135] Bluetooth: hci7: command 0x0406 tx timeout [ 616.246128][ T8034] attempt to access beyond end of device [ 616.246128][ T8034] loop1: rw=2049, want=45104, limit=40427 [ 618.472434][ T9731] BTRFS error (device loop4): open_ctree failed [ 620.099940][ T9794] loop1: detected capacity change from 0 to 1024 [ 620.260671][ T9794] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 620.621052][ T9803] ebt_among: dst integrity fail: 200 [ 620.817136][ T9805] loop1: detected capacity change from 0 to 512 [ 620.936969][ T9805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 620.993672][ T9805] EXT4-fs (loop1): 1 truncate cleaned up [ 621.019805][ T9805] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,grpjquota=,usrjquota=,block_validity,lazytime,quota,acl,i_version,,errors=continue. Quota mode: writeback. [ 622.989778][ T1293] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 624.426310][ T9841] FAULT_INJECTION: forcing a failure. [ 624.426310][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 624.449428][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.492038][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.521889][ T9841] CPU: 1 PID: 9841 Comm: syz.2.1311 Not tainted 5.15.167-syzkaller #0 [ 624.530233][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 624.540306][ T9841] Call Trace: [ 624.543601][ T9841] [ 624.546540][ T9841] dump_stack_lvl+0x1e3/0x2d0 [ 624.551237][ T9841] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 624.556884][ T9841] ? panic+0x860/0x860 [ 624.560976][ T9841] ? __might_sleep+0xc0/0xc0 [ 624.565578][ T9841] ? netlink_insert+0xcac/0x1280 [ 624.570538][ T9841] should_fail+0x38a/0x4c0 [ 624.574979][ T9841] should_failslab+0x5/0x20 [ 624.579497][ T9841] slab_pre_alloc_hook+0x53/0xc0 [ 624.584452][ T9841] kmem_cache_alloc_node+0x49/0x2c0 [ 624.589669][ T9841] ? __alloc_skb+0xdd/0x590 [ 624.594192][ T9841] __alloc_skb+0xdd/0x590 [ 624.598546][ T9841] netlink_sendmsg+0x6f8/0xd60 [ 624.603348][ T9841] ? netlink_getsockopt+0x5b0/0x5b0 [ 624.608576][ T9841] ? aa_sock_msg_perm+0x91/0x150 [ 624.613535][ T9841] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 624.618832][ T9841] ? security_socket_sendmsg+0x7d/0xa0 [ 624.624305][ T9841] ? netlink_getsockopt+0x5b0/0x5b0 [ 624.629519][ T9841] ____sys_sendmsg+0x59e/0x8f0 [ 624.634299][ T9841] ? iovec_from_user+0x300/0x390 [ 624.639260][ T9841] ? __sys_sendmsg_sock+0x30/0x30 [ 624.641656][ T1293] usb 3-1: device descriptor read/all, error -71 [ 624.644319][ T9841] ___sys_sendmsg+0x252/0x2e0 [ 624.655313][ T9841] ? __sys_sendmsg+0x260/0x260 [ 624.660155][ T9841] ? __fdget+0x191/0x220 [ 624.664431][ T9841] __se_sys_sendmsg+0x19a/0x260 [ 624.669311][ T9841] ? __x64_sys_sendmsg+0x80/0x80 [ 624.674280][ T9841] ? syscall_enter_from_user_mode+0x2e/0x240 [ 624.680289][ T9841] ? lockdep_hardirqs_on+0x94/0x130 [ 624.685531][ T9841] ? syscall_enter_from_user_mode+0x2e/0x240 [ 624.691542][ T9841] do_syscall_64+0x3b/0xb0 [ 624.695983][ T9841] ? clear_bhb_loop+0x15/0x70 [ 624.700690][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.706652][ T9841] RIP: 0033:0x7f2ba3d4aff9 [ 624.711093][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.730729][ T9841] RSP: 002b:00007f2ba21c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.739173][ T9841] RAX: ffffffffffffffda RBX: 00007f2ba3f02f80 RCX: 00007f2ba3d4aff9 [ 624.747172][ T9841] RDX: 0000000020008040 RSI: 0000000020000480 RDI: 0000000000000003 [ 624.755170][ T9841] RBP: 00007f2ba21c3090 R08: 0000000000000000 R09: 0000000000000000 [ 624.763170][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.771173][ T9841] R13: 0000000000000000 R14: 00007f2ba3f02f80 R15: 00007ffcbaf87b38 [ 624.779194][ T9841] [ 627.264664][ T3614] Bluetooth: hci1: command 0x0406 tx timeout [ 627.381253][ T9869] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1320'. [ 628.321790][ T7749] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 628.694754][ T7749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.721811][ T7749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.752868][ T7749] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 628.800573][ T7749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.830418][ T7749] usb 4-1: config 0 descriptor?? [ 629.122770][ T9877] loop1: detected capacity change from 0 to 32768 [ 629.288391][ T9877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1322 (9877) [ 629.943405][ T9877] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 629.986863][ T9877] BTRFS info (device loop1): use no compression [ 630.001746][ T9877] BTRFS info (device loop1): force zlib compression, level 3 [ 630.031961][ T9877] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 630.071959][ T9877] BTRFS info (device loop1): use lzo compression, level 0 [ 630.111801][ T9877] BTRFS info (device loop1): turning on flush-on-commit [ 630.118802][ T9877] BTRFS info (device loop1): enabling auto defrag [ 630.171736][ T9877] BTRFS info (device loop1): using free space tree [ 630.218449][ T9877] BTRFS info (device loop1): has skinny extents [ 630.266186][ T9887] loop4: detected capacity change from 0 to 40427 [ 630.292076][ T7749] usbhid 4-1:0.0: can't add hid device: -32 [ 630.298578][ T7749] usbhid: probe of 4-1:0.0 failed with error -32 [ 630.942352][ T9887] F2FS-fs (loop4): invalid crc value [ 631.049460][ T9887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 631.894037][ T3692] usb 4-1: USB disconnect, device number 12 [ 633.921948][ T9877] BTRFS error (device loop1): open_ctree failed [ 634.124108][ T27] INFO: task syz.0.894:7687 blocked for more than 145 seconds. [ 634.141959][ T27] Not tainted 5.15.167-syzkaller #0 [ 634.147730][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.157701][ T27] task:syz.0.894 state:D stack:24512 pid: 7687 ppid: 4669 flags:0x00004204 [ 634.167240][ T27] Call Trace: [ 634.170629][ T27] [ 634.173713][ T27] __schedule+0x12c4/0x45b0 [ 634.178279][ T27] ? release_firmware_map_entry+0x190/0x190 [ 634.187412][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 634.201377][ T27] ? print_irqtrace_events+0x210/0x210 [ 634.401777][ T9941] FAULT_INJECTION: forcing a failure. [ 634.401777][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 634.414579][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 634.414611][ T9941] CPU: 0 PID: 9941 Comm: syz.3.1332 Not tainted 5.15.167-syzkaller #0 [ 634.427963][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 634.438038][ T9941] Call Trace: [ 634.441327][ T9941] [ 634.444260][ T9941] dump_stack_lvl+0x1e3/0x2d0 [ 634.448942][ T9941] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 634.454576][ T9941] ? panic+0x860/0x860 [ 634.458649][ T9941] ? __might_sleep+0xc0/0xc0 [ 634.463242][ T9941] should_fail+0x38a/0x4c0 [ 634.467757][ T9941] should_failslab+0x5/0x20 [ 634.472256][ T9941] slab_pre_alloc_hook+0x53/0xc0 [ 634.477199][ T9941] kmem_cache_alloc_node+0x49/0x2c0 [ 634.482395][ T9941] ? __alloc_skb+0xdd/0x590 [ 634.486902][ T9941] ? aa_sk_perm+0xa30/0xa30 [ 634.491404][ T9941] __alloc_skb+0xdd/0x590 [ 634.495737][ T9941] pfkey_sendmsg+0x17e/0xfc0 [ 634.500335][ T9941] ? __might_sleep+0xc0/0xc0 [ 634.504930][ T9941] ? pfkey_release+0x330/0x330 [ 634.509698][ T9941] ? aa_sk_perm+0x8fc/0xa30 [ 634.514201][ T9941] ? aa_af_perm+0x350/0x350 [ 634.518698][ T9941] ? validate_chain+0x112/0x5930 [ 634.523636][ T9941] ? aa_sock_msg_perm+0x91/0x150 [ 634.528571][ T9941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 634.533853][ T9941] ? security_socket_sendmsg+0x7d/0xa0 [ 634.539393][ T9941] ? pfkey_release+0x330/0x330 [ 634.544164][ T9941] ____sys_sendmsg+0x59e/0x8f0 [ 634.548928][ T9941] ? iovec_from_user+0x300/0x390 [ 634.553874][ T9941] ? __sys_sendmsg_sock+0x30/0x30 [ 634.558910][ T9941] ___sys_sendmsg+0x252/0x2e0 [ 634.563599][ T9941] ? __sys_sendmsg+0x260/0x260 [ 634.568404][ T9941] ? __fdget+0x191/0x220 [ 634.572671][ T9941] __se_sys_sendmsg+0x19a/0x260 [ 634.577529][ T9941] ? __x64_sys_sendmsg+0x80/0x80 [ 634.582476][ T9941] ? syscall_enter_from_user_mode+0x2e/0x240 [ 634.588454][ T9941] ? lockdep_hardirqs_on+0x94/0x130 [ 634.593651][ T9941] ? syscall_enter_from_user_mode+0x2e/0x240 [ 634.599632][ T9941] do_syscall_64+0x3b/0xb0 [ 634.604047][ T9941] ? clear_bhb_loop+0x15/0x70 [ 634.608723][ T9941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 634.614621][ T9941] RIP: 0033:0x7fc876c14ff9 [ 634.619046][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.638649][ T9941] RSP: 002b:00007fc87506c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.647064][ T9941] RAX: ffffffffffffffda RBX: 00007fc876dcd058 RCX: 00007fc876c14ff9 [ 634.655036][ T9941] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 634.663003][ T9941] RBP: 00007fc87506c090 R08: 0000000000000000 R09: 0000000000000000 [ 634.670971][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.678938][ T9941] R13: 0000000000000000 R14: 00007fc876dcd058 R15: 00007fffe9d02fb8 [ 634.686957][ T9941] [ 634.701734][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 634.707305][ T27] schedule+0x11b/0x1f0 [ 634.735464][ T27] schedule_preempt_disabled+0xf/0x20 [ 634.806308][ T27] rwsem_down_read_slowpath+0x605/0xb40 [ 634.814585][ T27] ? down_write_killable_nested+0x90/0x90 [ 634.820621][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 634.828800][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 634.836656][ T27] down_read+0x9a/0x2e0 [ 634.841184][ T27] iterate_supers+0xac/0x1e0 [ 634.849414][ T27] ? do_quotactl+0x6c0/0x6c0 [ 634.866140][ T27] __se_sys_quotactl+0x347/0x770 [ 634.888188][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 634.922601][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 634.936081][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 635.204462][ T27] ? vtime_user_exit+0x2d1/0x400 [ 635.209742][ T27] ? syscall_enter_from_user_mode+0xf0/0x240 [ 635.263784][ T27] do_syscall_64+0x3b/0xb0 [ 635.268836][ T27] ? clear_bhb_loop+0x15/0x70 [ 635.307993][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 635.336161][ T27] RIP: 0033:0x7f83d6af6ff9 [ 635.356284][ T27] RSP: 002b:00007f83d4f6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 635.425510][ T27] RAX: ffffffffffffffda RBX: 00007f83d6caef80 RCX: 00007f83d6af6ff9 [ 635.543657][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 635.611470][ T27] RBP: 00007f83d6b69296 R08: 0000000000000000 R09: 0000000000000000 [ 635.641014][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.670503][ T27] R13: 0000000000000000 R14: 00007f83d6caef80 R15: 00007ffcfac0faf8 [ 635.698971][ T27] [ 635.799442][ T27] [ 635.799442][ T27] Showing all locks held in the system: [ 635.889001][ T27] 1 lock held by khungtaskd/27: [ 635.944102][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 635.963789][ T27] 1 lock held by udevd/3028: [ 635.983954][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 636.016020][ T27] 2 locks held by getty/3334: [ 636.032739][ T27] #0: ffff88802a218098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 636.063790][ T27] #1: ffffc90002bab2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 636.095273][ T27] 1 lock held by syz-executor/3568: [ 636.112760][ T27] #0: ffff88805c9ee0e0 (&type->s_umount_key#65){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 636.149117][ T27] 1 lock held by syz-executor/3581: [ 636.165676][ T27] #0: ffff888076d800e0 (&type->s_umount_key#65){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 636.194464][ T27] 2 locks held by kworker/u4:6/3657: [ 636.211521][ T27] 2 locks held by kworker/u4:14/4214: [ 636.233812][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 636.281713][ T27] #1: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 636.291234][ T27] 1 lock held by syz.0.894/7687: [ 636.296295][ T27] #0: ffff88805c9ee0e0 (&type->s_umount_key#65){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 636.326885][ T27] 3 locks held by kworker/1:16/7752: [ 636.335721][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 636.356941][ T27] #1: ffffc90003d17d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 636.417296][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 636.438568][ T27] 2 locks held by kworker/1:20/8357: [ 636.448686][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 636.469489][ T27] #1: ffffc90004257d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 636.491317][ T27] 1 lock held by syz.1.1335/9949: [ 636.501444][ T27] #0: ffff888079440128 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x175/0x2d0 [ 636.521747][ T27] 1 lock held by syz.1.1335/9950: [ 636.526955][ T27] [ 636.529293][ T27] ============================================= [ 636.529293][ T27] [ 636.569266][ T27] NMI backtrace for cpu 1 [ 636.573663][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 636.581652][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.591718][ T27] Call Trace: [ 636.595009][ T27] [ 636.597947][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 636.602643][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 636.608288][ T27] ? panic+0x860/0x860 [ 636.612376][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 636.617507][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 636.622460][ T27] ? __wake_up_klogd+0xd5/0x100 [ 636.627337][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 636.633513][ T27] ? _printk+0xd1/0x120 [ 636.637696][ T27] ? panic+0x860/0x860 [ 636.641792][ T27] ? __wake_up_klogd+0xcc/0x100 [ 636.646661][ T27] ? panic+0x860/0x860 [ 636.650755][ T27] ? __rcu_read_unlock+0x92/0x100 [ 636.655802][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 636.661887][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 636.667896][ T27] watchdog+0xe72/0xeb0 [ 636.672088][ T27] kthread+0x3f6/0x4f0 [ 636.676178][ T27] ? hungtask_pm_notify+0x50/0x50 [ 636.681225][ T27] ? kthread_blkcg+0xd0/0xd0 [ 636.685838][ T27] ret_from_fork+0x1f/0x30 [ 636.690287][ T27] [ 636.694718][ T27] Sending NMI from CPU 1 to CPUs 0: [ 636.699967][ C0] NMI backtrace for cpu 0 [ 636.699980][ C0] CPU: 0 PID: 5899 Comm: kworker/u4:17 Not tainted 5.15.167-syzkaller #0 [ 636.699999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.700009][ C0] Workqueue: bat_events batadv_nc_worker [ 636.700039][ C0] RIP: 0010:lock_release+0x5c6/0x9a0 [ 636.700059][ C0] Code: 00 fc ff df 4c 8b 64 24 08 48 8b 5c 24 28 49 89 dd 4c 8d b4 24 90 00 00 00 48 c7 c7 a0 3d 8b 8a e8 0f 89 d1 08 b8 ff ff ff ff <65> 0f c1 05 c2 9f 9f 7e 83 f8 01 0f 85 94 00 00 00 4c 89 f3 48 c1 [ 636.700073][ C0] RSP: 0018:ffffc9000328fac0 EFLAGS: 00000082 [ 636.700086][ C0] RAX: 00000000ffffffff RBX: 0000000000000246 RCX: ffffc9000328fb03 [ 636.700098][ C0] RDX: 0000000000000002 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0 [ 636.700110][ C0] RBP: ffffc9000328fbe8 R08: dffffc0000000000 R09: fffffbfff1bd2c16 [ 636.700123][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000651f64 [ 636.700134][ C0] R13: 0000000000000246 R14: ffffc9000328fb50 R15: dffffc0000000000 [ 636.700146][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 636.700160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.700171][ C0] CR2: 000000110c3f6945 CR3: 0000000028d26000 CR4: 00000000003506f0 [ 636.700186][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.700195][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.700206][ C0] Call Trace: [ 636.700211][ C0] [ 636.700216][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 636.700236][ C0] ? read_lock_is_recursive+0x10/0x10 [ 636.700253][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 636.700279][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 636.700296][ C0] ? nmi_handle+0xf7/0x370 [ 636.700315][ C0] ? lock_release+0x5c6/0x9a0 [ 636.700329][ C0] ? default_do_nmi+0x62/0x150 [ 636.700348][ C0] ? exc_nmi+0xa8/0x100 [ 636.700364][ C0] ? end_repeat_nmi+0x16/0x31 [ 636.700384][ C0] ? lock_release+0x5c6/0x9a0 [ 636.700399][ C0] ? lock_release+0x5c6/0x9a0 [ 636.700415][ C0] ? lock_release+0x5c6/0x9a0 [ 636.700430][ C0] [ 636.700434][ C0] [ 636.700442][ C0] ? rcu_lock_release+0x5/0x20 [ 636.700459][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 636.700482][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 636.700502][ C0] batadv_nc_worker+0x239/0x5b0 [ 636.700523][ C0] process_one_work+0x8a1/0x10c0 [ 636.700548][ C0] ? worker_detach_from_pool+0x260/0x260 [ 636.700568][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 636.700586][ C0] ? kthread_data+0x4e/0xc0 [ 636.700602][ C0] ? wq_worker_running+0x97/0x170 [ 636.700619][ C0] worker_thread+0xaca/0x1280 [ 636.700637][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 636.700664][ C0] kthread+0x3f6/0x4f0 [ 636.700679][ C0] ? rcu_lock_release+0x20/0x20 [ 636.700696][ C0] ? kthread_blkcg+0xd0/0xd0 [ 636.700712][ C0] ret_from_fork+0x1f/0x30 [ 636.700736][ C0] [ 636.703727][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 636.995720][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 637.003708][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 637.013763][ T27] Call Trace: [ 637.017037][ T27] [ 637.019965][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 637.024674][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 637.030315][ T27] ? panic+0x860/0x860 [ 637.034412][ T27] panic+0x318/0x860 [ 637.038319][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 637.043971][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 637.050133][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 637.055463][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 637.061552][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 637.067721][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 637.073890][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 637.080045][ T27] watchdog+0xeb0/0xeb0 [ 637.084211][ T27] kthread+0x3f6/0x4f0 [ 637.088275][ T27] ? hungtask_pm_notify+0x50/0x50 [ 637.093296][ T27] ? kthread_blkcg+0xd0/0xd0 [ 637.097881][ T27] ret_from_fork+0x1f/0x30 [ 637.102304][ T27] [ 637.105638][ T27] Kernel Offset: disabled [ 637.117871][ T27] Rebooting in 86400 seconds..