last executing test programs: 17.694478461s ago: executing program 2 (id=835): openat$iommufd(0xffffffffffffff9c, 0x0, 0x58a02, 0x0) semop(0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x24000000, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETS(r1, 0x89f0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r2, 0x0, 0x1000004) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5bb3f10030450f88100000000010902120001000000000904"], 0x0) 13.580440514s ago: executing program 4 (id=841): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, 0x0, &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13.293690885s ago: executing program 3 (id=843): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, 0x0, &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13.29246371s ago: executing program 2 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 12.307017719s ago: executing program 2 (id=846): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0xcb4100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fadvise64(r0, 0x8000, 0x7, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) 12.191538394s ago: executing program 0 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3d1400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shmget$private(0x0, 0x1000, 0x200, &(0x7f000052a000/0x1000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000008c0)={0x0, 0x1, [0x8, 0x7, 0x9, 0xa, 0x10, 0x3039, 0x6, 0x7]}) 10.585361311s ago: executing program 0 (id=849): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) 10.584780336s ago: executing program 2 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = io_uring_setup(0xdac, &(0x7f0000000180)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0xffffdffc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}}, 0x0, 0x2a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) 8.456357419s ago: executing program 0 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x0, 0x401}, @window], 0x3) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) 8.320005101s ago: executing program 2 (id=852): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8e2440, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000008) 8.142881235s ago: executing program 1 (id=853): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0x2004000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 7.377335377s ago: executing program 0 (id=854): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000000)={0x0, 0x300}) 7.23207395s ago: executing program 1 (id=855): socket(0x10, 0x80002, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x2293, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.492802647s ago: executing program 4 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 6.456589283s ago: executing program 1 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 6.400133139s ago: executing program 3 (id=858): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8e2440, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000008) 5.867760119s ago: executing program 3 (id=859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000fbe600f47d81fdb2945b0000000000000080051d14730ca54890d7b6aa7c0da76ba9762c63b64e62ba7c4130da4af5bb3c9ab6a8d023a78fa3d233c3561f6a217e861defd2d6754f486bf4db0a6906f026b0196f3e805d57018113259f96c860b7b90624f94c3769d4143f732d5781a53624babf2fb6a0f6894d37debcbf9b24839bee8e6e15fa416880"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x60, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "08362f524f2c0dc05df05d0c5efb944545544103dc79c93fd86e7f5d4f8ca8a89c3b56dc01a8d661fe971af11a1fa78099b35133337a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x60}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.53781175s ago: executing program 4 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3d1400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shmget$private(0x0, 0x1000, 0x200, &(0x7f000052a000/0x1000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000008c0)={0x0, 0x1, [0x8, 0x7, 0x9, 0xa, 0x10, 0x3039, 0x6, 0x7]}) 5.210731394s ago: executing program 1 (id=861): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 4.709121771s ago: executing program 0 (id=862): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, 0x0, &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.600855768s ago: executing program 4 (id=863): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000600000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000460000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000240)=0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x12, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) 2.619635856s ago: executing program 4 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x0, 0x401}, @window], 0x3) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) 2.553462724s ago: executing program 3 (id=865): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0x2004000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 2.379821934s ago: executing program 1 (id=866): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fchdir(r2) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "e4e8d2377becf439000000000000000000080000c082803600"}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101080e, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x670, &(0x7f0000001580)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2QPQvYHd9WYXexEDdr13sbsNKLa7AbvhwEPKlmw9WI3i9OH7MVpR5J/n/Ekq/IO2eCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDHq7lu2VEjaG1tm9G8WhQ2xyzPWlvQ7Wzi9sR+JSf9T8WiLmezLn/3ePGl9H83dTV7d1XF9KWog7cuvf3gO/OF3vpjEvoiNG2Dz18ePHnY7e4+O0PsnKZu/k1S4QxBG34riMOgWd3wTRCHZn1tzb27WY9NPWj48U7c8ZvGi/xCJ4zMinfblNfXV41f2gm3Whu1asPvzbz/g4rrrpmfLGUHWlIp9jaDRiNobdiYdHEac998+vMswK82jdl73N1dnZRkGlQ+S1BlUlDFrVTK5UqlvHZv/d59150/NcNNOe4RnYqY+YcWXzGzO3kDr6iQ1v9/OFJDRbW0pW2ZoT+eaooUqjliea5X/9+964/tt7/+96r8ZelH+eIrsvX/Wvbu2qj6PyIXI2NXGLbEGTF/up+FvJXneqkDPdFDddXVrp7NoG0jc30mrZzDz4Z8tRQoVqhATVXtHJPPMVrXmtbk6gNtqq5YRnUFashXrB3F6si3nyhPkXxV1VGoSEYr8nRbRmWta12rMvJV0o5CbamlDdVU1X+TJNnTY7vfV8fkqF5QeUTAUn9QZUxLo+r/Lz7JPqd5/Xep/99U2edgKT+LjYsBvgSS/Pp/StdfTzYAAAAAAOB1cOxv3x37t/t3JCWqBw3ffdNpAQAAAACAGXKULOmqHNmvtOkdOVz/AwAAAADwdePYe+wcScv2S/3O8Z1QZ/klwNw5pAgAAAAAAF6RvfP/2qKU2EErrsuZ6vofAAAAAAB8Bfy+b4z9+d4Yu0nvz/oFSXF7yfnrv5cULTiH7e3vOfvVdEl1P4859Q2ATv2KczEfqNe+LEqy7zz/qpP3lg+CeTTu4Od7k8b6d6ITCSzO9TcwIgEn7XltPn+nT3UjW+VGPs78o4OC7JKsl+V60PBLXth4UFa1erHQ8bc7v376+DdSdLSde4+7u6UPP+4+srkcprMO99NGPxlIpzB8Zxzn8sKOt2DvuRi2xRdU73X5h1Zz2bH9ur3tn1N1v9Df0bgDcNznb3UzO2Y3l7PY5YOjEffT7S+m218u2UM2sPXRgnOcRfnklg87ECOyKNosbmUxt1ZuZS+9/NJ2Ck7x+3NSpXT6GAxkUenPYvK+cP5zal+MyyLfF6tpFn9LGxqRxeqkLArjjwgAvCl7x1XIDmJ+qu72ykPvpPaF6s7k6v7+YHV/8acksSvMSfP53ybG9lJUekZfcWwdWtSF9GX+ypAzupvXlaJGnNHdV6huaV9/OX4GUp72qSz+lyTJg7Lt948nqupn6Qqfjew3blTm0l1498X+L+0A+KmPdj/afVqprK6577nuvYoW7GbkL3Oi9gAATpn8jJ2JEc57upFF3Hj0r3ezqYGK9+2jrxSU9KE+VlePdKf3CIHrw1td7vsawp3sqlV9V63m0tsPbI0fjC3rzsirOltL+2IrR7EL6q0yWKmPY1df81EAAOB83ZxQh4fX/+JA/b+jlSxi5Yq9qDx53T1Yy08+IXhUbHly8u/Pem8AAPDN4EefO8ud3zlRFLQ/KK+vl6udTd9EofdTEwW1Dd8ErY4feZvV1oZv2lHYCb2wYdqRloKaH5t4q90Oo46ph5Fph3GwbZ/8bvJHv8d+s9rqBF7cbvjV2Dde2OpUvY6pBbFn2ls/bgTxph/ZleO27wX1wKt2grBl4nAr8vySMbHv9wUGNb/VCepBOtky7ShoVqMd87OwsdX0Tc2PvShod8KswV5fQaseRk3bbEnJ1A86BADg6+j5y4MnD7vd3WdjJg41OSafWBzSIGMEAQDwJXNcrqdYqfgaEwIAAAAAAAAAAAAAAAAAAAAAAKec5f6/qSYWht0sKB3N+dXFM7XjaNaJTTNRmHat3i0RB0/+Pib4wtGc3u7vjzk8tw3857ekt+wcZXPmZ9/XBbs3zu/A/XAv26MjY9KFQxctHR2L+dn/c0gnnv55xKIkSZLxqy8N7sPFcRs4ODEv6dniKxyCN3AyAnCu/h8AAP//u6U7Wg==") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 2.374735006s ago: executing program 2 (id=867): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, 0x0, &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.28057507s ago: executing program 3 (id=868): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 207.764034ms ago: executing program 4 (id=869): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = io_uring_setup(0xdac, &(0x7f0000000180)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0xffffdffc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x503000, 0x0) 49.923538ms ago: executing program 1 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 49.218217ms ago: executing program 3 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 0s ago: executing program 0 (id=872): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={0x0, 0x300}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 41.305499][ T6428] cgroup: Unknown subsys name 'net' [ 41.525725][ T6428] cgroup: Unknown subsys name 'cpuset' [ 41.529622][ T6428] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.820860][ T6428] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 44.340272][ T6443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.343820][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.347207][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.356980][ T6449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.359360][ T6448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.361740][ T6448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.362403][ T6451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.364987][ T6451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.367354][ T6448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.370514][ T6451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.371775][ T6448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.372762][ T6451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.374986][ T6455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.376797][ T6451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.378983][ T6455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.382152][ T6451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.382473][ T6455] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 44.384702][ T6451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.388143][ T6455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.396821][ T6009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.399199][ T6009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.401337][ T6009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.403933][ T6009] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.406031][ T6009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.408208][ T6009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.410214][ T6009] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.412686][ T6009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.415117][ T6009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.419909][ T6009] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.424311][ T6009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.634780][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 44.650661][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 44.696551][ T6445] chnl_net:caif_netlink_parms(): no params data found [ 44.746704][ T6447] chnl_net:caif_netlink_parms(): no params data found [ 44.750882][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.752820][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.754977][ T6440] bridge_slave_0: entered allmulticast mode [ 44.757076][ T6440] bridge_slave_0: entered promiscuous mode [ 44.762656][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.764704][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.767166][ T6440] bridge_slave_1: entered allmulticast mode [ 44.769100][ T6440] bridge_slave_1: entered promiscuous mode [ 44.804911][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.806771][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.808741][ T6450] bridge_slave_0: entered allmulticast mode [ 44.810826][ T6450] bridge_slave_0: entered promiscuous mode [ 44.843621][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.846791][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.848633][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.850863][ T6450] bridge_slave_1: entered allmulticast mode [ 44.852929][ T6450] bridge_slave_1: entered promiscuous mode [ 44.855167][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.856951][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.858891][ T6445] bridge_slave_0: entered allmulticast mode [ 44.860998][ T6445] bridge_slave_0: entered promiscuous mode [ 44.864726][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.866940][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.869188][ T6445] bridge_slave_1: entered allmulticast mode [ 44.871152][ T6445] bridge_slave_1: entered promiscuous mode [ 44.882424][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.921587][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.931791][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.949438][ T6440] team0: Port device team_slave_0 added [ 44.952268][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.955595][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 44.964660][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.971905][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.973903][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.975772][ T6447] bridge_slave_0: entered allmulticast mode [ 44.977833][ T6447] bridge_slave_0: entered promiscuous mode [ 44.980567][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.982277][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.984929][ T6447] bridge_slave_1: entered allmulticast mode [ 44.986913][ T6447] bridge_slave_1: entered promiscuous mode [ 44.989977][ T6440] team0: Port device team_slave_1 added [ 45.005265][ T6450] team0: Port device team_slave_0 added [ 45.029248][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.032364][ T6450] team0: Port device team_slave_1 added [ 45.035885][ T6445] team0: Port device team_slave_0 added [ 45.042927][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.045450][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.052425][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.057300][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.059077][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.065895][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.077369][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.080859][ T6445] team0: Port device team_slave_1 added [ 45.109796][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.111640][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.119227][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.122981][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.125316][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.132058][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.140251][ T6447] team0: Port device team_slave_0 added [ 45.142656][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.145460][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.152515][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.161708][ T6447] team0: Port device team_slave_1 added [ 45.164336][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.166124][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.172623][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.222208][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.224021][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.230100][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.249112][ T6450] hsr_slave_0: entered promiscuous mode [ 45.251136][ T6450] hsr_slave_1: entered promiscuous mode [ 45.255242][ T6440] hsr_slave_0: entered promiscuous mode [ 45.257053][ T6440] hsr_slave_1: entered promiscuous mode [ 45.258866][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.260931][ T6440] Cannot create hsr debugfs directory [ 45.262660][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.265005][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.266985][ T6439] bridge_slave_0: entered allmulticast mode [ 45.268972][ T6439] bridge_slave_0: entered promiscuous mode [ 45.271490][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.273239][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.280261][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.298079][ T6445] hsr_slave_0: entered promiscuous mode [ 45.300145][ T6445] hsr_slave_1: entered promiscuous mode [ 45.301854][ T6445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.303785][ T6445] Cannot create hsr debugfs directory [ 45.305675][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.307558][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.309406][ T6439] bridge_slave_1: entered allmulticast mode [ 45.311578][ T6439] bridge_slave_1: entered promiscuous mode [ 45.325852][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.332122][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.372032][ T6439] team0: Port device team_slave_0 added [ 45.389843][ T6447] hsr_slave_0: entered promiscuous mode [ 45.391846][ T6447] hsr_slave_1: entered promiscuous mode [ 45.394372][ T6447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.396324][ T6447] Cannot create hsr debugfs directory [ 45.406823][ T6439] team0: Port device team_slave_1 added [ 45.449411][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.451296][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.459049][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.485119][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.486911][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.494252][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.554690][ T6439] hsr_slave_0: entered promiscuous mode [ 45.556942][ T6439] hsr_slave_1: entered promiscuous mode [ 45.558711][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.560636][ T6439] Cannot create hsr debugfs directory [ 45.664528][ T6450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.674618][ T6450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.679335][ T6450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.689543][ T6450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.726901][ T6440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.739715][ T6440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.750644][ T6440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.759042][ T6440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.770516][ T6445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.774893][ T6445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.780203][ T6445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.784999][ T6445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.818517][ T6447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.825400][ T6447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.830394][ T6447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.835163][ T6447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.869300][ T6439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.884113][ T6439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.901197][ T6439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.905403][ T6439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.950175][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.995868][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.000269][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.015472][ T6445] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.019727][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.026570][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.028535][ T674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.032363][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.034421][ T674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.039252][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.041391][ T674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.056614][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.067002][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.071159][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.073253][ T674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.107312][ T252] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.109337][ T252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.116585][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.128126][ T6450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.137792][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.155419][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.157551][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.171928][ T6445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.174937][ T6445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.194881][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.199585][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.201451][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.224076][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.226041][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.228940][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.230823][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.282531][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.284765][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.337691][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.403163][ T6450] veth0_vlan: entered promiscuous mode [ 46.406267][ T6009] Bluetooth: hci4: command tx timeout [ 46.440797][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.449088][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.452040][ T6450] veth1_vlan: entered promiscuous mode [ 46.458927][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.484336][ T6009] Bluetooth: hci2: command tx timeout [ 46.484363][ T6443] Bluetooth: hci3: command tx timeout [ 46.485956][ T6009] Bluetooth: hci0: command tx timeout [ 46.487709][ T6443] Bluetooth: hci1: command tx timeout [ 46.497551][ T6450] veth0_macvtap: entered promiscuous mode [ 46.502524][ T6450] veth1_macvtap: entered promiscuous mode [ 46.514788][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.532892][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.540991][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.549127][ T6445] veth0_vlan: entered promiscuous mode [ 46.553118][ T6445] veth1_vlan: entered promiscuous mode [ 46.567596][ T6440] veth0_vlan: entered promiscuous mode [ 46.572460][ T6440] veth1_vlan: entered promiscuous mode [ 46.586040][ T6450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.589415][ T6450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.591739][ T6450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.594843][ T6450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.616320][ T6447] veth0_vlan: entered promiscuous mode [ 46.643037][ T6445] veth0_macvtap: entered promiscuous mode [ 46.657802][ T6447] veth1_vlan: entered promiscuous mode [ 46.669343][ T6445] veth1_macvtap: entered promiscuous mode [ 46.699203][ T6440] veth0_macvtap: entered promiscuous mode [ 46.703149][ T6440] veth1_macvtap: entered promiscuous mode [ 46.737301][ T6447] veth0_macvtap: entered promiscuous mode [ 46.739669][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.741840][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.748601][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.751374][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.755954][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.758335][ T6439] veth0_vlan: entered promiscuous mode [ 46.761238][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.765749][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.768860][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.778205][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.780846][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.785008][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.787684][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.791008][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.795000][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.797981][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.800449][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.803093][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.808615][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.817081][ T6447] veth1_macvtap: entered promiscuous mode [ 46.822983][ T6445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.827402][ T6445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.829687][ T6445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.831842][ T6445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.837068][ T6439] veth1_vlan: entered promiscuous mode [ 46.846853][ T6440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.849043][ T6440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.851119][ T6440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.853552][ T6440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.870632][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.874013][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.885410][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.888648][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.891246][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.895133][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.897618][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.900216][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.903327][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.921139][ T6439] veth0_macvtap: entered promiscuous mode [ 46.929528][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.932350][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.935077][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.937799][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.940376][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.943015][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.946990][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.971826][ T6439] veth1_macvtap: entered promiscuous mode [ 46.989914][ T6447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.992240][ T6447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.996162][ T6447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.998368][ T6447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.020541][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.022552][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.035840][ T6450] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.058184][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.066901][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.087521][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.090338][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.103823][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.106764][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.109318][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.112074][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.129137][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.132010][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.136017][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.160276][ T674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.165323][ T674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.169135][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.171145][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.174263][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.176905][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.179396][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.182205][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.198339][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.201074][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.206872][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.209656][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.212792][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.240104][ T6439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.242450][ T6439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.249646][ T6439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.252033][ T6439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.256790][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.258944][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.291518][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.294490][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.405622][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.407796][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.435182][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.451440][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.696902][ T6532] loop1: detected capacity change from 0 to 2048 [ 48.491039][ T6443] Bluetooth: hci4: command tx timeout [ 48.541694][ T6532] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 48.640266][ T6443] Bluetooth: hci0: command tx timeout [ 48.640298][ T53] Bluetooth: hci3: command tx timeout [ 48.642178][ T6443] Bluetooth: hci2: command tx timeout [ 48.643248][ T6009] Bluetooth: hci1: command tx timeout [ 48.691458][ T6532] loop1: detected capacity change from 0 to 256 [ 49.215302][ T6543] loop4: detected capacity change from 0 to 128 [ 49.262770][ T6532] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 49.287369][ T6525] loop3: detected capacity change from 0 to 40427 [ 49.460774][ T6525] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(24) [ 49.463276][ T6543] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.479669][ T6525] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.482495][ T6550] Bluetooth: MGMT ver 1.23 [ 50.397315][ T6525] F2FS-fs (loop3): Unrecognized mount option "whint_mode=off" or missing value [ 50.416606][ T6552] ipvlan2: entered allmulticast mode [ 50.418066][ T6552] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 50.422637][ T6552] batman_adv: batadv0: Adding interface: ipvlan2 [ 50.424687][ T6552] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.431712][ T6552] batman_adv: batadv0: Interface activated: ipvlan2 [ 50.613621][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 50.771581][ T6442] Bluetooth: hci2: command tx timeout [ 50.773036][ T6442] Bluetooth: hci3: command tx timeout [ 50.774428][ T6442] Bluetooth: hci1: command tx timeout [ 50.775687][ T6442] Bluetooth: hci0: command tx timeout [ 50.777199][ T6443] Bluetooth: hci4: command tx timeout [ 51.318589][ T6558] loop0: detected capacity change from 0 to 256 [ 51.320796][ T6558] vfat: Unknown parameter ' utf8' [ 51.578478][ T6564] loop0: detected capacity change from 0 to 2048 [ 51.901522][ T6568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.912158][ T6439] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.914246][ T6564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.884559][ T53] Bluetooth: hci4: command tx timeout [ 52.886063][ T53] Bluetooth: hci0: command tx timeout [ 52.887502][ T53] Bluetooth: hci1: command tx timeout [ 52.888866][ T53] Bluetooth: hci3: command tx timeout [ 52.890263][ T53] Bluetooth: hci2: command tx timeout [ 53.377487][ T6580] loop4: detected capacity change from 0 to 256 [ 53.388367][ T6580] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 53.467283][ T6583] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14'. [ 54.056898][ T6582] loop1: detected capacity change from 0 to 512 [ 54.147855][ T6582] EXT4-fs (loop1): bad s_want_extra_isize: 1824 [ 55.965970][ T6600] lo speed is unknown, defaulting to 1000 [ 55.967673][ T6600] lo speed is unknown, defaulting to 1000 [ 56.489971][ T6597] loop2: detected capacity change from 0 to 512 [ 56.490354][ T6600] lo speed is unknown, defaulting to 1000 [ 56.491985][ T6597] ======================================================= [ 56.491985][ T6597] WARNING: The mand mount option has been deprecated and [ 56.491985][ T6597] and is ignored by this kernel. Remove the mand [ 56.491985][ T6597] option from the mount to silence this warning. [ 56.491985][ T6597] ======================================================= [ 56.494900][ T6600] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.504859][ T6600] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 56.518523][ T6600] lo speed is unknown, defaulting to 1000 [ 56.520860][ T6600] lo speed is unknown, defaulting to 1000 [ 56.522905][ T6600] lo speed is unknown, defaulting to 1000 [ 56.524886][ T6600] lo speed is unknown, defaulting to 1000 [ 56.526685][ T6600] lo speed is unknown, defaulting to 1000 [ 56.744048][ T6597] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.210942][ T6597] EXT4-fs error (device loop2): __ext4_iget:4984: inode #11: block 1: comm syz.2.18: invalid block [ 58.218766][ T6597] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.18: couldn't read orphan inode 11 (err -117) [ 58.947001][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.891214][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.705738][ T6636] lo speed is unknown, defaulting to 1000 [ 61.741957][ T6649] loop4: detected capacity change from 0 to 1024 [ 62.761372][ T6649] hfsplus: request for non-existent node 3 in B*Tree [ 62.770140][ T6649] hfsplus: request for non-existent node 3 in B*Tree [ 63.121645][ T6661] loop2: detected capacity change from 0 to 1024 [ 63.124035][ T6661] EXT4-fs: Ignoring removed nobh option [ 63.125453][ T6661] EXT4-fs: Ignoring removed bh option [ 63.148033][ T6664] loop0: detected capacity change from 0 to 512 [ 63.190960][ T6664] EXT4-fs (loop0): bad s_want_extra_isize: 1824 [ 63.202466][ T6661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.432850][ T6669] loop3: detected capacity change from 0 to 512 [ 63.452725][ T6669] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.524447][ T6673] siw: device registration error -23 [ 64.308935][ T38] hfsplus: b-tree write err: -5, ino 3 [ 64.323831][ T6669] EXT4-fs error (device loop3): __ext4_iget:4984: inode #11: block 1: comm syz.3.33: invalid block [ 64.345016][ T6669] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.33: couldn't read orphan inode 11 (err -117) [ 64.351669][ T6669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.656095][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.658152][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.997240][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.742687][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.266455][ T6701] loop0: detected capacity change from 0 to 64 [ 67.740603][ T6704] loop4: detected capacity change from 0 to 512 [ 68.045006][ T6704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.082987][ T6704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.101702][ T6704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.38: bg 0: block 248: padding at end of block bitmap is not set [ 68.116761][ T6704] Quota error (device loop4): write_blk: dquota write failed [ 68.118953][ T6704] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.121624][ T6704] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.38: Failed to acquire dquot type 1 [ 68.152889][ T6704] EXT4-fs (loop4): 1 truncate cleaned up [ 68.169498][ T6704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.270427][ T6701] hfs: unable to locate alternate MDB [ 68.293537][ T6701] hfs: continuing without an alternate MDB [ 68.911457][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 69.266733][ T6715] lo speed is unknown, defaulting to 1000 [ 69.624051][ T8] cfg80211: failed to load regulatory.db [ 70.851084][ T6721] loop3: detected capacity change from 0 to 1024 [ 70.912248][ T6722] loop1: detected capacity change from 0 to 4096 [ 70.941951][ T6722] ntfs3(loop1): Primary boot: unsupported bytes per index 8192. [ 70.945330][ T6721] hfsplus: request for non-existent node 3 in B*Tree [ 70.947056][ T6721] hfsplus: request for non-existent node 3 in B*Tree [ 70.969307][ T6722] ntfs3(loop1): try to read out of volume at offset 0x1ffe00 [ 71.231881][ T6725] loop0: detected capacity change from 0 to 1024 [ 71.246332][ T6439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.928017][ T6610] hfsplus: b-tree write err: -5, ino 3 [ 72.999025][ T6736] hfsplus: keylen 65060 too large [ 73.000714][ T6736] hfsplus: xattr searching failed [ 73.005416][ T6736] hfsplus: keylen 65060 too large [ 73.007008][ T6736] hfsplus: xattr searching failed [ 73.009990][ T6736] hfsplus: keylen 65060 too large [ 73.011548][ T6736] hfsplus: xattr searching failed [ 73.013489][ T6736] hfsplus: keylen 65060 too large [ 73.015318][ T6736] hfsplus: xattr searching failed [ 75.026123][ T6743] loop2: detected capacity change from 0 to 128 [ 75.128781][ T6743] affs: No valid root block on device loop2 [ 75.190879][ T6743] tmpfs: Unknown parameter 'í^f' [ 76.169532][ T6758] 9pnet_fd: p9_fd_create_tcp (6758): problem connecting socket to 127.0.0.1 [ 77.311951][ T6770] loop4: detected capacity change from 0 to 1024 [ 77.415169][ T6775] loop3: detected capacity change from 0 to 2048 [ 77.417401][ T6775] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.546901][ T6770] hfsplus: request for non-existent node 3 in B*Tree [ 78.398420][ T6770] hfsplus: request for non-existent node 3 in B*Tree [ 78.577097][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 79.130673][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.310185][ T674] hfsplus: b-tree write err: -5, ino 3 [ 79.621755][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.60'. [ 79.624221][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 79.626542][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.60'. [ 79.628840][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.60'. [ 80.306026][ T6806] loop1: detected capacity change from 0 to 64 [ 80.327731][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.412542][ T6820] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 82.800019][ T6828] loop4: detected capacity change from 0 to 8 [ 82.844294][ T6828] SQUASHFS error: Unable to read inode 0x11f [ 83.196406][ T6829] loop2: detected capacity change from 0 to 512 [ 83.267872][ T6833] loop0: detected capacity change from 0 to 256 [ 83.298068][ T6833] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 83.340459][ T6820] loop3: detected capacity change from 0 to 2048 [ 83.358725][ T6820] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.360446][ T6820] EXT4-fs: Ignoring removed i_version option [ 83.402298][ T6820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.472226][ T6840] loop4: detected capacity change from 0 to 1024 [ 83.924188][ T6840] hfsplus: request for non-existent node 3 in B*Tree [ 83.942385][ T6840] hfsplus: request for non-existent node 3 in B*Tree [ 84.236885][ T548] hfsplus: b-tree write err: -5, ino 3 [ 84.250448][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.600077][ T6870] loop3: detected capacity change from 0 to 256 [ 87.221990][ T6884] loop0: detected capacity change from 0 to 512 [ 87.710810][ T6870] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 87.762021][ T6884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.908995][ T6884] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 90.166458][ T6899] loop2: detected capacity change from 0 to 1024 [ 90.168466][ T6897] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 90.190453][ T6899] hfsplus: request for non-existent node 3 in B*Tree [ 90.203702][ T10] IPVS: starting estimator thread 0... [ 90.205360][ T6899] hfsplus: request for non-existent node 3 in B*Tree [ 90.310473][ T6902] IPVS: using max 33 ests per chain, 79200 per kthread [ 90.361081][ T548] hfsplus: b-tree write err: -5, ino 3 [ 90.562674][ T6906] loop2: detected capacity change from 0 to 4096 [ 90.586554][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.776444][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.803202][ T6912] loop1: detected capacity change from 0 to 1024 [ 90.812905][ T6912] hfsplus: request for non-existent node 3 in B*Tree [ 90.817156][ T6912] hfsplus: request for non-existent node 3 in B*Tree [ 91.994371][ T674] hfsplus: b-tree write err: -5, ino 3 [ 92.820087][ T6930] lo speed is unknown, defaulting to 1000 [ 93.316411][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.268536][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.013945][ T6942] loop4: detected capacity change from 0 to 1024 [ 95.019043][ T10] usb 1-1: device descriptor read/64, error -71 [ 95.032455][ T6942] hfsplus: request for non-existent node 3 in B*Tree [ 95.036547][ T6945] loop2: detected capacity change from 0 to 2048 [ 95.049033][ T6942] hfsplus: request for non-existent node 3 in B*Tree [ 96.039342][ T6945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.104978][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.173949][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.176267][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.307037][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.309331][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.365948][ T6611] hfsplus: b-tree write err: -5, ino 3 [ 97.369100][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.350335][ T6972] loop2: detected capacity change from 0 to 1024 [ 98.379982][ T6443] Bluetooth: hci0: ACL packet too small [ 98.389031][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.404999][ T6972] hfsplus: request for non-existent node 3 in B*Tree [ 98.413926][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.416314][ T6972] hfsplus: request for non-existent node 3 in B*Tree [ 98.450092][ T6976] loop1: detected capacity change from 0 to 256 [ 98.564003][ T30] audit: type=1107 audit(98.540:2): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='Ï' [ 99.117014][ T6976] Zero length message leads to an empty skb [ 99.223735][ T38] hfsplus: b-tree write err: -5, ino 3 [ 101.584013][ T6998] Soft offlining pfn 0x134ee9 at process virtual address 0x202e0000 [ 101.588274][ T6998] Soft offlining pfn 0x134eea at process virtual address 0x202e1000 [ 101.590489][ T6998] Soft offlining pfn 0x134eeb at process virtual address 0x202e2000 [ 101.596673][ T6998] process 'syz.3.108' launched './file1' with NULL argv: empty string added [ 101.831188][ T6998] loop3: detected capacity change from 0 to 32768 [ 101.916957][ T6998] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.108 (6998) [ 102.366832][ T6998] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 102.369521][ T6998] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 102.371881][ T6998] BTRFS info (device loop3): using free-space-tree [ 102.534265][ T7006] loop2: detected capacity change from 0 to 1024 [ 103.033979][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.079384][ T7012] loop0: detected capacity change from 0 to 1024 [ 103.097683][ T7012] hfsplus: request for non-existent node 3 in B*Tree [ 103.107159][ T7012] hfsplus: request for non-existent node 3 in B*Tree [ 103.147904][ T6998] BTRFS info (device loop3): rebuilding free space tree [ 103.668193][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.761631][ T6612] hfsplus: b-tree write err: -5, ino 3 [ 105.650322][ T6450] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.810281][ T7047] loop1: detected capacity change from 0 to 1024 [ 105.838483][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.840884][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.848768][ T7047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.993558][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.995859][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.428455][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.110591][ T7081] loop2: detected capacity change from 0 to 8 [ 109.201670][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 109.251178][ T7086] loop4: detected capacity change from 0 to 1024 [ 109.466529][ T7086] hfsplus: request for non-existent node 3 in B*Tree [ 109.468323][ T7086] hfsplus: request for non-existent node 3 in B*Tree [ 109.836306][ T7098] lo speed is unknown, defaulting to 1000 [ 110.484554][ T30] audit: type=1326 audit(110.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.121" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b59a28 code=0x0 [ 112.623763][ T6609] hfsplus: b-tree write err: -5, ino 3 [ 112.891488][ T7131] loop2: detected capacity change from 0 to 256 [ 112.908013][ T7131] exFAT-fs (loop2): Invalid exboot-signature(sector = 5): 0x00060000 [ 112.943508][ T7131] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 112.946143][ T7131] exFAT-fs (loop2): invalid boot region [ 112.947479][ T7131] exFAT-fs (loop2): failed to recognize exfat type [ 113.178864][ T7139] vlan2: entered promiscuous mode [ 113.180403][ T7139] veth1_to_batadv: entered promiscuous mode [ 113.193148][ T7139] veth1_to_batadv: left promiscuous mode [ 113.645304][ T7138] xt_CT: No such helper "pptp" [ 113.760990][ T7131] loop2: detected capacity change from 0 to 256 [ 113.762927][ T7131] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 113.762927][ T7131] ŒÏÌ—' [ 115.280181][ T7150] loop3: detected capacity change from 0 to 1024 [ 115.333994][ T7150] hfsplus: request for non-existent node 3 in B*Tree [ 115.342510][ T7150] hfsplus: request for non-existent node 3 in B*Tree [ 115.426668][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 115.470473][ T7157] loop1: detected capacity change from 0 to 2048 [ 115.664783][ T44] hfsplus: b-tree write err: -5, ino 3 [ 116.731421][ T7167] loop3: detected capacity change from 0 to 1024 [ 116.751147][ T7167] hfsplus: request for non-existent node 3 in B*Tree [ 116.752890][ T7167] hfsplus: request for non-existent node 3 in B*Tree [ 117.036282][ T7172] 9pnet_virtio: no channels available for device syz [ 117.301572][ T7173] befs: (nbd1): No write support. Marking filesystem read-only [ 117.305347][ T7173] syz.1.141: attempt to access beyond end of device [ 117.305347][ T7173] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 117.308757][ T7173] befs: (nbd1): unable to read superblock [ 117.652651][ T7178] loop4: detected capacity change from 0 to 512 [ 117.747742][ T6612] hfsplus: b-tree write err: -5, ino 3 [ 117.763824][ T7178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.806266][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.142: corrupted inode contents [ 119.283502][ T7195] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.142: mark_inode_dirty error [ 120.182295][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.142: corrupted inode contents [ 120.416762][ T7195] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.142: mark_inode_dirty error [ 120.557183][ T7204] loop2: detected capacity change from 0 to 1024 [ 120.592070][ T7204] hfsplus: request for non-existent node 3 in B*Tree [ 120.598890][ T7204] hfsplus: request for non-existent node 3 in B*Tree [ 120.705901][ T6439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.375665][ T13] hfsplus: b-tree write err: -5, ino 3 [ 122.554308][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 124.596620][ T7252] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 125.270617][ T7255] loop4: detected capacity change from 0 to 2048 [ 125.434487][ T7255] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 125.436645][ T7255] System zones: 0-7 [ 125.444589][ T7255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.954244][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.956155][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.320077][ T7255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.325096][ T7255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 126.328469][ T7255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.328469][ T7255] [ 126.331006][ T7255] EXT4-fs (loop4): Total free blocks count 0 [ 126.332470][ T7255] EXT4-fs (loop4): Free/Dirty block details [ 126.334064][ T7255] EXT4-fs (loop4): free_blocks=2415919104 [ 126.335594][ T7255] EXT4-fs (loop4): dirty_blocks=16 [ 126.336923][ T7255] EXT4-fs (loop4): Block reservation details [ 126.338432][ T7255] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 126.346092][ T7255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.742449][ T7274] loop1: detected capacity change from 0 to 512 [ 127.744754][ T7274] vfat: Unknown parameter 'vfat' [ 128.142486][ T7279] loop0: detected capacity change from 0 to 2048 [ 128.152001][ T7279] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 128.173462][ T7279] UDF-fs: Scanning with blocksize 512 failed [ 128.575682][ T6443] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 128.578326][ T6443] Bluetooth: hci3: Injecting HCI hardware error event [ 128.582992][ T6443] Bluetooth: hci3: hardware error 0x00 [ 128.869469][ T7279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.944625][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.171'. [ 130.046761][ T7295] loop2: detected capacity change from 0 to 512 [ 130.065401][ T7295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.069107][ T7295] EXT4-fs (loop2): can't mount with both data=journal and dax [ 130.077886][ T7295] loop2: detected capacity change from 0 to 128 [ 130.088397][ T7295] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.104425][ T7295] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x0f) [ 130.113949][ T7300] loop1: detected capacity change from 0 to 512 [ 130.142873][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.148075][ T7299] loop0: detected capacity change from 0 to 512 [ 130.150231][ T7299] EXT4-fs: Ignoring removed orlov option [ 130.153664][ T7299] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.196053][ T7299] EXT4-fs (loop0): 1 orphan inode deleted [ 130.197604][ T7299] EXT4-fs (loop0): 1 truncate cleaned up [ 130.199500][ T7299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.266002][ T6445] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.966858][ T6443] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 131.079750][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.119684][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.797568][ T252] Bluetooth: Error in BCSP hdr checksum [ 132.130385][ T7321] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 132.572866][ T7324] loop0: detected capacity change from 0 to 512 [ 132.578851][ T7324] EXT4-fs: Ignoring removed oldalloc option [ 133.044445][ T7324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.113922][ T7324] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 133.117579][ T7324] EXT4-fs (loop0): 1 truncate cleaned up [ 133.119426][ T7324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.319468][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.523574][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 133.526613][ T6443] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.642871][ T7332] loop1: detected capacity change from 0 to 256 [ 133.687889][ T7332] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 133.880378][ T7332] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 133.883577][ T7332] exFAT-fs (loop1): error, failed to bmap (inode : 00000000e2300487 iblock : 8, err : -5) [ 133.894536][ T7332] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 133.897077][ T7332] exFAT-fs (loop1): write: fail to zero from 10 to 65228(-5) [ 134.366955][ T7335] loop2: detected capacity change from 0 to 512 [ 134.464409][ T7335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.680454][ T7335] EXT4-fs (loop2): 1 truncate cleaned up [ 134.696990][ T7335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.190247][ T7343] loop0: detected capacity change from 0 to 256 [ 135.241676][ T7343] exFAT-fs (loop0): Invalid exboot-signature(sector = 5): 0x00060000 [ 135.279577][ T7343] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 135.282312][ T7343] exFAT-fs (loop0): invalid boot region [ 135.291072][ T7343] exFAT-fs (loop0): failed to recognize exfat type [ 135.307628][ T7343] loop0: detected capacity change from 0 to 256 [ 135.310707][ T7343] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 135.310707][ T7343] ŒÏÌ—' [ 136.448391][ T6443] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 136.448453][ T6443] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 136.450960][ T6443] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 136.452886][ T6443] Bluetooth: hci2: Malformed LE Event: 0x02 [ 137.256917][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 138.304788][ T6445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.508239][ T7367] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 138.511279][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 139.333501][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 139.571791][ T7366] loop2: detected capacity change from 0 to 4096 [ 139.593826][ T7366] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 139.793851][ T7373] loop4: detected capacity change from 0 to 4096 [ 140.079122][ T7373] NILFS (loop4): invalid segment: Checksum error in segment payload [ 140.081606][ T7373] NILFS (loop4): trying rollback from an earlier position [ 140.284625][ T7373] NILFS (loop4): recovery complete [ 140.298810][ T7375] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.581556][ T7377] loop0: detected capacity change from 0 to 164 [ 140.792257][ T7377] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.844062][ T7390] syz.4.198: attempt to access beyond end of device [ 142.844062][ T7390] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.467463][ T7396] loop2: detected capacity change from 0 to 128 [ 143.519132][ T7396] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.561224][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'. [ 143.696205][ T7401] loop0: detected capacity change from 0 to 1024 [ 145.597556][ T4338] hfsplus: b-tree write err: -5, ino 4 [ 145.610261][ T6445] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.659567][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 145.990857][ T7421] loop1: detected capacity change from 0 to 512 [ 145.997549][ T7421] EXT4-fs (loop1): bad s_want_extra_isize: 1824 [ 146.290645][ T7424] lo speed is unknown, defaulting to 1000 [ 146.292476][ T7424] lo speed is unknown, defaulting to 1000 [ 146.297568][ T7424] lo speed is unknown, defaulting to 1000 [ 146.322772][ T7424] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 146.445530][ T7424] lo speed is unknown, defaulting to 1000 [ 146.452870][ T7424] lo speed is unknown, defaulting to 1000 [ 146.459702][ T7424] lo speed is unknown, defaulting to 1000 [ 146.467554][ T7424] lo speed is unknown, defaulting to 1000 [ 146.474174][ T7424] lo speed is unknown, defaulting to 1000 [ 146.895294][ T7427] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 147.003824][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 148.147486][ T7447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.442114][ T7455] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 149.446158][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 150.759737][ T7470] loop2: detected capacity change from 0 to 1024 [ 150.792817][ T7470] hfsplus: request for non-existent node 3 in B*Tree [ 150.800104][ T7470] hfsplus: request for non-existent node 3 in B*Tree [ 150.846863][ T7472] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 150.854634][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 150.882266][ T7470] hfsplus: catalog searching failed [ 152.048675][ T7489] loop0: detected capacity change from 0 to 256 [ 152.456859][ T7488] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 152.459422][ T7488] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 152.482725][ T7495] loop2: detected capacity change from 0 to 512 [ 152.688479][ T7495] EXT4-fs (loop2): bad s_want_extra_isize: 1824 [ 153.213614][ T7507] siw: device registration error -23 [ 154.244364][ T7511] loop1: detected capacity change from 0 to 16 [ 154.400546][ T7512] lo speed is unknown, defaulting to 1000 [ 154.912833][ T7511] erofs (device loop1): mounted with root inode @ nid 36. [ 155.030396][ T7508] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 155.651348][ T7508] erofs (device loop1): failed to decompress -3 in[47, 4049] out[1851] [ 155.653767][ T7508] erofs (device loop1): read error -117 @ 43 of nid 36 [ 156.419202][ T7525] loop2: detected capacity change from 0 to 1024 [ 156.490258][ T7525] hfsplus: request for non-existent node 3 in B*Tree [ 156.492071][ T7525] hfsplus: request for non-existent node 3 in B*Tree [ 156.542725][ T7525] hfsplus: catalog searching failed [ 157.646477][ T7536] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.762494][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 159.695775][ T7558] loop4: detected capacity change from 0 to 1764 [ 159.706002][ T7553] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 159.712165][ T7553] CIFS mount error: No usable UNC path provided in device string! [ 159.712165][ T7553] [ 159.715577][ T7553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.725222][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 161.020628][ T7573] loop0: detected capacity change from 0 to 256 [ 161.038189][ T7573] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 161.455940][ T7576] block device autoloading is deprecated and will be removed. [ 161.459708][ T7576] syz.3.239: attempt to access beyond end of device [ 161.459708][ T7576] loop34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.812602][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 163.082455][ T7583] loop3: detected capacity change from 0 to 1024 [ 163.105407][ T7583] hfsplus: request for non-existent node 3 in B*Tree [ 163.107470][ T7583] hfsplus: request for non-existent node 3 in B*Tree [ 163.426640][ T548] hfsplus: b-tree write err: -5, ino 3 [ 164.532708][ T7593] loop1: detected capacity change from 0 to 1024 [ 165.110319][ T7593] hfsplus: request for non-existent node 3 in B*Tree [ 165.118644][ T7593] hfsplus: request for non-existent node 3 in B*Tree [ 165.983295][ T7606] loop4: detected capacity change from 0 to 1024 [ 166.027204][ T7606] hfsplus: request for non-existent node 3 in B*Tree [ 166.029008][ T7606] hfsplus: request for non-existent node 3 in B*Tree [ 166.130401][ T11] hfsplus: b-tree write err: -5, ino 3 [ 166.169142][ T674] hfsplus: b-tree write err: -5, ino 3 [ 167.506660][ T7626] lo: entered allmulticast mode [ 167.848641][ T6449] Bluetooth: hci1: unexpected event for opcode 0x202d [ 167.857133][ T7615] lo: left allmulticast mode [ 168.966706][ T6449] Bluetooth: hci2: command 0x0406 tx timeout [ 168.968368][ T6449] Bluetooth: hci4: command 0x0405 tx timeout [ 168.970113][ T6449] Bluetooth: hci0: command 0x0406 tx timeout [ 170.675503][ T7648] loop2: detected capacity change from 0 to 128 [ 171.706306][ T7664] loop3: detected capacity change from 0 to 1024 [ 171.741840][ T7664] hfsplus: request for non-existent node 3 in B*Tree [ 171.750576][ T7664] hfsplus: request for non-existent node 3 in B*Tree [ 171.756137][ T7666] loop1: detected capacity change from 0 to 2048 [ 171.786638][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.991811][ T7232] hfsplus: b-tree write err: -5, ino 3 [ 172.187748][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 172.995008][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.530347][ T7683] loop0: detected capacity change from 0 to 64 [ 173.814522][ T7685] loop1: detected capacity change from 0 to 128 [ 173.983713][ T7685] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 176.161021][ T6440] sysv_free_block: flc_count > flc_size [ 176.165509][ T6440] sysv_free_block: flc_count > flc_size [ 176.167758][ T6440] sysv_free_block: flc_count > flc_size [ 176.169362][ T6440] sysv_free_block: flc_count > flc_size [ 176.171054][ T6440] sysv_free_block: flc_count > flc_size [ 176.172511][ T6440] sysv_free_block: flc_count > flc_size [ 176.176301][ T6440] sysv_free_block: flc_count > flc_size [ 176.178565][ T6440] sysv_free_block: flc_count > flc_size [ 176.180096][ T6440] sysv_free_block: flc_count > flc_size [ 176.181746][ T6440] sysv_free_block: flc_count > flc_size [ 176.970777][ T6440] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.099753][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.278959][ T7711] ceph: No mds server is up or the cluster is laggy [ 177.744921][ T7715] loop4: detected capacity change from 0 to 1024 [ 177.767349][ T7715] hfsplus: request for non-existent node 3 in B*Tree [ 177.769081][ T7715] hfsplus: request for non-existent node 3 in B*Tree [ 177.786740][ T10] usb 1-1: device descriptor read/64, error -71 [ 177.891012][ T27] libceph: connect (1)[c::]:6789 error -101 [ 177.893137][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 177.929989][ T6609] hfsplus: b-tree write err: -5, ino 3 [ 178.492311][ T7727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.596041][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.851943][ T7735] loop4: detected capacity change from 0 to 24 [ 178.865741][ T7735] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 179.543421][ T7735] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 180.445207][ T7740] loop0: detected capacity change from 0 to 512 [ 180.447343][ T7740] ext4: Bad value for 'mb_optimize_scan' [ 182.724733][ T7749] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 182.749292][ T7749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.770963][ T7749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.865455][ T7767] loop4: detected capacity change from 0 to 1024 [ 183.874395][ T7774] loop0: detected capacity change from 0 to 1024 [ 183.899932][ T7775] loop1: detected capacity change from 0 to 2048 [ 184.864099][ T7767] hfsplus: request for non-existent node 3 in B*Tree [ 184.873238][ T7767] hfsplus: request for non-existent node 3 in B*Tree [ 185.049255][ T7775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.415307][ T7774] EXT4-fs: Ignoring removed orlov option [ 186.716960][ T7774] EXT4-fs (loop0): Test dummy encryption mode enabled [ 186.719198][ T7793] capability: warning: `syz.2.296' uses 32-bit capabilities (legacy support in use) [ 186.748815][ T674] hfsplus: b-tree write err: -5, ino 3 [ 186.761014][ T7774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.917517][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.940609][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.333455][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 187.365466][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367373][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.883865][ T7815] loop0: detected capacity change from 0 to 1764 [ 188.863214][ T7817] sp0: Synchronizing with TNC [ 189.530213][ T7812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.005286][ T7823] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 191.685294][ T7840] loop3: detected capacity change from 0 to 1024 [ 191.694067][ T7840] hfsplus: request for non-existent node 3 in B*Tree [ 191.695761][ T7840] hfsplus: request for non-existent node 3 in B*Tree [ 191.896223][ T7842] loop4: detected capacity change from 0 to 40427 [ 192.123497][ T7842] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 192.125507][ T7842] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.282521][ T7842] F2FS-fs (loop4): invalid crc value [ 192.315765][ T7842] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.619679][ T7842] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 192.621896][ T7842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.046872][ T7859] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 193.073312][ T7859] team0: Device ipvlan1 failed to register rx_handler [ 193.833047][ T7854] loop1: detected capacity change from 0 to 128 [ 193.873530][ T7854] FAT-fs (loop1): bogus number of reserved sectors [ 193.875682][ T7854] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 193.878057][ T7854] FAT-fs (loop1): Can't find a valid FAT filesystem [ 194.922338][ T4338] hfsplus: b-tree write err: -5, ino 3 [ 196.315037][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.317717][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.260122][ T7896] loop4: detected capacity change from 0 to 4096 [ 197.281945][ T7896] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 197.547962][ T7906] loop1: detected capacity change from 0 to 164 [ 197.719116][ T7906] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.927793][ T7909] loop0: detected capacity change from 0 to 512 [ 198.350710][ T7907] loop0: detected capacity change from 0 to 64 [ 198.352897][ T7907] minix: Unknown parameter './file0' [ 199.883777][ T7919] loop4: detected capacity change from 0 to 1024 [ 200.673498][ T6442] Bluetooth: hci0: command 0x0406 tx timeout [ 200.733678][ T53] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 200.741933][ T7928] loop0: detected capacity change from 0 to 256 [ 200.890096][ T7919] hfsplus: request for non-existent node 3 in B*Tree [ 201.061782][ T7919] hfsplus: request for non-existent node 3 in B*Tree [ 201.244130][ T7932] tipc: Started in network mode [ 201.245768][ T7932] tipc: Node identity ac1414aa, cluster identity 4711 [ 201.248188][ T7932] tipc: Enabled bearer , priority 10 [ 201.894342][ T6575] IPVS: starting estimator thread 0... [ 202.053538][ T7936] IPVS: using max 33 ests per chain, 79200 per kthread [ 202.270697][ T13] hfsplus: b-tree write err: -5, ino 3 [ 202.365405][ T6430] tipc: Node number set to 2886997162 [ 203.111100][ T6009] Bluetooth: hci0: command 0x0406 tx timeout [ 203.531901][ T7950] loop0: detected capacity change from 0 to 4096 [ 203.610003][ T7950] ntfs3(loop0): Failed to load $AttrDef (-22) [ 203.659929][ T7952] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.689229][ T7950] loop0: detected capacity change from 0 to 2048 [ 203.728034][ T7950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.955881][ T7960] loop3: detected capacity change from 0 to 512 [ 204.928697][ T7960] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.332: invalid indirect mapped block 4294967295 (level 1) [ 205.061053][ T7960] EXT4-fs (loop3): Remounting filesystem read-only [ 205.063030][ T7960] EXT4-fs (loop3): 2 truncates cleaned up [ 205.074497][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.085133][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.569517][ T7975] loop1: detected capacity change from 0 to 256 [ 205.586464][ T7975] exFAT-fs (loop1): Invalid exboot-signature(sector = 5): 0x00060000 [ 205.623696][ T7975] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 205.626298][ T7975] exFAT-fs (loop1): invalid boot region [ 205.644551][ T7975] exFAT-fs (loop1): failed to recognize exfat type [ 205.657853][ T7979] loop0: detected capacity change from 0 to 512 [ 205.678087][ T7975] loop1: detected capacity change from 0 to 256 [ 205.680253][ T7975] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 205.680253][ T7975] ŒÏÌ—' [ 205.909192][ T7982] bridge0: port 3(syz_tun) entered blocking state [ 205.911226][ T7982] bridge0: port 3(syz_tun) entered disabled state [ 205.913212][ T7982] syz_tun: entered allmulticast mode [ 205.916796][ T7982] syz_tun: entered promiscuous mode [ 205.919285][ T7982] bridge0: port 3(syz_tun) entered blocking state [ 205.921076][ T7982] bridge0: port 3(syz_tun) entered forwarding state [ 206.680786][ T7979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.688945][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.118334][ T7996] loop4: detected capacity change from 0 to 1024 [ 208.160133][ T7996] hfsplus: request for non-existent node 3 in B*Tree [ 208.162278][ T7992] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 208.541816][ T7996] hfsplus: request for non-existent node 3 in B*Tree [ 208.751342][ T7996] hfsplus: catalog searching failed [ 208.772782][ T6447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.617617][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.621188][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.047208][ T8015] loop0: detected capacity change from 0 to 4096 [ 210.051220][ T8015] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 212.704757][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.707223][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.093903][ T8050] loop1: detected capacity change from 0 to 1024 [ 215.105960][ T8050] hfsplus: request for non-existent node 3 in B*Tree [ 215.110108][ T8050] hfsplus: request for non-existent node 3 in B*Tree [ 215.904398][ T8050] hfsplus: catalog searching failed [ 216.988259][ T8071] loop1: detected capacity change from 0 to 1024 [ 218.344320][ T8077] tipc: Started in network mode [ 218.345797][ T8077] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 218.350040][ T8077] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 218.353533][ T8077] tipc: Enabled bearer , priority 10 [ 218.827406][ T6609] hfsplus: b-tree write err: -5, ino 4 [ 219.848858][ T8087] loop1: detected capacity change from 0 to 256 [ 219.908395][ T8087] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 219.911116][ T8087] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 219.921694][ T8087] exFAT-fs (loop1): invalid boot region [ 219.923057][ T8087] exFAT-fs (loop1): failed to recognize exfat type [ 219.954164][ T27] tipc: Node number set to 1 [ 220.402646][ T8096] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.755959][ T8098] loop4: detected capacity change from 0 to 256 [ 220.772743][ T8098] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x00060000 [ 220.791047][ T8098] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 220.936615][ T8098] exFAT-fs (loop4): invalid boot region [ 220.940270][ T8098] exFAT-fs (loop4): failed to recognize exfat type [ 221.002202][ T8098] loop4: detected capacity change from 0 to 256 [ 221.582902][ T8098] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 221.582902][ T8098] ŒÏÌ—' [ 223.228658][ T8121] loop4: detected capacity change from 0 to 256 [ 223.239866][ T8121] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x00060000 [ 223.260863][ T8121] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 223.267329][ T8121] exFAT-fs (loop4): invalid boot region [ 223.439080][ T8125] lo speed is unknown, defaulting to 1000 [ 224.216552][ T8121] exFAT-fs (loop4): failed to recognize exfat type [ 224.249201][ T8121] loop4: detected capacity change from 0 to 256 [ 224.251153][ T8121] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 224.251153][ T8121] ŒÏÌ—' [ 227.175640][ T8157] loop3: detected capacity change from 0 to 164 [ 227.418866][ T8159] loop4: detected capacity change from 0 to 164 [ 227.495743][ T8159] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 227.858700][ T8152] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 230.660072][ T6009] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 230.737783][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 232.843906][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 232.864751][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.870251][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.259034][ T8203] loop1: detected capacity change from 0 to 32768 [ 233.261383][ T8203] ocfs2: Unknown parameter '' [ 234.253667][ T8210] lo speed is unknown, defaulting to 1000 [ 236.700862][ T8230] loop1: detected capacity change from 0 to 256 [ 236.741879][ T8230] exFAT-fs (loop1): Invalid exboot-signature(sector = 5): 0x00060000 [ 236.879847][ T6009] Bluetooth: hci2: command 0x0406 tx timeout [ 236.923788][ T8230] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 236.926523][ T8230] exFAT-fs (loop1): invalid boot region [ 236.927941][ T8230] exFAT-fs (loop1): failed to recognize exfat type [ 236.984345][ T8230] loop1: detected capacity change from 0 to 256 [ 236.998235][ T8230] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 236.998235][ T8230] ŒÏÌ—' [ 239.843151][ T8257] loop4: detected capacity change from 0 to 256 [ 241.407813][ T8285] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 241.410427][ T8285] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 245.778739][ T8339] tmpfs: Bad value for 'mpol' [ 245.788936][ T8340] loop3: detected capacity change from 0 to 1024 [ 245.863505][ T8340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.371493][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.174107][ T8355] loop3: detected capacity change from 0 to 1024 [ 247.273664][ T8355] hfsplus: request for non-existent node 3 in B*Tree [ 247.275417][ T8355] hfsplus: request for non-existent node 3 in B*Tree [ 247.330546][ T8355] hfsplus: catalog searching failed [ 248.804223][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.806042][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.363478][ T6009] Bluetooth: hci0: command 0x0406 tx timeout [ 258.015823][ T8485] loop1: detected capacity change from 0 to 256 [ 258.017061][ T8484] loop4: detected capacity change from 0 to 1024 [ 258.017973][ T8485] exfat: Deprecated parameter 'namecase' [ 258.037990][ T8485] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x364566b4, utbl_chksum : 0xe619d30d) [ 258.054091][ T8484] hfsplus: request for non-existent node 3 in B*Tree [ 258.063402][ T8484] hfsplus: request for non-existent node 3 in B*Tree [ 258.104981][ T8484] hfsplus: catalog searching failed [ 259.845578][ T8511] lo speed is unknown, defaulting to 1000 [ 262.254758][ T8534] loop3: detected capacity change from 0 to 256 [ 262.291429][ T8534] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x00060000 [ 262.295022][ T8534] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 262.297540][ T8534] exFAT-fs (loop3): invalid boot region [ 262.310920][ T8534] exFAT-fs (loop3): failed to recognize exfat type [ 262.417710][ T8534] loop3: detected capacity change from 0 to 256 [ 262.429742][ T8534] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 262.429742][ T8534] ŒÏÌ—' [ 262.723572][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 263.495626][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'. [ 263.870366][ T8566] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 264.221967][ T8571] loop3: detected capacity change from 0 to 1024 [ 264.327122][ T8571] hfsplus: request for non-existent node 3 in B*Tree [ 264.336103][ T8571] hfsplus: request for non-existent node 3 in B*Tree [ 265.057994][ T13] hfsplus: b-tree write err: -5, ino 3 [ 266.106129][ T8591] loop4: detected capacity change from 0 to 256 [ 266.118436][ T8591] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x00060000 [ 266.121511][ T8591] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119ac7e) [ 266.124913][ T8591] exFAT-fs (loop4): invalid boot region [ 266.126469][ T8591] exFAT-fs (loop4): failed to recognize exfat type [ 266.192559][ T8591] loop4: detected capacity change from 0 to 256 [ 266.216744][ T8591] exfat: Unknown parameter '0177777777777777777777701777777777777777777777úßù¢† ¼ [ 266.216744][ T8591] ŒÏÌ—' [ 267.463647][ T8610] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 267.723809][ T8617] loop3: detected capacity change from 0 to 1024 [ 267.738076][ T8617] hfsplus: request for non-existent node 3 in B*Tree [ 267.741110][ T8617] hfsplus: request for non-existent node 3 in B*Tree [ 267.822578][ T548] hfsplus: b-tree write err: -5, ino 3 [ 268.320756][ T8625] loop3: detected capacity change from 0 to 512 [ 268.384744][ T8625] FAT-fs (loop3): bogus number of FAT sectors [ 268.386436][ T8625] FAT-fs (loop3): Can't find a valid FAT filesystem [ 270.599760][ T8648] loop4: detected capacity change from 0 to 1024 [ 270.739622][ T8648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.916928][ T8648] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.4.501: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.614900][ T8657] loop1: detected capacity change from 0 to 256 [ 271.876140][ T8655] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 271.924091][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 272.044705][ T6439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.862904][ T8672] loop4: detected capacity change from 0 to 1024 [ 272.923884][ T8672] hfsplus: request for non-existent node 3 in B*Tree [ 272.925768][ T8672] hfsplus: request for non-existent node 3 in B*Tree [ 272.998833][ T8677] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 273.111128][ T6611] hfsplus: b-tree write err: -5, ino 3 [ 275.146100][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 275.949483][ T8707] loop1: detected capacity change from 0 to 1024 [ 276.129860][ T8707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.762695][ T8718] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 276.772635][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 276.773196][ T8707] Injecting memory failure for pfn 0x13ad6c at process virtual address 0x2036c000 [ 276.778220][ T8707] Memory failure: 0x13ad6c: recovery action for unsplit thp: Failed [ 278.030902][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.320100][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 280.244695][ T8751] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.922984][ T8763] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 282.352453][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 282.839827][ T8772] xfrm0: entered allmulticast mode [ 282.919897][ T8769] loop1: detected capacity change from 0 to 1024 [ 283.234119][ T8769] hfsplus: request for non-existent node 3 in B*Tree [ 283.236140][ T8769] hfsplus: request for non-existent node 3 in B*Tree [ 284.535590][ T4338] hfsplus: b-tree write err: -5, ino 3 [ 289.776096][ T8836] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 289.780710][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 289.839969][ T8840] loop3: detected capacity change from 0 to 1024 [ 289.975823][ T8840] hfsplus: request for non-existent node 3 in B*Tree [ 289.977965][ T8840] hfsplus: request for non-existent node 3 in B*Tree [ 291.537372][ T7233] hfsplus: b-tree write err: -5, ino 3 [ 294.574145][ T8886] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 294.705701][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 297.124112][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 298.728497][ T8925] loop1: detected capacity change from 0 to 164 [ 301.572445][ T8944] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 301.584291][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 304.612641][ T6009] Bluetooth: hci2: command 0x0406 tx timeout [ 305.030570][ T8975] loop4: detected capacity change from 0 to 164 [ 306.779326][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 307.162568][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 308.278049][ T9010] loop4: detected capacity change from 0 to 16 [ 308.632879][ T9010] erofs (device loop4): mounted with root inode @ nid 36. [ 309.984094][ T9023] syz.4.593: attempt to access beyond end of device [ 309.984094][ T9023] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 310.153522][ T9023] syz.4.593: attempt to access beyond end of device [ 310.153522][ T9023] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 310.699212][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 310.701203][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.702997][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.792669][ T9021] syz.4.593: attempt to access beyond end of device [ 310.792669][ T9021] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 311.223598][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 311.271580][ T9029] loop4: detected capacity change from 0 to 1024 [ 311.349652][ T9029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.743500][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 313.161717][ T6439] UDF-fs: warning (device loop4): udf_evict_inode: Inode 839 (mode 100755) has inode size 47557 different from extent length 47616. Filesystem need not be standards compliant. [ 313.204358][ T9044] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 316.135370][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 316.554387][ T9082] Soft offlining pfn 0x13dd79 at process virtual address 0x202e0000 [ 316.565023][ T9082] Soft offlining pfn 0x13dd7a at process virtual address 0x202e1000 [ 316.568104][ T9082] Soft offlining pfn 0x13dd7b at process virtual address 0x202e2000 [ 317.654393][ T9090] loop4: detected capacity change from 0 to 164 [ 318.165070][ T6009] Bluetooth: hci0: command 0x0406 tx timeout [ 318.278114][ T9097] loop4: detected capacity change from 0 to 512 [ 318.296245][ T9097] EXT4-fs: Ignoring removed orlov option [ 318.342030][ T9097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.959636][ T6439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.869618][ T6009] Bluetooth: hci2: command 0x0406 tx timeout [ 324.149478][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.151784][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.217482][ T6009] Bluetooth: hci0: command 0x0406 tx timeout [ 325.251572][ T9167] loop1: detected capacity change from 0 to 1024 [ 325.287317][ T9167] hfsplus: request for non-existent node 3 in B*Tree [ 325.289288][ T9167] hfsplus: request for non-existent node 3 in B*Tree [ 325.502584][ T44] hfsplus: b-tree write err: -5, ino 3 [ 326.520642][ T9187] lo speed is unknown, defaulting to 1000 [ 326.523885][ T9187] lo speed is unknown, defaulting to 1000 [ 326.525786][ T9187] lo speed is unknown, defaulting to 1000 [ 326.558900][ T9187] infiniband sz1: set active [ 326.560199][ T9187] infiniband sz1: added lo [ 326.566398][ T27] lo speed is unknown, defaulting to 1000 [ 326.707019][ T9187] RDS/IB: sz1: added [ 326.708761][ T9187] smc: adding ib device sz1 with port count 1 [ 326.710440][ T9187] smc: ib device sz1 port 1 has pnetid [ 326.714813][ T9187] lo speed is unknown, defaulting to 1000 [ 326.725259][ T10] lo speed is unknown, defaulting to 1000 [ 326.756685][ T9187] lo speed is unknown, defaulting to 1000 [ 326.792577][ T9187] lo speed is unknown, defaulting to 1000 [ 326.823989][ T9187] lo speed is unknown, defaulting to 1000 [ 326.855324][ T9187] lo speed is unknown, defaulting to 1000 [ 327.006571][ T27] lo speed is unknown, defaulting to 1000 [ 330.073288][ T9221] vxcan1: tx address claim with dlc 1 [ 330.110946][ T9221] loop3: detected capacity change from 0 to 128 [ 330.642061][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 331.149428][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 331.177677][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 332.879968][ T9248] loop4: detected capacity change from 0 to 512 [ 332.910727][ T9248] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 333.123796][ T6009] Bluetooth: hci4: command 0x0405 tx timeout [ 333.545879][ T9269] lo speed is unknown, defaulting to 1000 [ 333.553055][ T9269] lo speed is unknown, defaulting to 1000 [ 334.013182][ T9271] loop1: detected capacity change from 0 to 1024 [ 334.032977][ T9271] hfsplus: request for non-existent node 3 in B*Tree [ 334.055741][ T9271] hfsplus: request for non-existent node 3 in B*Tree [ 334.278369][ T9278] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 334.283990][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 334.292521][ T7231] hfsplus: b-tree write err: -5, ino 3 [ 336.039903][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.042225][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.681620][ T9320] loop4: detected capacity change from 0 to 1024 [ 338.718020][ T9323] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 338.730320][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 338.739053][ T9320] hfsplus: request for non-existent node 3 in B*Tree [ 338.740636][ T9320] hfsplus: request for non-existent node 3 in B*Tree [ 338.824250][ T674] hfsplus: b-tree write err: -5, ino 3 [ 341.384938][ T9360] loop4: detected capacity change from 0 to 64 [ 341.387027][ T9360] hfs: Bad value for 'part' [ 342.384063][ T6009] Bluetooth: hci2: command 0x0406 tx timeout [ 342.902047][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.072179][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.176502][ T9380] fuse: Bad value for 'fd' [ 344.152146][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 346.964370][ T9412] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 346.969444][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.973023][ T9412] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 347.587222][ T9420] loop1: detected capacity change from 0 to 1024 [ 347.596774][ T9420] hfsplus: request for non-existent node 3 in B*Tree [ 347.598412][ T9420] hfsplus: request for non-existent node 3 in B*Tree [ 347.626952][ T9423] loop4: detected capacity change from 0 to 1024 [ 347.671280][ T9423] hfsplus: request for non-existent node 3 in B*Tree [ 347.677714][ T9423] hfsplus: request for non-existent node 3 in B*Tree [ 347.815208][ T626] hfsplus: b-tree write err: -5, ino 3 [ 347.815265][ T38] hfsplus: b-tree write err: -5, ino 3 [ 348.546125][ T9434] loop1: detected capacity change from 0 to 128 [ 348.580268][ T9434] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.769724][ T9446] loop3: detected capacity change from 0 to 2048 [ 348.771959][ T9446] udf: Bad value for 'dmode' [ 348.874978][ T9446] loop3: detected capacity change from 0 to 512 [ 348.904815][ T9446] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.705: corrupted in-inode xattr: invalid ea_ino [ 348.933778][ T9446] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.705: couldn't read orphan inode 15 (err -117) [ 348.944144][ T9446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.114577][ T9456] syz.1.700 (pid 9456) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 349.121071][ T9456] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 349.124177][ T9456] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 350.607820][ T9471] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 350.613605][ T9470] IPVS: stopping master sync thread 9471 ... [ 351.205931][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.325529][ T6450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.282751][ T9495] loop3: detected capacity change from 0 to 1024 [ 352.468289][ T9495] hfsplus: request for non-existent node 3 in B*Tree [ 352.517682][ T9495] hfsplus: request for non-existent node 3 in B*Tree [ 353.347385][ T6610] hfsplus: b-tree write err: -5, ino 3 [ 353.479455][ T9512] loop3: detected capacity change from 0 to 1024 [ 353.516358][ T9512] hfsplus: request for non-existent node 3 in B*Tree [ 353.528810][ T9512] hfsplus: request for non-existent node 3 in B*Tree [ 353.625632][ T11] hfsplus: b-tree write err: -5, ino 3 [ 353.917745][ T9514] loop3: detected capacity change from 0 to 40427 [ 353.920455][ T9514] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 353.922594][ T9514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 353.958194][ T9514] F2FS-fs (loop3): invalid crc value [ 354.012448][ T9514] F2FS-fs (loop3): Found nat_bits in checkpoint [ 354.082405][ T9514] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 354.085030][ T9514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 356.013195][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.031645][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.189744][ T9535] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.209499][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 357.190564][ T9548] warning: `syz.1.722' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 359.445982][ T9568] loop3: detected capacity change from 0 to 2048 [ 359.450980][ T9568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.530030][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.555751][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.625132][ T252] Bluetooth: hci5: Frame reassembly failed (-84) [ 361.289856][ T6442] Bluetooth: hci4: command 0x0405 tx timeout [ 361.312546][ T9588] loop4: detected capacity change from 0 to 1764 [ 361.490770][ T9588] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 361.651823][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 361.694417][ T6442] Bluetooth: hci5: command 0x1003 tx timeout [ 361.800274][ T6450] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1346 (mode 100755) has inode size 47557 different from extent length 47616. Filesystem need not be standards compliant. [ 361.988945][ T9594] loop3: detected capacity change from 0 to 256 [ 361.991237][ T9594] exfat: Deprecated parameter 'namecase' [ 362.047827][ T9594] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x364566b4, utbl_chksum : 0xe619d30d) [ 363.912571][ T9599] lo speed is unknown, defaulting to 1000 [ 363.914614][ T9599] lo speed is unknown, defaulting to 1000 [ 363.920041][ T9605] loop4: detected capacity change from 0 to 1024 [ 364.041299][ T9605] hfsplus: request for non-existent node 3 in B*Tree [ 364.043004][ T9605] hfsplus: request for non-existent node 3 in B*Tree [ 364.346836][ T674] hfsplus: b-tree write err: -5, ino 3 [ 364.466890][ T9613] fuse: Bad value for 'fd' [ 366.286566][ T9631] loop4: detected capacity change from 0 to 256 [ 366.368316][ T9631] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0xaa00006c [ 366.371144][ T9631] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 366.390384][ T9631] exFAT-fs (loop4): invalid boot region [ 366.391796][ T9631] exFAT-fs (loop4): failed to recognize exfat type [ 366.407669][ T9635] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 366.422286][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 367.291286][ T9640] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 368.112560][ T9641] loop1: detected capacity change from 0 to 256 [ 368.155744][ T6442] Bluetooth: hci1: command 0x0406 tx timeout [ 369.080916][ T9652] loop4: detected capacity change from 0 to 1024 [ 369.087578][ T9648] trusted_key: syz.2.752 sent an empty control message without MSG_MORE. [ 369.116071][ T9652] hfsplus: request for non-existent node 3 in B*Tree [ 369.117839][ T9652] hfsplus: request for non-existent node 3 in B*Tree [ 369.490077][ T252] hfsplus: b-tree write err: -5, ino 3 [ 370.379049][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.387926][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.412278][ T9674] loop3: detected capacity change from 0 to 2048 [ 370.430074][ T9674] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 370.470275][ T6531] udevd[6531]: incorrect nilfs2 checksum on /dev/loop3 [ 370.492294][ T9678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.614800][ T6442] Bluetooth: hci1: command 0x0406 tx timeout [ 371.783858][ T2363] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.785611][ T2363] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.385280][ T9685] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 372.399443][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 372.833800][ T6442] Bluetooth: hci2: command 0x0406 tx timeout [ 373.248072][ T9694] loop1: detected capacity change from 0 to 8 [ 374.267222][ T9704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.767'. [ 374.342393][ T9704] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 374.759020][ T9702] SQUASHFS error: xz decompression failed, data probably corrupt [ 374.761366][ T9702] SQUASHFS error: Failed to read block 0xa8: -5 [ 374.768910][ T9702] SQUASHFS error: xz decompression failed, data probably corrupt [ 374.770853][ T9702] SQUASHFS error: Failed to read block 0xa8: -5 [ 376.589403][ T9719] loop1: detected capacity change from 0 to 1024 [ 376.669303][ T9719] hfsplus: request for non-existent node 3 in B*Tree [ 376.671037][ T9719] hfsplus: request for non-existent node 3 in B*Tree [ 376.853012][ T6611] hfsplus: b-tree write err: -5, ino 3 [ 377.638948][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.643711][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.763878][ T9735] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 377.770618][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 378.019785][ T9738] infiniband syz1: set down [ 378.021152][ T9738] infiniband syz1: added ipvlan0 [ 378.034327][ T9740] xfrm0: entered allmulticast mode [ 378.196277][ T9738] RDS/IB: syz1: added [ 378.197709][ T9738] smc: adding ib device syz1 with port count 1 [ 378.199515][ T9738] smc: ib device syz1 port 1 has pnetid [ 378.671212][ T6442] Bluetooth: hci2: command 0x0406 tx timeout [ 380.234770][ T9765] loop4: detected capacity change from 0 to 1024 [ 380.399692][ T9765] hfsplus: request for non-existent node 3 in B*Tree [ 380.401209][ T9765] hfsplus: request for non-existent node 3 in B*Tree [ 381.013859][ T6442] Bluetooth: hci2: command 0x0406 tx timeout [ 383.043808][ T6442] Bluetooth: hci2: command 0x0406 tx timeout [ 384.088864][ T7233] hfsplus: b-tree write err: -5, ino 3 [ 384.791016][ T9795] tmpfs: Bad value for 'mpol' [ 385.546830][ T9806] netlink: 156 bytes leftover after parsing attributes in process `syz.0.790'. [ 386.028682][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 386.383306][ T9820] loop1: detected capacity change from 0 to 1024 [ 386.623618][ T9820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.119533][ T9820] Injecting memory failure for pfn 0x13ad6c at process virtual address 0x2036c000 [ 387.122163][ T9820] Memory failure: 0x13ad6c: already hardware poisoned [ 387.126237][ T9820] Memory failure: 0x13ad6c: Sending SIGBUS to syz.1.794:9820 due to hardware memory corruption [ 387.129209][ T9820] Memory failure: 0x13ad6c: recovery action for already poisoned: Failed [ 388.280958][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.757132][ T9879] loop1: detected capacity change from 0 to 164 [ 392.077849][ T9879] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 394.993917][ T9897] tmpfs: Bad value for 'mpol' [ 396.764566][ T9909] netlink: 277 bytes leftover after parsing attributes in process `syz.0.807'. [ 399.143392][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 399.744163][ T9937] loop1: detected capacity change from 0 to 1024 [ 399.846733][ T9937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.008290][ T9937] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.1.813: corrupted in-inode xattr: bad magic number in in-inode xattr [ 400.251421][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.582591][ T9948] loop3: detected capacity change from 0 to 2048 [ 400.938371][ T9957] veth0_vlan: left promiscuous mode [ 400.941168][ T9957] veth0_vlan: entered promiscuous mode [ 400.998713][ T9955] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.425196][ T9948] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 404.190097][ T9980] loop1: detected capacity change from 0 to 1024 [ 404.691468][ T6610] hfsplus: b-tree write err: -5, ino 8 [ 404.820911][ T9986] loop3: detected capacity change from 0 to 164 [ 405.372123][ T9983] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 406.425059][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.447761][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.450800][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.494083][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.569191][T10093] hub 2-0:1.0: USB hub found [ 413.574059][T10093] hub 2-0:1.0: 8 ports detected [ 419.059506][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.083983][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.774248][T10157] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 421.200531][T10157] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 425.898280][T10203] loop1: detected capacity change from 0 to 164 [ 426.015342][T10195] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 426.512894][T10217] Unable to handle kernel paging request at virtual address dfff800000000003 [ 426.515309][T10217] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 426.517629][T10217] Mem abort info: [ 426.518611][T10217] ESR = 0x0000000096000005 [ 426.519833][T10217] EC = 0x25: DABT (current EL), IL = 32 bits [ 426.521530][T10217] SET = 0, FnV = 0 [ 426.522518][T10217] EA = 0, S1PTW = 0 [ 426.523677][T10217] FSC = 0x05: level 1 translation fault [ 426.525232][T10217] Data abort info: [ 426.526179][T10217] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 426.527883][T10217] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 426.529392][T10217] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 426.530955][T10217] [dfff800000000003] address between user and kernel address ranges [ 426.533051][T10217] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 426.535016][T10217] Modules linked in: [ 426.536047][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.4.869 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 [ 426.538722][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 426.541317][T10217] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 426.543289][T10217] pc : __lock_acquire+0xfc/0x7904 [ 426.544557][T10217] lr : lock_acquire+0x23c/0x724 [ 426.545723][T10217] sp : ffff80009d207460 [ 426.546810][T10217] x29: ffff80009d207720 x28: ffff800080441de8 x27: 0000000000000000 [ 426.548960][T10217] x26: ffff0001b37b2540 x25: 0000000000000000 x24: 0000000000000001 [ 426.551059][T10217] x23: 0000000000000000 x22: 1ffff00011f7a0cb x21: 0000000000000018 [ 426.553270][T10217] x20: 0000000000000001 x19: 0000000000000000 x18: ffff80009d207360 [ 426.555458][T10217] x17: 000000000003d882 x16: ffff8000832d977c x15: 0000000000000001 [ 426.557485][T10217] x14: 1fffe000366f8dd0 x13: dfff800000000000 x12: ffff700013a40eb4 [ 426.559666][T10217] x11: ffff80008046d80c x10: ffff80008fbd0658 x9 : 00000000000000f3 [ 426.561922][T10217] x8 : 0000000000000003 x7 : ffff800080441de8 x6 : 0000000000000000 [ 426.564015][T10217] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 426.566172][T10217] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000018 [ 426.568201][T10217] Call trace: [ 426.569022][T10217] __lock_acquire+0xfc/0x7904 (P) [ 426.570330][T10217] lock_acquire+0x23c/0x724 [ 426.571579][T10217] _raw_spin_lock_irqsave+0x5c/0x7c [ 426.573057][T10217] add_wait_queue+0x60/0x188 [ 426.574223][T10217] virtio_transport_release+0x3c8/0xa64 [ 426.575712][T10217] __vsock_release+0xe8/0x388 [ 426.576947][T10217] vsock_release+0x98/0xfc [ 426.578148][T10217] sock_close+0xa4/0x1e8 [ 426.579259][T10217] __fput+0x340/0x760 [ 426.580294][T10217] ____fput+0x20/0x30 [ 426.581395][T10217] task_work_run+0x230/0x2e0 [ 426.582682][T10217] do_notify_resume+0x178/0x1f4 [ 426.583912][T10217] el0_svc+0xac/0x168 [ 426.584908][T10217] el0t_64_sync_handler+0x84/0x108 [ 426.586255][T10217] el0t_64_sync+0x198/0x19c [ 426.587388][T10217] Code: f007bb08 b9465908 340090a8 d343fea8 (386d6908) [ 426.589175][T10217] ---[ end trace 0000000000000000 ]--- [ 427.034774][T10217] Kernel panic - not syncing: Oops: Fatal exception [ 427.036598][T10217] SMP: stopping secondary CPUs [ 427.037895][T10217] Kernel Offset: disabled [ 427.039037][T10217] CPU features: 0x200,00002070,00800250,82017203 [ 427.040739][T10217] Memory Limit: none [ 427.509545][T10217] Rebooting in 86400 seconds..