last executing test programs: 10m37.412976813s ago: executing program 0 (id=481): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008", @ANYBLOB='\b', @ANYRES32], 0x24}}, 0x0) 10m36.25815584s ago: executing program 0 (id=487): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c00", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4d6502, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m35.749434989s ago: executing program 0 (id=489): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10m34.487480287s ago: executing program 0 (id=491): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$MAP_CREATE(0x0, 0x0, 0x37) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x8000, 0x200, 0x2, 0x7ff, 0xffffffc0}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000340), 0x4) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x6, 0x5fbf, &(0x7f0000002080)="$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") 10m32.067413342s ago: executing program 0 (id=494): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 10m27.539375999s ago: executing program 0 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x4000, 0x3, 0xd5}, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) 10m11.373841697s ago: executing program 32 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x4000, 0x3, 0xd5}, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) 17.139114967s ago: executing program 4 (id=1670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 16.376644289s ago: executing program 5 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004010) r4 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r4, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/199, 0xc7}], 0x1}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 14.324898728s ago: executing program 4 (id=1677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 13.229112375s ago: executing program 4 (id=1678): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x2c, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x58}, 0x2c) r3 = syz_clone(0x20034000, &(0x7f00000000c0)="d47b77614f59aa188b9ed0f1344928fdee02173198b9bf", 0x17, 0x0, 0x0, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000001240)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x181}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) 13.152393876s ago: executing program 5 (id=1679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x0, 0x3, 0xb, 0x1, 0x30, 0x19}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.736602142s ago: executing program 4 (id=1680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x82) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysv\x00', 0x100000, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 12.440545017s ago: executing program 4 (id=1682): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x4, 0x80000000, 0x5, 0x40000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xd, @void, @value, @void, @value}, 0x50) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_setup(0x366c, &(0x7f0000000540)={0x0, 0xebcf, 0x800, 0x3, 0x28}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000000c0)=""/174, &(0x7f0000000180)=0xae) 11.46957657s ago: executing program 5 (id=1684): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)={0x18, 0x8, 0xe, 0x9, 0x3, 0x101, 0x5, 0x32}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 11.336697612s ago: executing program 2 (id=1685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100) 11.069396357s ago: executing program 2 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r6, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) 9.765142316s ago: executing program 2 (id=1687): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) memfd_create(&(0x7f0000000180)='/dev/qrtr-tun\x00', 0x2) r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x0, 0x0, 0x8000}) syz_open_dev$vim2m(0x0, 0x1000000ea8, 0x2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x10001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xd, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 9.731509316s ago: executing program 3 (id=1688): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000002c0)="$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") syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc0c00) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2214850, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x22048854, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(r4, 0x0, 0x0, 0x40004, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 9.152528215s ago: executing program 1 (id=1689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x6, 0x100000000, 0x2, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x5, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) 8.892798249s ago: executing program 5 (id=1690): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r0, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x7, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r7, 0x4}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) 8.055144131s ago: executing program 1 (id=1691): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x1, 0x7fffffff, 0x0, 0xf7, 0xb, 0x80000000000000, 0x800, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) mount$9p_xen(0x0, 0x0, &(0x7f0000000180), 0x244404, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) 7.765400995s ago: executing program 3 (id=1692): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x2000c000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x28}, {0x6}]}, 0x10) 6.456678585s ago: executing program 5 (id=1693): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r1, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5f35, &(0x7f0000006180)="$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") link(&(0x7f0000000180)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x51) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 5.060476005s ago: executing program 3 (id=1694): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$vim2m(&(0x7f0000001240), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/current\x00') writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x30, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x495, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x1, 0x284}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000000c0)={0x6, 0x3f, 0xfffeffff}) r6 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000040)=[0x0, 0xcc6f], 0x2) 3.451003389s ago: executing program 1 (id=1695): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = getpid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x20000014}) syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00') mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\a\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 3.054700455s ago: executing program 5 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x2004000, &(0x7f0000000040)=ANY=[], 0x9, 0x21a, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x630800, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x1010006, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=cp869,discard=0x0000000000000005,nodiscard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32=r0], 0x22, 0x61b6, &(0x7f000001b700)="$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") chdir(&(0x7f0000000440)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/191, 0xbf) 2.883991977s ago: executing program 3 (id=1697): write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "ff7f1618", "be0ea450d5a5fd03"}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003600), 0x58, 0x10020, 0x0) socket(0x2a, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000002940), &(0x7f0000000000)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd31, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.968411171s ago: executing program 2 (id=1698): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x7, 0x0, &(0x7f00000002c0)="ae24a21f9a8246", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x7fffffff, 0x101, 0x534, 0x2}, &(0x7f0000000180)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='efs\x00', 0x208000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x0, 0xd0, 0x1c0, 0x1c0, 0x320, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [], 0x4000}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 1.867001513s ago: executing program 1 (id=1699): setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.620795016s ago: executing program 3 (id=1700): add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d5", 0x2e, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.38835696s ago: executing program 1 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a8a5df08e2f045ee023718b1030000000001c0007800c00028008000140ac1414bb0c000180080001400000000005000500020000000500010006000000"], 0x68}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000094b4ab4102000000000000000000000000ffff00000000000000000000020000002575492ff05bc556acf7c4887995104426e7446192255e7f5112d74e7d6bb857bcf3b8b3b6ea4d61d7", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x3}, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.37058867s ago: executing program 2 (id=1702): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r3, 0x0, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x20}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) readv(r4, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1) 284.561366ms ago: executing program 1 (id=1703): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="100c06002622030000", 0x9, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1000) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 284.035816ms ago: executing program 2 (id=1704): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x14) 803.28µs ago: executing program 3 (id=1705): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120003000000000904"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600140) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="05f5256a3f042dd00aeb93a74043dcea9a1ca73472ac606a36ce3681463334590d53dcdfdbc5913851d016bf23b08bb04ce9963973fa76211253cf41d0186638decd72f987", 0x45}, {&(0x7f0000000240)="650eafc4714935a57c882767133deabfaff1443c7b609d9b4255eba6b9deb3084febc3394735a764ee9a58570566c6864793ea832f44a0f709998a66a52c90959fefbfd535cf6fc23f6c6ab9066ae51b1ab24fa229e7505d3d135a9ce6", 0x5d}], 0x2, &(0x7f0000000540)=[{0x80, 0x116, 0x7, "51cf4b5b078ffa2f91404f3f02ccfe85f58d3d8782f83dc96e3f4615d984475e9552389561c6b9434d4c39de4a3490ef4d986d6ea829241e576dc8902a58ffc183ca3c64b38658374dcf941a35c6e854c1ac5253dd14fb01f9d54527ed91de87738f30d4e24249062a"}, {0x88, 0x86ed2fcfa6efbf7b, 0x5, "5213e2fcd558fd7e4f57956737dc7171b2b361a15c60a3494353cbb77ac7e5df49bac4e81f8e9ffaa576b373c0e1ed004403cacd13f2803dacb01439f4a4dd3b16cd8d601a0630816327dd42ed8644ae9815d640891bbf8ec5d6fc986f0726c9df7f4ca3c9810942b2137340e8cb1089c2daa666d244"}, {0x88, 0x111, 0x0, "bdde16223554fed88c248e61c13b099d9204d3661e26b72c87254cd06efc9dc47babc63e5e31b0d7738499101fdb64d052cfc0d4c9548992efd1c5266dde97094caeb7731989851d64a017290202e9d4eb8d1568cb31a59a6f0146ccd4600f6dd75cafcf0bcc25290e4173dc1096f5f19c5152d8ced7fedf"}], 0x190}, 0x4004020) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000080)) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x8, &(0x7f0000000380)={0x20, "ef9a26c95b778cd5e2fa5d10e7f963e7f59c529b6c0913a66109d77ae0e5b657b1"}}) 0s ago: executing program 4 (id=1706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) socket(0x840000000002, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ffffffd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getpid() getpid() ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1278) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7151, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) kernel console output (not intermixed with test programs): ci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.979939][ T4705] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 132.914106][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921256][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 132.938730][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963247][ T4711] loop4: detected capacity change from 0 to 16 [ 132.972488][ T4705] bond1 (unregistering): Released all slaves [ 133.225414][ T4711] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.305170][ T4715] device macsec1 entered promiscuous mode [ 133.361001][ T4721] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 138.847664][ T4768] loop3: detected capacity change from 0 to 1024 [ 138.879143][ T4773] loop2: detected capacity change from 0 to 2048 [ 138.984846][ T4771] loop1: detected capacity change from 0 to 2048 [ 139.017078][ T4768] EXT4-fs: Ignoring removed orlov option [ 139.023063][ T4768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.050839][ T4773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.059824][ T4771] loop1: p1 < > p3 [ 139.074488][ T4771] loop1: p3 size 134217728 extends beyond EOD, truncated [ 139.101324][ T4768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.520699][ T4264] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 140.530077][ T4264] Bluetooth: hci1: Injecting HCI hardware error event [ 140.540751][ T4260] Bluetooth: hci1: hardware error 0x00 [ 140.763442][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 140.890097][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 141.066589][ T4782] udevd[4782]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.096814][ T4492] udevd[4492]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 142.808382][ T4260] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 143.444314][ T4811] loop4: detected capacity change from 0 to 2048 [ 144.921815][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.954458][ T4302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.023408][ T4302] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.129453][ T4811] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.188814][ T4811] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 74 with error 28 [ 145.278424][ T4811] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.278424][ T4811] [ 145.353923][ T4811] EXT4-fs (loop4): Total free blocks count 0 [ 145.378566][ T4811] EXT4-fs (loop4): Free/Dirty block details [ 145.414346][ T4811] EXT4-fs (loop4): free_blocks=2415919104 [ 145.445193][ T4811] EXT4-fs (loop4): dirty_blocks=80 [ 145.472825][ T4260] Bluetooth: Wrong link type (-57) [ 145.480265][ T4811] EXT4-fs (loop4): Block reservation details [ 145.486410][ T4811] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 145.758775][ T4302] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.978561][ T4302] usb 4-1: device descriptor read/64, error -71 [ 146.268546][ T4302] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.362055][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 146.458510][ T4302] usb 4-1: device descriptor read/64, error -71 [ 146.578782][ T4302] usb usb4-port1: attempt power cycle [ 147.008462][ T4302] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.040000][ T4302] usb 4-1: device descriptor read/8, error -71 [ 147.138556][ T127] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.370620][ T4302] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.418692][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 147.425930][ T4302] usb 4-1: device descriptor read/8, error -71 [ 147.459816][ T127] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 147.556345][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.573354][ T4302] usb usb4-port1: unable to enumerate USB device [ 147.889345][ T127] usb 1-1: config 0 descriptor?? [ 148.307584][ T4865] loop2: detected capacity change from 0 to 2048 [ 150.116553][ T4324] usb 1-1: USB disconnect, device number 3 [ 150.274575][ T4865] loop2: p1 < > p3 [ 150.298971][ T4865] loop2: p3 size 134217728 extends beyond EOD, truncated [ 150.505509][ T4782] udevd[4782]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 150.550463][ T4492] udevd[4492]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 150.606074][ T4872] loop1: detected capacity change from 0 to 8192 [ 150.908765][ T4885] ======================================================= [ 150.908765][ T4885] WARNING: The mand mount option has been deprecated and [ 150.908765][ T4885] and is ignored by this kernel. Remove the mand [ 150.908765][ T4885] option from the mount to silence this warning. [ 150.908765][ T4885] ======================================================= [ 151.630366][ T4872] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.662877][ T4872] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 151.737088][ T4872] REISERFS (device loop1): using ordered data mode [ 151.773672][ T4872] reiserfs: using flush barriers [ 151.856649][ T4872] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.897605][ T4872] REISERFS (device loop1): checking transaction log (loop1) [ 151.981164][ T4872] REISERFS (device loop1): Using r5 hash to sort names [ 152.009795][ T4872] REISERFS (device loop1): using 3.5.x disk format [ 152.045253][ T4872] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 157.978773][ T4928] block device autoloading is deprecated and will be removed. [ 158.330437][ T4926] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.850198][ T4938] loop4: detected capacity change from 0 to 128 [ 159.979071][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.025127][ T4938] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.541025][ T26] audit: type=1326 audit(1748890739.041:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 161.652911][ T26] audit: type=1326 audit(1748890739.081:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 161.748622][ T26] audit: type=1326 audit(1748890739.081:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 161.772499][ T26] audit: type=1326 audit(1748890739.081:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 162.659416][ T26] audit: type=1326 audit(1748890739.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 162.829533][ T26] audit: type=1326 audit(1748890739.081:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 163.723129][ T4959] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.744435][ T4959] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.806206][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 164.208676][ T26] audit: type=1326 audit(1748890739.081:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 164.342196][ T26] audit: type=1326 audit(1748890739.081:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 164.395180][ T26] audit: type=1326 audit(1748890739.081:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 164.453066][ T26] audit: type=1326 audit(1748890739.081:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 167.253172][ T4260] Bluetooth: unknown link type 108 [ 169.308813][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 173.545021][ T5052] Cannot find add_set index 0 as target [ 174.247589][ T5059] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.186'. [ 175.046568][ T5061] loop2: detected capacity change from 0 to 4096 [ 177.218594][ T5068] loop0: detected capacity change from 0 to 4096 [ 177.232152][ T5068] __ntfs_warning: 5 callbacks suppressed [ 177.232170][ T5068] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 177.280525][ T5061] NILFS (loop2): error -4 creating segctord thread [ 177.292762][ T5068] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 177.318478][ T5076] loop1: detected capacity change from 0 to 512 [ 177.383167][ T5076] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.194: invalid block [ 177.409615][ T5068] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 177.422065][ T5076] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.194: invalid indirect mapped block 10 (level 1) [ 177.441086][ T5068] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 177.455968][ T5076] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.194: invalid indirect mapped block 8 (level 1) [ 177.472063][ T5068] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 177.488863][ T5076] EXT4-fs (loop1): 1 truncate cleaned up [ 177.494887][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.678203][ T5086] mmap: syz.1.194 (5086) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.511457][ T5068] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 178.558921][ T5068] ntfs: (device loop0): map_mft_record(): Failed with error code 4. [ 178.586077][ T5068] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 178.633848][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 178.657330][ T5068] ntfs: (device loop0): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 178.718923][ T5068] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 181.327479][ T5114] loop1: detected capacity change from 0 to 2048 [ 181.412384][ T5114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.568405][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 182.506357][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 182.588721][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 182.598770][ T4242] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 182.610250][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.628218][ T4242] pvrusb2: Hardware description: Terratec Grabster AV400 [ 182.658711][ T4242] pvrusb2: ********** [ 182.663431][ T4242] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 182.688235][ T5134] loop3: detected capacity change from 0 to 2048 [ 182.708601][ T4242] pvrusb2: Important functionality might not be entirely working. [ 182.716575][ T4242] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 182.745429][ T5134] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.759607][ T4242] pvrusb2: ********** [ 182.831802][ T2309] pvrusb2: Invalid write control endpoint [ 182.886213][ T5141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.064605][ T5119] pvrusb2: Invalid write control endpoint [ 183.071146][ T4242] usb 3-1: USB disconnect, device number 2 [ 183.777221][ T2309] pvrusb2: Invalid write control endpoint [ 183.777283][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.777374][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.777382][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.777393][ T2309] pvrusb2: Device being rendered inoperable [ 183.781142][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.881312][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.950837][ T2309] pvrusb2: Attached sub-driver cx25840 [ 183.984951][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 184.025611][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.421106][ T5162] loop2: detected capacity change from 0 to 512 [ 185.565160][ T5162] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.213: invalid indirect mapped block 256 (level 2) [ 185.644107][ T5162] EXT4-fs (loop2): 2 truncates cleaned up [ 185.674001][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.590079][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 187.837614][ T5188] loop2: detected capacity change from 0 to 128 [ 187.970777][ T5188] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.014347][ T5188] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.826515][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 190.894924][ T5210] bridge1: port 1(ip6gretap1) entered blocking state [ 190.905437][ T5210] bridge1: port 1(ip6gretap1) entered disabled state [ 190.915106][ T5210] device ip6gretap1 entered promiscuous mode [ 190.952152][ T5210] device veth3 entered promiscuous mode [ 190.958768][ T5210] bridge1: port 2(veth3) entered blocking state [ 190.965633][ T5210] bridge1: port 2(veth3) entered disabled state [ 191.038582][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.551857][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 192.564688][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.588403][ T127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.599375][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.717255][ T127] usb 5-1: config 0 descriptor?? [ 193.100102][ T127] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.128752][ T5232] loop0: detected capacity change from 0 to 2048 [ 193.371930][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.405797][ T5232] loop0: p1 < > p3 [ 193.451224][ T5232] loop0: p3 size 134217728 extends beyond EOD, truncated [ 193.460531][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.826003][ T4302] usb 5-1: USB disconnect, device number 2 [ 194.044865][ T4492] udevd[4492]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 194.072734][ T4782] udevd[4782]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 194.086624][ T5245] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 194.222831][ T5244] tipc: Started in network mode [ 194.263124][ T5244] tipc: Node identity 7f000001, cluster identity 4711 [ 194.315731][ T5244] tipc: Enabled bearer , priority 10 [ 194.350995][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357772][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.687121][ T4302] tipc: Node number set to 2130706433 [ 198.958568][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.375171][ T127] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.407475][ T127] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.428677][ T127] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.569014][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.587393][ T5267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.304763][ T5303] loop1: detected capacity change from 0 to 256 [ 201.323301][ T5303] exfat: Deprecated parameter 'utf8' [ 201.335193][ T5303] exfat: Deprecated parameter 'namecase' [ 201.341258][ T5303] exfat: Deprecated parameter 'utf8' [ 201.347252][ T5303] exfat: Bad value for 'gid' [ 201.808402][ T14] usb 1-1: USB disconnect, device number 4 [ 201.953532][ T5307] loop4: detected capacity change from 0 to 512 [ 202.046879][ T5307] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.251: iget: bad extended attribute block 1 [ 202.170053][ T5307] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.251: couldn't read orphan inode 15 (err -117) [ 202.200819][ T5307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.303854][ T5312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 203.928849][ T5320] sctp: failed to load transform for md5: -2 [ 204.039669][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 205.891484][ T1169] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 207.484107][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 207.492136][ T4260] Bluetooth: hci2: command 0x0406 tx timeout [ 207.492152][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 207.648466][ T1169] usb 2-1: Using ep0 maxpacket: 8 [ 207.655744][ T1169] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 207.668642][ T1169] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 207.688406][ T1169] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 207.753033][ T5336] loop2: detected capacity change from 0 to 32768 [ 207.759294][ T1169] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 207.788990][ T1169] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 207.818688][ T5357] loop4: detected capacity change from 0 to 8192 [ 207.838023][ T1169] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 207.979726][ T5336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.257 (5336) [ 208.155459][ T5362] loop0: detected capacity change from 0 to 32768 [ 208.171312][ T1169] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 208.185212][ T1169] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 208.206264][ T5362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.264 (5362) [ 208.224538][ T5357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.251703][ T5357] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 208.261934][ T5357] REISERFS (device loop4): using ordered data mode [ 208.268989][ T5357] reiserfs: using flush barriers [ 208.295824][ T5357] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.312966][ T1169] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.338889][ T5362] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.350134][ T5362] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 208.359096][ T5362] BTRFS info (device loop0): using free space tree [ 208.377563][ T1169] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 208.378900][ T5357] REISERFS (device loop4): checking transaction log (loop4) [ 208.390469][ T5336] BTRFS error (device loop2): open_ctree failed: -4 [ 208.412903][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.419696][ T5357] REISERFS (device loop4): Using r5 hash to sort names [ 208.430716][ T5357] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.447306][ T5357] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 208.489296][ T1169] usb 2-1: Product: syz [ 208.495571][ T1169] usb 2-1: Manufacturer: syz [ 208.578128][ T5362] BTRFS info (device loop0): enabling ssd optimizations [ 208.608258][ T5357] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 208.633931][ T1169] usb 2-1: SerialNumber: syz [ 208.649207][ T4492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4492) [ 208.705951][ T5357] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 208.766244][ T5357] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 208.782607][ T1169] usb 2-1: can't set config #168, error -71 [ 208.800237][ T1169] usb 2-1: USB disconnect, device number 2 [ 211.330452][ T5391] loop1: detected capacity change from 0 to 262144 [ 211.378264][ T5391] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.268 (5391) [ 211.402925][ T5391] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 211.413947][ T5391] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 211.423887][ T5391] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 211.436498][ T5391] BTRFS info (device loop1): trying to use backup root at mount time [ 211.446087][ T5391] BTRFS info (device loop1): turning on sync discard [ 211.452979][ T5391] BTRFS info (device loop1): setting nodatacow, compression disabled [ 211.461882][ T5391] BTRFS info (device loop1): max_inline at 4096 [ 211.468782][ T5391] BTRFS info (device loop1): disabling tree log [ 211.475146][ T5391] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 211.486596][ T5391] BTRFS info (device loop1): trying to use backup root at mount time [ 211.495267][ T5391] BTRFS info (device loop1): using free space tree [ 212.230504][ T5391] BTRFS info (device loop1): checking UUID tree [ 212.253824][ T4252] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.948205][ T5429] syz.0.270 uses obsolete (PF_INET,SOCK_PACKET) [ 215.016563][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 215.456185][ T4253] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 216.689958][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 216.807349][ T5445] device dummy0 entered promiscuous mode [ 216.826007][ T5445] device macvtap1 entered promiscuous mode [ 216.954839][ T5450] loop0: detected capacity change from 0 to 4096 [ 217.025480][ T5446] device dummy0 left promiscuous mode [ 217.510136][ T5450] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 217.913541][ T26] audit: type=1326 audit(1748890795.411:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5456 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7fc00000 [ 219.126448][ T5450] Zero length message leads to an empty skb [ 220.054782][ T5476] xt_nat: multiple ranges no longer supported [ 222.078446][ T5427] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.148647][ T5427] usb 1-1: config 0 has no interfaces? [ 223.168078][ T5427] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.231158][ T5427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.258865][ T5427] usb 1-1: Product: syz [ 223.263105][ T5427] usb 1-1: Manufacturer: syz [ 223.267730][ T5427] usb 1-1: SerialNumber: syz [ 223.319132][ T5427] usb 1-1: config 0 descriptor?? [ 223.398159][ T5500] loop1: detected capacity change from 0 to 2048 [ 223.420331][ T5500] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.430800][ T5500] NILFS (loop1): mounting unchecked fs [ 223.444787][ T5500] NILFS (loop1): recovery complete [ 223.469685][ T5501] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.159645][ T5508] loop4: detected capacity change from 0 to 128 [ 224.198831][ T5508] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffã" or missing value [ 224.914714][ T4492] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.189014][ T5453] usb 1-1: USB disconnect, device number 5 [ 225.450684][ T5513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.436757][ T5528] loop4: detected capacity change from 0 to 1024 [ 226.510131][ T5528] EXT4-fs: Ignoring removed bh option [ 226.586535][ T5528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.052599][ T5530] loop0: detected capacity change from 0 to 2048 [ 227.288488][ T5528] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 227.342012][ T5528] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 227.378576][ T5528] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 227.537424][ T5530] loop0: p1 < > p3 [ 227.556155][ T5530] loop0: p3 size 134217728 extends beyond EOD, truncated [ 231.271731][ T4782] udevd[4782]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 237.636587][ T5607] loop2: detected capacity change from 0 to 1024 [ 237.855997][ T5607] EXT4-fs: Ignoring removed orlov option [ 238.150240][ T5607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.779328][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 242.436443][ T5641] loop4: detected capacity change from 0 to 2048 [ 242.527488][ T5641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.490740][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 244.397445][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 244.527431][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 244.609175][ T5662] bridge0: port 3(syz_tun) entered blocking state [ 244.668714][ T5662] bridge0: port 3(syz_tun) entered disabled state [ 244.734320][ T5662] device syz_tun entered promiscuous mode [ 244.909250][ T5662] bridge0: port 3(syz_tun) entered blocking state [ 244.916356][ T5662] bridge0: port 3(syz_tun) entered forwarding state [ 246.851344][ T5685] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 246.920914][ T5685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.992664][ T5687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.998455][ T5455] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.006499][ T5687] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 247.174174][ T5687] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 247.941792][ T5455] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.972423][ T5455] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.030024][ T5455] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.052775][ T5455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.087496][ T5682] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.149519][ T5685] device veth5 entered promiscuous mode [ 248.199466][ T5685] bond1: (slave veth5): Enslaving as an active interface with a down link [ 248.287138][ T5692] bond1: (slave erspan0): making interface the new active one [ 248.312680][ T5692] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 248.338276][ T5704] netlink: 60 bytes leftover after parsing attributes in process `syz.2.338'. [ 248.502154][ T5455] usb 5-1: USB disconnect, device number 3 [ 253.386280][ T5737] netlink: 'syz.1.347': attribute type 83 has an invalid length. [ 255.792912][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804684][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.875663][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 261.834417][ T5815] loop1: detected capacity change from 0 to 512 [ 262.128558][ T5815] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 263.267851][ T5815] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.370: iget: bad i_size value: -67835469387268086 [ 263.292237][ T5815] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.370: couldn't read orphan inode 15 (err -117) [ 263.720565][ T5815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.862468][ T5815] ext2 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.917769][ T5838] loop2: detected capacity change from 0 to 1024 [ 264.992631][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 266.083342][ T4370] hfsplus: b-tree write err: -5, ino 4 [ 266.951277][ T5849] loop2: detected capacity change from 0 to 1024 [ 266.972619][ T5852] loop1: detected capacity change from 0 to 256 [ 267.253435][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 267.560683][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.571882][ T5852] FAT-fs (loop1): Filesystem has been set read-only [ 267.591621][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.606827][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.619756][ T26] audit: type=1800 audit(1748890845.121:21): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 267.641512][ T5849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.812486][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.823203][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.833761][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.844287][ T5852] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.123837][ T5865] loop3: detected capacity change from 0 to 2048 [ 268.346999][ T5876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.708459][ T5882] overlayfs: missing 'lowerdir' [ 270.199207][ T5876] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 270.248398][ T5876] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 270.391004][ T5876] Remounting filesystem read-only [ 270.441748][ T4261] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 271.356737][ T5894] loop3: detected capacity change from 0 to 16 [ 271.440219][ T5894] erofs: (device loop3): mounted with root inode @ nid 36. [ 271.451089][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 271.459148][ T5896] netlink: 'syz.4.391': attribute type 4 has an invalid length. [ 271.733309][ T5894] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 271.744012][ T5894] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 271.753206][ T5894] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 271.764225][ T5894] syz.3.389: attempt to access beyond end of device [ 271.764225][ T5894] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 271.779050][ T5894] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 271.787741][ T26] audit: type=1800 audit(1748890849.281:22): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 272.156693][ T5902] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 273.169602][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 273.283602][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.611883][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.404968][ T5930] tipc: Started in network mode [ 276.428653][ T5930] tipc: Node identity -:, cluster identity 4711 [ 276.445426][ T5930] tipc: Enabling of bearer rejected, failed to enable media [ 276.498039][ T5933] loop2: detected capacity change from 0 to 764 [ 280.750971][ T5980] input: syz0 as /devices/virtual/input/input5 [ 281.763306][ T5992] loop1: detected capacity change from 0 to 1024 [ 281.770825][ T5992] EXT4-fs: Ignoring removed orlov option [ 281.776810][ T5992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.079384][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 282.165049][ T5994] loop0: detected capacity change from 0 to 32768 [ 282.172494][ T5994] XFS: ikeep mount option is deprecated. [ 282.425107][ T5994] XFS (loop0): Mounting V5 Filesystem [ 283.665075][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 284.598507][ T5994] XFS (loop0): Ending clean mount [ 284.613160][ T5994] XFS (loop0): Quotacheck needed: Please wait. [ 284.946654][ T5994] XFS (loop0): Quotacheck: Done. [ 285.442985][ T4252] XFS (loop0): Unmounting Filesystem [ 290.938539][ T6071] loop2: detected capacity change from 0 to 32768 [ 299.490506][ T6125] IPv6: Can't replace route, no match found [ 303.772754][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 304.415074][ T6176] loop1: detected capacity change from 0 to 32768 [ 304.644764][ T6176] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 306.237002][ T4253] ocfs2: Unmounting device (7,1) on (node local) [ 307.542897][ T6196] loop0: detected capacity change from 0 to 32768 [ 308.989123][ T4242] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.188572][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 309.200686][ T4242] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.290353][ T4242] usb 2-1: config 0 has no interface number 0 [ 309.418816][ T4242] usb 2-1: config 0 interface 1 has no altsetting 0 [ 309.467462][ T4242] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 309.478381][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.486567][ T4242] usb 2-1: Product: syz [ 309.491573][ T4242] usb 2-1: Manufacturer: syz [ 309.496318][ T4242] usb 2-1: SerialNumber: syz [ 309.517632][ T4242] usb 2-1: config 0 descriptor?? [ 311.200983][ T6221] tty tty25: ldisc open failed (-12), clearing slot 24 [ 311.799349][ T4242] i2c-cp2615: probe of 2-1:0.1 failed with error -71 [ 311.886514][ T4242] usb 2-1: USB disconnect, device number 3 [ 312.321459][ T26] audit: type=1326 audit(1748890889.821:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 312.468844][ T26] audit: type=1326 audit(1748890889.821:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 312.595636][ T26] audit: type=1326 audit(1748890889.821:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 312.664504][ T6239] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 312.706435][ T26] audit: type=1326 audit(1748890889.841:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 312.764527][ T26] audit: type=1326 audit(1748890889.841:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7ffc0000 [ 312.922811][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 314.118795][ T6263] loop2: detected capacity change from 0 to 512 [ 315.579635][ T6263] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.477: corrupted in-inode xattr [ 317.243110][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249674][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.598065][ T6277] loop0: detected capacity change from 0 to 32768 [ 317.765300][ T6263] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.477: couldn't read orphan inode 15 (err -117) [ 317.828598][ T6263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 318.057223][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 320.787081][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.794593][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.806316][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.814083][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.821667][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.829809][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.845068][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.890469][ T5455] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 321.703438][ T6308] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 321.778390][ T5455] usb 4-1: device descriptor read/64, error -71 [ 322.108681][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.168392][ T4242] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 322.188684][ T6315] bond1: (slave gretap1): making interface the new active one [ 322.231464][ T6315] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 322.247149][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 322.328464][ T5455] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 322.372373][ T4242] usb 2-1: config 0 has no interfaces? [ 322.377993][ T4242] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 322.400286][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.509948][ T5455] usb 4-1: device descriptor read/64, error -71 [ 322.602351][ T4242] usb 2-1: config 0 descriptor?? [ 322.707720][ T5455] usb usb4-port1: attempt power cycle [ 323.319206][ T6304] device team_slave_0 entered promiscuous mode [ 323.326050][ T6304] device team_slave_1 entered promiscuous mode [ 323.614508][ T6304] device vlan3 entered promiscuous mode [ 323.631917][ T6304] device team0 entered promiscuous mode [ 323.715498][ T6330] input: syz0 as /devices/virtual/input/input6 [ 324.650034][ T4242] usb 2-1: USB disconnect, device number 4 [ 325.895501][ T6358] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 327.456915][ T6374] loop2: detected capacity change from 0 to 16 [ 327.513998][ T6374] erofs: (device loop2): mounted with root inode @ nid 36. [ 328.437139][ T6379] syz.2.518: attempt to access beyond end of device [ 328.437139][ T6379] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 335.902765][ T6429] loop3: detected capacity change from 0 to 40427 [ 335.943649][ T6429] F2FS-fs (loop3): invalid crc value [ 335.961036][ T6429] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.017878][ T6429] F2FS-fs (loop3): Start checkpoint disabled! [ 336.204535][ T6429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 336.651434][ T6436] syz.3.531: attempt to access beyond end of device [ 336.651434][ T6436] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.666143][ T6436] syz.3.531: attempt to access beyond end of device [ 336.666143][ T6436] loop3: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 336.681380][ T6436] syz.3.531: attempt to access beyond end of device [ 336.681380][ T6436] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 336.695876][ T6436] syz.3.531: attempt to access beyond end of device [ 336.695876][ T6436] loop3: rw=2049, sector=45184, nr_sectors = 32 limit=40427 [ 336.711320][ T6436] syz.3.531: attempt to access beyond end of device [ 336.711320][ T6436] loop3: rw=2049, sector=45224, nr_sectors = 32 limit=40427 [ 336.726051][ T6436] syz.3.531: attempt to access beyond end of device [ 336.726051][ T6436] loop3: rw=2049, sector=45280, nr_sectors = 24 limit=40427 [ 336.740387][ T6436] syz.3.531: attempt to access beyond end of device [ 336.740387][ T6436] loop3: rw=2049, sector=45320, nr_sectors = 8 limit=40427 [ 336.754802][ T6436] syz.3.531: attempt to access beyond end of device [ 336.754802][ T6436] loop3: rw=2049, sector=45352, nr_sectors = 8 limit=40427 [ 339.934449][ T6319] syz.0.504 (6319): drop_caches: 1 [ 342.361173][ T11] kworker/u4:1: attempt to access beyond end of device [ 342.361173][ T11] loop3: rw=2049, sector=45360, nr_sectors = 8 limit=40427 [ 342.478395][ T11] kworker/u4:1: attempt to access beyond end of device [ 342.478395][ T11] loop3: rw=2049, sector=45376, nr_sectors = 8 limit=40427 [ 342.504026][ T4260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.518178][ T4260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.536020][ T4260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.545546][ T4260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.557396][ T4260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.568859][ T4260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.673964][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 344.704800][ T6478] tty tty23: ldisc open failed (-12), clearing slot 22 [ 345.764526][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 346.594449][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.616381][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.652639][ T6471] device bridge_slave_0 entered promiscuous mode [ 346.687338][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.718444][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.745533][ T6471] device bridge_slave_1 entered promiscuous mode [ 346.749051][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 348.153044][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.239075][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.552106][ T6471] team0: Port device team_slave_0 added [ 349.231722][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 349.277502][ T6471] team0: Port device team_slave_1 added [ 349.412609][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.423969][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.454980][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.410574][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.417582][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.476954][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.545509][ T6471] device hsr_slave_0 entered promiscuous mode [ 350.561635][ T6471] device hsr_slave_1 entered promiscuous mode [ 350.574206][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.584432][ T6471] Cannot create hsr debugfs directory [ 352.024985][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 352.695585][ T6471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.759734][ T6471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.798056][ T6471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.833174][ T6471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.002083][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.061584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.079144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.102857][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.133503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.165316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.197221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.205943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.233371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.244053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.253658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.262925][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.270299][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.288801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.364090][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.432159][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.502216][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.762653][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.776513][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.794958][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.871495][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.910228][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.934142][ T6471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.984532][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.021183][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.030793][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.229001][ T6570] loop3: detected capacity change from 0 to 1024 [ 360.236913][ T6570] EXT4-fs: Ignoring removed orlov option [ 360.307446][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.353150][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.378194][ T6570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 360.414376][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.332024][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 362.295150][ T5455] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 362.800963][ T5455] usb 2-1: Using ep0 maxpacket: 8 [ 363.270129][ T5455] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 363.352665][ T5455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.437064][ T5455] pvrusb2: Hardware description: Terratec Grabster AV400 [ 363.478449][ T5455] pvrusb2: ********** [ 363.482590][ T5455] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 363.503613][ T6605] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 364.266947][ T5455] pvrusb2: Important functionality might not be entirely working. [ 364.266963][ T5455] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 364.266976][ T5455] pvrusb2: ********** [ 364.306399][ T2309] pvrusb2: Invalid write control endpoint [ 364.539218][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.545107][ T6588] pvrusb2: Invalid write control endpoint [ 364.600725][ T4242] usb 2-1: USB disconnect, device number 5 [ 364.812850][ T6614] bond1: (slave gretap1): making interface the new active one [ 364.830008][ T6614] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 364.840891][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 365.950975][ T2309] pvrusb2: Invalid write control endpoint [ 365.957313][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 366.041635][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 366.058412][ T1169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 366.086598][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 366.152963][ T2309] pvrusb2: Device being rendered inoperable [ 366.180922][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 366.211264][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 366.248432][ T1169] usb 4-1: Using ep0 maxpacket: 8 [ 366.307211][ T1169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.320312][ T2309] pvrusb2: Attached sub-driver cx25840 [ 366.375609][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 366.388359][ T1169] usb 4-1: config 0 has no interface number 0 [ 366.394932][ T1169] usb 4-1: config 0 interface 1 has no altsetting 0 [ 366.454023][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 366.533791][ T1169] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 366.546521][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.720348][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.728768][ T1169] usb 4-1: Product: syz [ 367.733111][ T1169] usb 4-1: Manufacturer: syz [ 367.737739][ T1169] usb 4-1: SerialNumber: syz [ 367.838808][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.875376][ T1169] usb 4-1: config 0 descriptor?? [ 367.885978][ T1169] usb 4-1: can't set config #0, error -71 [ 368.224087][ T1169] usb 4-1: USB disconnect, device number 11 [ 368.328168][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.463703][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.485308][ T6471] device veth0_vlan entered promiscuous mode [ 368.509594][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.518064][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.583440][ T6471] device veth1_vlan entered promiscuous mode [ 368.933209][ T6471] device veth0_macvtap entered promiscuous mode [ 369.687836][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.696859][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.778528][ T1169] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 370.834785][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.851333][ T6471] device veth1_macvtap entered promiscuous mode [ 371.077608][ T1169] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.142580][ T1169] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.174859][ T1169] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.052607][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.098853][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.197907][ T1169] usb 4-1: can't set config #27, error -71 [ 372.198309][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.323735][ T1169] usb 4-1: USB disconnect, device number 12 [ 372.378356][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.677433][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.772770][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.996165][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.177259][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.260274][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.350805][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.382578][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.492947][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.512265][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.523251][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.078436][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.099708][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.118052][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.131964][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.143181][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.154492][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.166773][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.181027][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.191784][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.242051][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.260759][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.282523][ T6471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.291947][ T6471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.303194][ T6471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.317900][ T6471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.463351][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.471934][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.494043][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.511548][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.520219][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.535434][ T6718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.132582][ T6768] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 378.147694][ T6770] loop1: detected capacity change from 0 to 64 [ 378.187101][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.219981][ T4264] Bluetooth: hci4: Unknown advertising packet type: 0x18 [ 378.220065][ T4264] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 378.227654][ T4264] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 378.235206][ T4264] Bluetooth: hci4: Malformed LE Event: 0x0d [ 379.494986][ T6767] loop2: detected capacity change from 0 to 262144 [ 379.504611][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.511018][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.664778][ T6767] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.589 (6767) [ 379.708014][ T6767] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 379.718448][ T6767] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 379.727894][ T6767] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 379.738642][ T6767] BTRFS info (device loop2): trying to use backup root at mount time [ 379.746940][ T6767] BTRFS info (device loop2): turning on sync discard [ 379.753881][ T6767] BTRFS info (device loop2): setting nodatacow, compression disabled [ 379.762311][ T6767] BTRFS info (device loop2): max_inline at 4096 [ 379.768736][ T6767] BTRFS info (device loop2): disabling tree log [ 379.775297][ T6767] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 379.785989][ T6767] BTRFS info (device loop2): trying to use backup root at mount time [ 379.794245][ T6767] BTRFS info (device loop2): using free space tree [ 380.798356][ T26] audit: type=1800 audit(1748890958.231:28): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.592" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 381.128874][ T6767] BTRFS error (device loop2): open_ctree failed: -12 [ 383.196639][ T6806] loop1: detected capacity change from 0 to 2048 [ 383.264749][ T6590] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by udevd (6590) [ 384.548556][ T6818] sctp: failed to load transform for md5: -2 [ 384.640550][ T6806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.282804][ T6835] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 386.330725][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 387.642496][ T6844] device veth3 entered promiscuous mode [ 389.858150][ T6867] loop2: detected capacity change from 0 to 2048 [ 391.574654][ T6877] loop5: detected capacity change from 0 to 262144 [ 391.601656][ T6877] BTRFS info (device loop5): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 391.611919][ T6877] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 391.621348][ T6877] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 391.632610][ T6877] BTRFS info (device loop5): trying to use backup root at mount time [ 391.640999][ T6877] BTRFS info (device loop5): turning on sync discard [ 391.647778][ T6877] BTRFS info (device loop5): setting nodatacow, compression disabled [ 391.656275][ T6877] BTRFS info (device loop5): max_inline at 4096 [ 391.662617][ T6877] BTRFS info (device loop5): disabling tree log [ 391.669171][ T6877] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 391.679934][ T6877] BTRFS info (device loop5): trying to use backup root at mount time [ 391.688495][ T6877] BTRFS info (device loop5): using free space tree [ 392.268885][ T6877] BTRFS info (device loop5): checking UUID tree [ 393.318761][ T5455] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 393.396000][ T6471] BTRFS info (device loop5): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 393.620604][ T5455] usb 3-1: Using ep0 maxpacket: 8 [ 393.627962][ T5455] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 393.658049][ T5455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.749946][ T5455] usb 3-1: config 0 descriptor?? [ 393.997252][ T6918] loop2: detected capacity change from 0 to 512 [ 394.066782][ T6918] EXT4-fs: Ignoring removed nobh option [ 394.173707][ T6918] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.621: invalid indirect mapped block 256 (level 2) [ 394.196481][ T6918] EXT4-fs (loop2): 2 truncates cleaned up [ 394.288528][ T6918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.362148][ T26] audit: type=1800 audit(1748890971.861:29): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.621" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 394.467898][ T6918] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 394.678764][ T4302] usb 3-1: USB disconnect, device number 3 [ 398.286749][ T6941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 399.046217][ T6968] loop3: detected capacity change from 0 to 262144 [ 399.231164][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 404.844694][ T6892] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by udevd (6892) [ 405.347090][ T7016] loop1: detected capacity change from 0 to 512 [ 405.354236][ T7016] EXT4-fs: Ignoring removed oldalloc option [ 406.385934][ T7016] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 406.395932][ T7016] EXT4-fs (loop1): 1 truncate cleaned up [ 406.401880][ T7016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.420073][ T7016] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.649: Directory hole found for htree leaf block 0 [ 406.752676][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 408.016462][ T7045] loop5: detected capacity change from 0 to 512 [ 409.333281][ T7045] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.658: invalid indirect mapped block 10 (level 1) [ 409.358954][ T7045] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.658: invalid indirect mapped block 8 (level 1) [ 409.373765][ T7045] EXT4-fs (loop5): 1 truncate cleaned up [ 409.379719][ T7045] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 410.932390][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 416.305693][ T7093] loop2: detected capacity change from 0 to 2048 [ 416.338718][ T7093] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 416.401984][ T7094] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.448555][ T6812] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 417.016513][ T7100] loop5: detected capacity change from 0 to 128 [ 417.036001][ T7100] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.087062][ T7100] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 417.110245][ T6812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.149973][ T6812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.228339][ T6812] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 417.525405][ T6812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.573297][ T6812] usb 2-1: config 0 descriptor?? [ 419.081370][ T5424] usb 2-1: USB disconnect, device number 6 [ 426.933103][ T7153] loop5: detected capacity change from 0 to 8192 [ 426.978056][ T7153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 427.092584][ T7153] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 427.341305][ T7153] REISERFS (device loop5): using ordered data mode [ 427.364005][ T7153] reiserfs: using flush barriers [ 427.814074][ T7153] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 429.393283][ T7153] REISERFS warning (device loop5): journal-2004 journal_init: Journal cnode memory allocation failed (73728 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 429.439137][ T7153] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 431.412871][ T7194] loop5: detected capacity change from 0 to 2048 [ 432.187010][ T7199] loop3: detected capacity change from 0 to 64 [ 432.231809][ T7194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 432.754315][ T26] audit: type=1800 audit(1748891010.201:30): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.702" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 433.759181][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 433.869646][ T7219] tipc: Started in network mode [ 433.874673][ T7219] tipc: Node identity -:, cluster identity 4711 [ 433.882359][ T7219] tipc: Enabling of bearer rejected, failed to enable media [ 434.704320][ T7219] loop3: detected capacity change from 0 to 764 [ 437.286585][ T7246] loop3: detected capacity change from 0 to 2048 [ 437.463427][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 437.631446][ T7241] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 437.657330][ T7241] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 286 with error 28 [ 437.684864][ T7241] EXT4-fs (loop3): This should not happen!! Data will be lost [ 437.684864][ T7241] [ 437.718325][ T7241] EXT4-fs (loop3): Total free blocks count 0 [ 437.732571][ T7241] EXT4-fs (loop3): Free/Dirty block details [ 437.767971][ T7241] EXT4-fs (loop3): free_blocks=2415919104 [ 437.815209][ T7241] EXT4-fs (loop3): dirty_blocks=288 [ 437.821035][ T7241] EXT4-fs (loop3): Block reservation details [ 437.827063][ T7241] EXT4-fs (loop3): i_reserved_data_blocks=18 [ 439.561688][ T4343] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 439.757855][ T7281] dlm: no local IP address has been set [ 439.765775][ T7281] dlm: cannot start dlm midcomms -107 [ 439.810745][ T7281] loop5: detected capacity change from 0 to 16 [ 439.828714][ T7281] erofs: (device loop5): erofs_init_device: empty device tag @ pos 0 [ 440.112137][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.119212][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.346185][ T6565] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.676692][ T7293] cgroup: name respecified [ 443.824490][ T4264] Bluetooth: hci5: command 0x0405 tx timeout [ 445.484553][ T7316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.883223][ T7343] loop1: detected capacity change from 0 to 32768 [ 448.891205][ T7343] XFS: ikeep mount option is deprecated. [ 449.161387][ T7343] XFS (loop1): Mounting V5 Filesystem [ 449.664825][ T7343] XFS (loop1): Ending clean mount [ 449.678605][ T7343] XFS (loop1): Quotacheck needed: Please wait. [ 449.838371][ T7343] XFS (loop1): Quotacheck: Done. [ 450.769526][ T7349] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 450.836738][ T4253] XFS (loop1): Unmounting Filesystem [ 450.884478][ T7349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.987176][ T7360] bond2: (slave gretap2): making interface the new active one [ 450.996435][ T7360] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 451.090518][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 453.577779][ T7387] loop3: detected capacity change from 0 to 2048 [ 454.448588][ T7387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.130414][ T7388] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 455.168381][ T7388] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 456.671733][ T7402] loop3: detected capacity change from 0 to 1024 [ 458.934637][ T7424] loop5: detected capacity change from 0 to 16 [ 459.234199][ T7424] erofs: (device loop5): mounted with root inode @ nid 36. [ 460.060774][ T7424] syz.5.758: attempt to access beyond end of device [ 460.060774][ T7424] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 461.312102][ T7438] loop5: detected capacity change from 0 to 8 [ 462.957865][ T7438] SQUASHFS error: zstd decompression failed, data probably corrupt [ 462.967739][ T7438] SQUASHFS error: Failed to read block 0x4ec: -5 [ 462.974256][ T7438] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 462.981757][ T7438] SQUASHFS error: Unable to read inode 0x2011f [ 463.297471][ T7445] loop1: detected capacity change from 0 to 40427 [ 463.433776][ T7445] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 463.442106][ T7445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 463.482653][ T7445] F2FS-fs (loop1): invalid crc value [ 463.510987][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 463.558666][ T7443] device bridge_slave_1 left promiscuous mode [ 463.581318][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.601319][ T7445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 463.652421][ T7445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 463.659660][ T7445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 466.080697][ T7443] device bridge_slave_0 left promiscuous mode [ 466.086960][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.555422][ T7466] loop5: detected capacity change from 0 to 512 [ 466.619765][ T7466] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 466.845647][ T7472] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 466.886345][ T7466] EXT4-fs (loop5): 1 orphan inode deleted [ 466.908586][ T7466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 466.931755][ T4322] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 466.957484][ T7466] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.267180][ T7480] rdma_op ffff8880745ae9f0 conn xmit_rdma 0000000000000000 [ 467.947967][ T7475] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 467.957014][ T4264] Bluetooth: hci5: command 0x0406 tx timeout [ 468.128503][ T4322] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 1 [ 469.443824][ T7472] device veth3 entered promiscuous mode [ 469.527308][ T7472] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 469.981111][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 478.588676][ T7550] loop3: detected capacity change from 0 to 2048 [ 478.642654][ T7550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.473999][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.798'. [ 481.912360][ T7590] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.802'. [ 482.148570][ T26] audit: type=1326 audit(1748891059.641:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.5.801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x0 [ 482.345235][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.5.801'. [ 484.198977][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 484.208690][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 485.733293][ T7613] device team_slave_0 entered promiscuous mode [ 485.739924][ T7613] device team_slave_1 entered promiscuous mode [ 485.953306][ T7613] device vlan2 entered promiscuous mode [ 485.977644][ T7613] device team0 entered promiscuous mode [ 488.295596][ T7637] loop1: detected capacity change from 0 to 512 [ 488.379097][ T7637] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.816: invalid indirect mapped block 256 (level 2) [ 488.412329][ T7637] EXT4-fs (loop1): 2 truncates cleaned up [ 488.446340][ T7637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 489.608605][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 495.192470][ T7705] overlayfs: failed to clone upperpath [ 499.377485][ T7736] Device name cannot be null; rc = [-22] [ 502.737509][ T7756] syz.1.847 (7756): drop_caches: 2 [ 502.934192][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.950908][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.206188][ T7760] loop1: detected capacity change from 0 to 4096 [ 503.894059][ T7742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.968833][ T7742] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 504.445882][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 509.342907][ T26] audit: type=1326 audit(1748891086.841:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7fc00000 [ 509.694380][ T7822] loop5: detected capacity change from 0 to 256 [ 511.291052][ T7834] use of bytesused == 0 is deprecated and will be removed in the future, [ 511.300543][ T7834] use the actual size instead. [ 512.106821][ T7837] loop5: detected capacity change from 0 to 1024 [ 512.174435][ T7837] EXT4-fs: Ignoring removed orlov option [ 512.412959][ T7840] kvm [7839]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 512.425571][ T7837] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 513.280571][ T7854] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 513.328319][ T7854] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 514.285364][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 516.949223][ T7889] bad cache= option: nonw [ 516.949223][ T7889] [ 516.956167][ T7889] CIFS: VFS: bad cache= option: nonw [ 519.979891][ T7911] loop1: detected capacity change from 0 to 16 [ 520.056863][ T7911] erofs: (device loop1): mounted with root inode @ nid 36. [ 521.805503][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.894'. [ 521.844424][ T7921] device vlan2 entered promiscuous mode [ 521.877434][ T7921] device dummy0 entered promiscuous mode [ 523.083049][ T26] audit: type=1326 audit(1748891100.581:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7fc00000 [ 523.723405][ T26] audit: type=1326 audit(1748891100.581:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8e0918e969 code=0x7fc00000 [ 523.853651][ T26] audit: type=1326 audit(1748891100.581:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7fc00000 [ 528.453562][ T7975] input: syz1 as /devices/virtual/input/input7 [ 536.332115][ T8043] capability: warning: `syz.5.928' uses deprecated v2 capabilities in a way that may be insecure [ 544.285010][ T8095] xt_l2tp: unknown flags: 17 [ 544.797961][ T8098] Illegal XDP return value 2778049315 on prog (id 198) dev N/A, expect packet loss! [ 547.262986][ T8113] loop5: detected capacity change from 0 to 40427 [ 547.282350][ T8113] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 547.290289][ T8113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 547.300200][ T8113] F2FS-fs (loop5): invalid crc value [ 547.381896][ T8113] F2FS-fs (loop5): Found nat_bits in checkpoint [ 547.469130][ T8113] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 547.476333][ T8113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 549.521236][ T6471] syz-executor: attempt to access beyond end of device [ 549.521236][ T6471] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 549.823849][ T4264] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 550.949749][ T8156] device bond2 entered promiscuous mode [ 550.955722][ T8156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.953149][ T4264] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 553.963708][ T4264] Bluetooth: hci2: Injecting HCI hardware error event [ 554.948424][ T4272] Bluetooth: hci2: hardware error 0x00 [ 556.894002][ T8224] loop1: detected capacity change from 0 to 8 [ 557.079233][ T4272] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 562.994218][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000716][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.793343][ T8281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 565.302463][ T8274] kvm [8273]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xbf00 [ 565.311791][ T8274] kvm [8273]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xff00 [ 566.706538][ T8285] loop3: detected capacity change from 0 to 32768 [ 568.821820][ T8323] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 571.414846][ T8352] xt_l2tp: unknown flags: 17 [ 571.859462][ T8356] loop5: detected capacity change from 0 to 8 [ 571.898118][ T8356] SQUASHFS error: lzo decompression failed, data probably corrupt [ 571.907029][ T8356] SQUASHFS error: Failed to read block 0x0: -5 [ 571.918078][ T8356] SQUASHFS error: lzo decompression failed, data probably corrupt [ 571.926388][ T8356] SQUASHFS error: Failed to read block 0x0: -5 [ 571.932974][ T26] audit: type=1800 audit(1748891149.433:36): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1013" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 572.195267][ T8368] loop3: detected capacity change from 0 to 512 [ 573.024243][ T8368] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1016: casefold flag without casefold feature [ 574.353623][ T8368] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1016: couldn't read orphan inode 15 (err -117) [ 574.383499][ T8376] block nbd5: NBD_DISCONNECT [ 574.419616][ T8368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 575.244770][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 577.872818][ T8402] xt_l2tp: unknown flags: 17 [ 579.371129][ T8401] loop1: detected capacity change from 0 to 32768 [ 584.874135][ T8446] vivid-000: disconnect [ 585.446974][ T8443] vivid-000: reconnect [ 587.069658][ T8463] overlayfs: failed to clone upperpath [ 588.185556][ T8466] block nbd3: NBD_DISCONNECT [ 590.911268][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 591.260308][ T8481] loop5: detected capacity change from 0 to 32768 [ 592.826196][ T8501] vivid-000: disconnect [ 593.852804][ T8495] vivid-000: reconnect [ 593.893689][ T8504] fuse: Bad value for 'fd' [ 596.547539][ T8520] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 597.090722][ T8517] Process accounting resumed [ 598.754529][ T8539] netlink: 'syz.5.1059': attribute type 2 has an invalid length. [ 598.911886][ T8537] block nbd1: NBD_DISCONNECT [ 599.673479][ T8539] loop5: detected capacity change from 0 to 512 [ 599.802336][ T8539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.060598][ T8539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 600.088567][ T8539] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.150115][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 603.319326][ T8570] xt_NFQUEUE: number of total queues is 0 [ 603.806806][ T8572] loop1: detected capacity change from 0 to 512 [ 603.887389][ T8572] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1067: casefold flag without casefold feature [ 604.025619][ T8572] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1067: couldn't read orphan inode 15 (err -117) [ 604.043721][ T8572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 605.268993][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 611.723797][ T8627] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 611.733372][ T8627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 611.743145][ T8627] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 611.753812][ T26] audit: type=1800 audit(1748891189.214:37): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1082" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 611.862324][ T8627] syz.3.1082 (8627) used greatest stack depth: 17160 bytes left [ 616.149219][ T26] audit: type=1326 audit(1748891193.644:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 616.306114][ T26] audit: type=1326 audit(1748891193.644:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 616.395064][ T26] audit: type=1326 audit(1748891193.644:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 617.548366][ T26] audit: type=1326 audit(1748891193.644:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 617.913278][ T26] audit: type=1326 audit(1748891193.644:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 619.378242][ T26] audit: type=1326 audit(1748891193.644:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939c98e969 code=0x7fc00000 [ 624.566975][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.573421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.473302][ T8770] netlink: 'syz.4.1124': attribute type 2 has an invalid length. [ 631.315522][ T8778] loop1: detected capacity change from 0 to 1024 [ 638.271126][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'. [ 638.952110][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.697182][ T5425] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 648.287149][ T5425] usb 6-1: Using ep0 maxpacket: 16 [ 648.293954][ T5425] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 648.314115][ T5425] usb 6-1: config 0 has no interface number 0 [ 648.438188][ T5425] usb 6-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 648.852675][ T5425] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 648.886731][ T5425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.923181][ T5425] usb 6-1: Product: syz [ 648.937973][ T5425] usb 6-1: Manufacturer: syz [ 649.118968][ T5425] usb 6-1: SerialNumber: syz [ 649.188301][ T5425] usb 6-1: config 0 descriptor?? [ 649.194125][ T8880] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 650.946702][ T5425] usb 6-1: can't set config #0, error -71 [ 650.997257][ T5425] usb 6-1: USB disconnect, device number 2 [ 652.064019][ T8900] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1170'. [ 657.146542][ T8944] SET target dimension over the limit! [ 657.885028][ T8945] device bridge1 entered promiscuous mode [ 658.554878][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 660.076716][ T8968] rdma_op ffff8880557851f0 conn xmit_rdma 0000000000000000 [ 660.890803][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 662.400267][ T8982] loop1: detected capacity change from 0 to 512 [ 665.419108][ T8982] EXT4-fs: failed to create workqueue [ 665.463511][ T8982] EXT4-fs (loop1): mount failed [ 668.137177][ T9026] loop5: detected capacity change from 0 to 1024 [ 668.177080][ T9026] EXT4-fs: Ignoring removed orlov option [ 670.509859][ T9047] device gtp0 entered promiscuous mode [ 672.744060][ T26] audit: type=1326 audit(2000000018.071:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 673.127004][ T9055] overlayfs: failed to clone upperpath [ 674.792093][ T26] audit: type=1326 audit(2000000018.071:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 674.814898][ T26] audit: type=1326 audit(2000000018.071:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.064437][ T26] audit: type=1326 audit(2000000018.071:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.088333][ T26] audit: type=1326 audit(2000000018.071:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.111263][ T26] audit: type=1326 audit(2000000018.071:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.145395][ T26] audit: type=1326 audit(2000000018.071:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.221185][ T9066] loop1: detected capacity change from 0 to 128 [ 675.347570][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.490195][ T26] audit: type=1326 audit(2000000018.071:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 675.790329][ T26] audit: type=1326 audit(2000000018.101:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 676.296853][ T26] audit: type=1326 audit(2000000018.411:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0918e969 code=0x7ffc0000 [ 676.317426][ T9080] overlayfs: failed to clone upperpath [ 676.701772][ T9088] netlink: 'syz.2.1208': attribute type 16 has an invalid length. [ 681.511802][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.525572][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.445538][ T9156] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 685.867446][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.873811][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.273016][ T9176] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1232'. [ 687.288191][ T9162] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 688.779417][ T9162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.885964][ T9169] bond3: (slave gretap2): making interface the new active one [ 688.956329][ T9169] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 689.014713][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 689.253967][ T9194] loop5: detected capacity change from 0 to 8192 [ 689.821097][ T9194] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 690.153145][ T9194] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 690.169537][ T9194] REISERFS (device loop5): using ordered data mode [ 690.205064][ T9194] reiserfs: using flush barriers [ 690.212416][ T9194] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 690.265466][ T9194] REISERFS (device loop5): checking transaction log (loop5) [ 690.308322][ T9194] REISERFS (device loop5): Using r5 hash to sort names [ 690.340189][ T9194] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 691.814184][ T9219] loop1: detected capacity change from 0 to 1024 [ 691.919125][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 691.919143][ T26] audit: type=1326 audit(2000000037.242:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.093433][ T9222] loop5: detected capacity change from 0 to 512 [ 692.254325][ T26] audit: type=1326 audit(2000000037.242:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.292561][ T26] audit: type=1326 audit(2000000037.282:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.499315][ T26] audit: type=1326 audit(2000000037.282:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.700441][ T26] audit: type=1326 audit(2000000037.282:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.950262][ T6690] hfsplus: b-tree write err: -5, ino 4 [ 692.957343][ T26] audit: type=1326 audit(2000000037.282:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 692.983584][ T26] audit: type=1326 audit(2000000037.282:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 693.023965][ T9222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042c11c, mo2=0002] [ 693.042714][ T26] audit: type=1326 audit(2000000037.282:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 693.085447][ T26] audit: type=1326 audit(2000000037.282:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 693.114897][ T26] audit: type=1326 audit(2000000037.392:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x7ffc0000 [ 693.890291][ T9222] System zones: 0-2, 18-18, 34-34 [ 694.716091][ T9222] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1242: bg 0: block 248: padding at end of block bitmap is not set [ 694.926336][ T9222] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1242: Failed to acquire dquot type 1 [ 694.974925][ T9222] EXT4-fs (loop5): 1 truncate cleaned up [ 694.981135][ T9222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 696.031248][ T9222] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.302809][ T9250] device batadv0 entered promiscuous mode [ 696.370555][ T9250] device vlan3 entered promiscuous mode [ 696.529094][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 696.566862][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 696.837920][ T9265] random: crng reseeded on system resumption [ 699.574503][ T9275] loop1: detected capacity change from 0 to 256 [ 700.507348][ T9275] FAT-fs (loop1): Directory bread(block 64) failed [ 700.514724][ T9275] FAT-fs (loop1): Directory bread(block 65) failed [ 700.523134][ T9275] FAT-fs (loop1): Directory bread(block 66) failed [ 700.530494][ T9275] FAT-fs (loop1): Directory bread(block 67) failed [ 700.538589][ T9275] FAT-fs (loop1): Directory bread(block 68) failed [ 700.546051][ T9275] FAT-fs (loop1): Directory bread(block 69) failed [ 700.554542][ T9275] FAT-fs (loop1): Directory bread(block 70) failed [ 700.561762][ T9275] FAT-fs (loop1): Directory bread(block 71) failed [ 700.568996][ T9275] FAT-fs (loop1): Directory bread(block 72) failed [ 700.576620][ T9275] FAT-fs (loop1): Directory bread(block 73) failed [ 700.641865][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.412669][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.625195][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.633141][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.623462][ T9287] loop5: detected capacity change from 0 to 512 [ 703.745129][ T9287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042c11c, mo2=0002] [ 703.766973][ T9287] System zones: 0-2, 18-18, 34-34 [ 703.800451][ T9287] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1259: bg 0: block 248: padding at end of block bitmap is not set [ 703.864872][ T9287] __quota_error: 7 callbacks suppressed [ 703.864891][ T9287] Quota error (device loop5): write_blk: dquota write failed [ 703.900588][ T9287] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 703.952303][ T9287] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1259: Failed to acquire dquot type 1 [ 704.976392][ T9287] EXT4-fs (loop5): 1 truncate cleaned up [ 704.994156][ T9287] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 705.014299][ T9287] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.155965][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 707.458455][ T9328] loop5: detected capacity change from 0 to 1024 [ 708.334898][ T26] audit: type=1326 audit(2000000053.663:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 709.053115][ T26] audit: type=1326 audit(2000000053.663:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 709.092402][ T26] audit: type=1326 audit(2000000053.693:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 709.129388][ T26] audit: type=1326 audit(2000000053.693:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 709.306027][ T6704] hfsplus: b-tree write err: -5, ino 4 [ 710.033782][ T26] audit: type=1326 audit(2000000053.693:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 710.135121][ T26] audit: type=1326 audit(2000000053.693:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 710.170145][ T26] audit: type=1326 audit(2000000053.693:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 710.253756][ T26] audit: type=1326 audit(2000000053.693:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 713.366519][ T26] audit: type=1326 audit(2000000053.693:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 713.781691][ T26] audit: type=1326 audit(2000000053.873:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 714.167084][ T26] audit: type=1326 audit(2000000053.873:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 714.295220][ T26] audit: type=1326 audit(2000000053.923:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 714.318114][ T26] audit: type=1326 audit(2000000053.923:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 714.340844][ T26] audit: type=1326 audit(2000000053.923:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 714.365011][ T26] audit: type=1326 audit(2000000053.923:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.5.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f865cf8e969 code=0x7ffc0000 [ 718.664101][ T9393] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 721.795158][ T9409] loop1: detected capacity change from 0 to 64 [ 727.970326][ T9456] loop1: detected capacity change from 0 to 1024 [ 728.000020][ T9456] EXT4-fs: inline encryption not supported [ 728.021324][ T9456] EXT4-fs: Ignoring removed bh option [ 728.109403][ T9456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 730.341727][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 730.478107][ T5427] libceph: connect (1)[c::]:6789 error -101 [ 730.505861][ T5427] libceph: mon0 (1)[c::]:6789 connect error [ 730.538945][ T9473] ceph: No mds server is up or the cluster is laggy [ 730.551729][ T5427] libceph: connect (1)[c::]:6789 error -101 [ 730.786375][ T5427] libceph: mon0 (1)[c::]:6789 connect error [ 731.143065][ T22] libceph: connect (1)[c::]:6789 error -101 [ 731.151755][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 731.738288][ T5427] libceph: connect (1)[c::]:6789 error -101 [ 731.878758][ T5427] libceph: mon0 (1)[c::]:6789 connect error [ 734.746336][ T9513] loop5: detected capacity change from 0 to 2048 [ 734.824404][ T9513] UDF-fs: bad mount option "umask=000000000¡4p"dmode=00000000000000000000011" or missing value [ 736.038883][ T9519] loop1: detected capacity change from 0 to 32768 [ 737.702896][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 740.992089][ T6807] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 741.545555][ T6807] usb 2-1: Using ep0 maxpacket: 8 [ 742.305951][ T9552] loop5: detected capacity change from 0 to 40427 [ 742.325236][ T9552] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 742.346809][ T9552] F2FS-fs (loop5): invalid crc value [ 742.863274][ T9552] F2FS-fs (loop5): Found nat_bits in checkpoint [ 742.988842][ T6807] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 743.009356][ T9552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 743.408153][ T6807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.648966][ T6471] syz-executor: attempt to access beyond end of device [ 743.648966][ T6471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 743.686098][ T6807] usb 2-1: config 0 descriptor?? [ 743.746673][ T6807] usb 2-1: can't set config #0, error -71 [ 743.798713][ T6807] usb 2-1: USB disconnect, device number 7 [ 747.568778][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.575287][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.068002][ T9588] loop5: detected capacity change from 0 to 512 [ 748.121935][ T9588] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 748.771114][ T9588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 748.921664][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 748.941966][ T9588] System zones: 1-12 [ 749.042914][ T9588] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 749.187124][ T9588] EXT4-fs (loop5): 1 truncate cleaned up [ 749.241793][ T9588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 750.917332][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 752.801660][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 753.443739][ T9625] --map-set only usable from mangle table [ 753.885496][ T9630] loop1: detected capacity change from 0 to 64 [ 759.107026][ T9663] random: crng reseeded on system resumption [ 763.501828][ T9679] loop5: detected capacity change from 0 to 40427 [ 763.525215][ T9679] F2FS-fs (loop5): invalid crc value [ 764.183088][ T9679] F2FS-fs (loop5): Found nat_bits in checkpoint [ 764.225904][ T9679] F2FS-fs (loop5): Start checkpoint disabled! [ 764.241135][ T9679] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 766.842449][ T9698] loop1: detected capacity change from 0 to 2048 [ 766.995990][ T9698] EXT4-fs: Ignoring removed mblk_io_submit option [ 767.467282][ T6696] kworker/u4:21: attempt to access beyond end of device [ 767.467282][ T6696] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 767.482803][ T6696] kworker/u4:21: attempt to access beyond end of device [ 767.482803][ T6696] loop5: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 767.512583][ T9698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 767.561911][ T9697] random: crng reseeded on system resumption [ 767.700420][ T26] audit: type=1326 audit(2000000113.026:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="+}[@" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9b558e969 code=0x0 [ 768.370343][ C0] hrtimer: interrupt took 58053 ns [ 768.607548][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 772.983748][ T9731] could not allocate digest TFM handle cbcmac-aes-neon [ 777.671238][ T9769] loop5: detected capacity change from 0 to 1024 [ 777.773859][ T9769] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 778.586378][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 780.561699][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1394'. [ 781.632302][ T9806] loop1: detected capacity change from 0 to 64 [ 783.307046][ T9807] syz.1.1397: attempt to access beyond end of device [ 783.307046][ T9807] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 783.322276][ T9807] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 786.973246][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 786.981746][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.978546][ T9855] loop5: detected capacity change from 0 to 64 [ 789.209322][ T5427] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 789.482677][ T5427] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.556136][ T5427] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.868131][ T5427] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.295150][ T5427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.530900][ T5427] usb 2-1: config 0 descriptor?? [ 794.230428][ T22] usb 2-1: USB disconnect, device number 8 [ 795.254146][ T9887] xt_TCPMSS: Only works on TCP SYN packets [ 798.563134][ T9909] overlayfs: failed to clone upperpath [ 800.726973][ T9912] loop5: detected capacity change from 0 to 40427 [ 800.743971][ T9912] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 800.770826][ T9912] F2FS-fs (loop5): invalid crc value [ 800.844496][ T9912] F2FS-fs (loop5): Found nat_bits in checkpoint [ 800.958268][ T9912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 803.918504][ T9934] overlayfs: failed to clone lowerpath [ 804.157901][ T9934] overlayfs: failed to clone upperpath [ 804.965309][ T6471] syz-executor: attempt to access beyond end of device [ 804.965309][ T6471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 805.686397][ T9955] loop1: detected capacity change from 0 to 8 [ 805.848496][ T9955] SQUASHFS error: zlib decompression failed, data probably corrupt [ 805.857082][ T9955] SQUASHFS error: Failed to read block 0x9b: -5 [ 805.863736][ T9955] SQUASHFS error: Unable to read metadata cache entry [99] [ 805.871278][ T9955] SQUASHFS error: Unable to read inode 0x127 [ 807.152045][ T9964] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 808.741644][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.748523][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.772263][T10008] loop1: detected capacity change from 0 to 40427 [ 812.825814][T10008] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 812.845013][T10008] F2FS-fs (loop1): invalid crc value [ 812.960027][T10008] F2FS-fs (loop1): Found nat_bits in checkpoint [ 813.096226][T10008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 813.632076][ T4253] syz-executor: attempt to access beyond end of device [ 813.632076][ T4253] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 819.215710][T10047] could not allocate digest TFM handle cbcmac-aes-neon [ 820.796241][T10067] loop1: detected capacity change from 0 to 64 [ 820.980608][T10071] syz.1.1466: attempt to access beyond end of device [ 820.980608][T10071] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 820.994837][T10071] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 822.537182][T10081] fuse: Bad value for 'fd' [ 822.953184][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 828.571178][T10128] loop1: detected capacity change from 0 to 64 [ 829.673142][T10136] overlayfs: failed to clone upperpath [ 830.980714][T10144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.910558][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 832.287759][T10173] loop1: detected capacity change from 0 to 64 [ 833.907485][T10176] syz.1.1494: attempt to access beyond end of device [ 833.907485][T10176] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 833.921514][T10176] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 834.087670][T10166] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 834.210736][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 834.464997][T10166] team0: Port device geneve0 added [ 836.392719][T10196] loop1: detected capacity change from 0 to 2048 [ 836.521234][T10196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 836.913328][T10202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 836.930628][T10202] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 742 with error 28 [ 836.943679][T10202] EXT4-fs (loop1): This should not happen!! Data will be lost [ 836.943679][T10202] [ 836.953366][T10202] EXT4-fs (loop1): Total free blocks count 0 [ 836.959479][T10202] EXT4-fs (loop1): Free/Dirty block details [ 836.965440][T10202] EXT4-fs (loop1): free_blocks=2415919104 [ 836.971388][T10202] EXT4-fs (loop1): dirty_blocks=752 [ 836.976733][T10202] EXT4-fs (loop1): Block reservation details [ 836.982918][T10202] EXT4-fs (loop1): i_reserved_data_blocks=47 [ 837.450097][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 66 with max blocks 44 with error 28 [ 839.187152][T10218] loop5: detected capacity change from 0 to 64 [ 841.178286][T10219] syz.5.1508: attempt to access beyond end of device [ 841.178286][T10219] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 841.192405][T10219] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 841.729483][T10227] loop1: detected capacity change from 0 to 64 [ 843.382536][T10228] syz.1.1511: attempt to access beyond end of device [ 843.382536][T10228] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 843.398534][T10228] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 843.722194][T10231] loop5: detected capacity change from 0 to 512 [ 843.750323][T10231] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 844.837470][T10235] autofs4:pid:10235:autofs_fill_super: called with bogus options [ 844.859397][T10235] netlink: 'syz.2.1513': attribute type 3 has an invalid length. [ 844.867767][T10235] netlink: 'syz.2.1513': attribute type 3 has an invalid length. [ 845.858577][T10240] overlayfs: failed to clone upperpath [ 845.868934][T10245] xt_ecn: cannot match TCP bits for non-tcp packets [ 845.895313][T10248] tipc: Started in network mode [ 845.900310][T10248] tipc: Node identity ac14140f, cluster identity 4711 [ 845.907703][T10248] tipc: New replicast peer: 172.30.1.5 [ 845.913858][T10248] tipc: Enabled bearer , priority 10 [ 846.957548][ T14] tipc: Node number set to 2886997007 [ 848.593585][T10268] overlayfs: failed to clone upperpath [ 849.365071][T10275] overlayfs: unrecognized mount option "/" or missing value [ 850.423183][T10281] loop1: detected capacity change from 0 to 128 [ 850.508256][T10281] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 850.531187][T10281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 850.622506][T10286] loop5: detected capacity change from 0 to 64 [ 852.707377][T10296] syz.5.1528: attempt to access beyond end of device [ 852.707377][T10296] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 852.721313][T10296] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 853.294953][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1534'. [ 856.768440][T10325] loop5: detected capacity change from 0 to 16 [ 856.796082][T10324] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 856.844247][T10325] erofs: (device loop5): mounted with root inode @ nid 36. [ 857.078213][T10324] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 857.157586][T10332] syz.5.1539: attempt to access beyond end of device [ 857.157586][T10332] loop5: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 857.178922][T10332] syz.5.1539: attempt to access beyond end of device [ 857.178922][T10332] loop5: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 857.198510][T10332] syz.5.1539: attempt to access beyond end of device [ 857.198510][T10332] loop5: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 857.974451][T10333] device veth3 entered promiscuous mode [ 857.984459][ T6704] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 857.997326][T10331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.195943][ T6696] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 858.210129][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 858.418863][T10337] loop1: detected capacity change from 0 to 65536 [ 858.547310][T10337] XFS (loop1): Mounting V5 Filesystem [ 858.575196][T10342] loop5: detected capacity change from 0 to 64 [ 860.175878][T10337] XFS (loop1): Ending clean mount [ 860.202367][T10348] syz.5.1541: attempt to access beyond end of device [ 860.202367][T10348] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 860.217396][T10348] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 862.139139][T10366] loop5: detected capacity change from 0 to 4096 [ 864.344659][T10369] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 864.441968][ T26] audit: type=1800 audit(2000000047.572:93): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1546" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 866.103648][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.117941][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.525868][ T4253] XFS (loop1): Unmounting Filesystem [ 868.566794][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1556'. [ 870.731265][T10412] loop1: detected capacity change from 0 to 64 [ 872.406666][T10413] syz.1.1557: attempt to access beyond end of device [ 872.406666][T10413] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 872.421113][T10413] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 874.319086][T10426] loop5: detected capacity change from 0 to 64 [ 875.865386][T10427] syz.5.1576: attempt to access beyond end of device [ 875.865386][T10427] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 875.879977][T10427] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 882.790532][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 886.187759][T10520] loop5: detected capacity change from 0 to 128 [ 886.219820][T10520] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 886.283169][T10520] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 886.789759][ T26] audit: type=1326 audit(2000000071.540:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 886.875130][ T26] audit: type=1326 audit(2000000071.540:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 887.872572][ T26] audit: type=1326 audit(2000000071.540:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 887.969070][ T26] audit: type=1326 audit(2000000071.540:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 888.084867][ T26] audit: type=1326 audit(2000000071.540:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 888.196180][ T26] audit: type=1326 audit(2000000071.573:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 888.267849][ T26] audit: type=1326 audit(2000000071.573:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 888.360881][ T26] audit: type=1326 audit(2000000071.573:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 888.481724][ T26] audit: type=1326 audit(2000000071.573:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 890.442180][ T26] audit: type=1326 audit(2000000071.573:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f40d8e969 code=0x7ffc0000 [ 895.311363][T10584] loop5: detected capacity change from 0 to 4096 [ 895.372159][T10584] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 895.387973][T10584] ntfs3: loop5: Failed to load root. [ 896.911193][T10597] loop5: detected capacity change from 0 to 2048 [ 897.177527][T10597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.998903][T10605] capability: warning: `syz.3.1611' uses 32-bit capabilities (legacy support in use) [ 899.156452][T10613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 902.197737][T10632] loop5: detected capacity change from 0 to 40427 [ 902.231874][T10632] F2FS-fs (loop5): Unrecognized mount option "whint_mode=off" or missing value [ 904.490666][T10638] netlink: 'syz.1.1615': attribute type 9 has an invalid length. [ 906.583902][T10655] tipc: Enabled bearer , priority 0 [ 907.622878][T10428] tipc: Node number set to 1835347501 [ 910.605406][T10677] overlayfs: missing 'lowerdir' [ 910.677392][T10677] overlayfs: missing 'lowerdir' [ 912.503958][T10684] loop5: detected capacity change from 0 to 1024 [ 912.528172][T10684] EXT4-fs: Ignoring removed oldalloc option [ 912.742162][T10684] EXT4-fs: Invalid want_extra_isize 65535 [ 913.928793][T10699] loop5: detected capacity change from 0 to 1024 [ 914.483689][T10699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 914.764984][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 915.800368][T10718] lo speed is unknown, defaulting to 1000 [ 915.808970][T10718] lo speed is unknown, defaulting to 1000 [ 915.833467][T10718] lo speed is unknown, defaulting to 1000 [ 915.871627][T10718] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 915.920022][T10718] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 916.365614][T10721] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 916.428864][T10718] lo speed is unknown, defaulting to 1000 [ 916.438351][T10718] lo speed is unknown, defaulting to 1000 [ 916.446398][T10718] lo speed is unknown, defaulting to 1000 [ 916.453433][T10718] lo speed is unknown, defaulting to 1000 [ 916.460643][T10718] lo speed is unknown, defaulting to 1000 [ 916.467537][T10718] lo speed is unknown, defaulting to 1000 [ 918.503859][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 923.376208][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.382749][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.005255][T10798] Cannot find set identified by id 65535 to match [ 924.616616][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 924.627029][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.634857][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.715232][ T4353] bond2: (slave ip6gretap1): link status up again after 0 ms [ 924.797399][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 926.618106][ T6690] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 926.843094][ T6690] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 927.005635][ T6690] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 927.802513][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 927.904629][ T6690] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 928.241088][ T6716] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 928.272645][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 928.351928][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 929.928992][ T6723] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.092810][ T6723] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 931.128934][ T6723] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 931.238883][T10859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1667'. [ 931.248211][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 931.380873][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 931.585112][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 932.893713][ T6723] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 933.002754][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 933.526769][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.270300][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.774369][ T4343] net_ratelimit: 1 callbacks suppressed [ 934.774389][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.442064][ T6696] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.565908][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.857859][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 936.051122][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 936.652680][T10895] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:21 [ 936.947085][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 937.066399][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 937.168890][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 937.280412][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 938.336274][ T4343] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.063519][ T4370] net_ratelimit: 3 callbacks suppressed [ 940.063541][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.134566][T10924] vivid-007: disconnect [ 940.228238][T10924] 9pnet_virtio: no channels available for device syz [ 940.643344][T10916] vivid-007: reconnect [ 941.771773][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 942.034360][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 942.203119][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 943.397085][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 943.658030][ T6704] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.817058][T10956] loop5: detected capacity change from 0 to 32768 [ 946.312060][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 946.564147][ T6704] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 946.760423][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 946.914436][ T6704] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 947.061244][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 947.268438][ T6704] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 947.836692][T10968] libceph: resolve '400' (ret=-3): failed [ 947.937394][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 947.974271][T10972] ip6t_srh: unknown srh match flags 4000 [ 947.987485][T10972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 947.995356][T10972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 948.120363][ T6716] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 948.271072][ T4557] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 948.595490][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 948.801857][T10982] loop5: detected capacity change from 0 to 64 [ 948.889083][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1701'. [ 950.198665][T11008] [ 950.201335][T11008] ====================================================== [ 950.208465][T11008] WARNING: possible circular locking dependency detected [ 950.215689][T11008] 6.1.140-syzkaller #0 Not tainted [ 950.221080][T11008] ------------------------------------------------------ [ 950.228470][T11008] syz.4.1706/11008 is trying to acquire lock: [ 950.234725][T11008] ffff8880731caec0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 950.245608][T11008] [ 950.245608][T11008] but task is already holding lock: [ 950.252994][T11008] ffff888018ae2e58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 950.263247][T11008] [ 950.263247][T11008] which lock already depends on the new lock. [ 950.263247][T11008] [ 950.273677][T11008] [ 950.273677][T11008] the existing dependency chain (in reverse order) is: [ 950.283056][T11008] [ 950.283056][T11008] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 950.290735][T11008] down_read_killable+0x4c/0x340 [ 950.296431][T11008] mmap_read_lock_killable+0x1d/0x60 [ 950.302379][T11008] lock_mm_and_find_vma+0x2b1/0x2f0 [ 950.308234][T11008] do_user_addr_fault+0x2db/0xb10 [ 950.313984][T11008] exc_page_fault+0x60/0x100 [ 950.319138][T11008] asm_exc_page_fault+0x22/0x30 [ 950.324556][T11008] fault_in_readable+0x13e/0x1f0 [ 950.330054][T11008] fault_in_iov_iter_readable+0xbb/0x2e0 [ 950.336333][T11008] generic_perform_write+0x1d2/0x560 [ 950.342304][T11008] __generic_file_write_iter+0x172/0x430 [ 950.348585][T11008] generic_file_write_iter+0xab/0x2e0 [ 950.354599][T11008] vfs_write+0x44c/0x960 [ 950.359381][T11008] ksys_write+0x143/0x240 [ 950.364612][T11008] do_syscall_64+0x4c/0xa0 [ 950.369673][T11008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.376734][T11008] [ 950.376734][T11008] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 950.386867][T11008] __lock_acquire+0x2cf8/0x7c50 [ 950.392386][T11008] lock_acquire+0x1b4/0x490 [ 950.397738][T11008] down_write+0x36/0x60 [ 950.402496][T11008] process_measurement+0x33c/0x1a10 [ 950.408334][T11008] ima_file_mmap+0x104/0x150 [ 950.413512][T11008] __se_sys_remap_file_pages+0x53e/0x770 [ 950.419822][T11008] do_syscall_64+0x4c/0xa0 [ 950.424893][T11008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.431436][T11008] [ 950.431436][T11008] other info that might help us debug this: [ 950.431436][T11008] [ 950.441873][T11008] Possible unsafe locking scenario: [ 950.441873][T11008] [ 950.449344][T11008] CPU0 CPU1 [ 950.454901][T11008] ---- ---- [ 950.460462][T11008] lock(&mm->mmap_lock); [ 950.464907][T11008] lock(&sb->s_type->i_mutex_key#12); [ 950.473021][T11008] lock(&mm->mmap_lock); [ 950.479905][T11008] lock(&sb->s_type->i_mutex_key#12); [ 950.485662][T11008] [ 950.485662][T11008] *** DEADLOCK *** [ 950.485662][T11008] [ 950.493913][T11008] 1 lock held by syz.4.1706/11008: [ 950.499046][T11008] #0: ffff888018ae2e58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 950.509660][T11008] [ 950.509660][T11008] stack backtrace: [ 950.515659][T11008] CPU: 1 PID: 11008 Comm: syz.4.1706 Not tainted 6.1.140-syzkaller #0 [ 950.523977][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.534251][T11008] Call Trace: [ 950.537658][T11008] [ 950.540706][T11008] dump_stack_lvl+0x168/0x22e [ 950.545633][T11008] ? load_image+0x3b0/0x3b0 [ 950.550173][T11008] ? show_regs_print_info+0x12/0x12 [ 950.555416][T11008] ? print_circular_bug+0x12b/0x1a0 [ 950.560830][T11008] check_noncircular+0x274/0x310 [ 950.565821][T11008] ? add_chain_block+0x940/0x940 [ 950.570938][T11008] ? lockdep_lock+0xdc/0x1e0 [ 950.575571][T11008] ? _find_first_zero_bit+0xcf/0x100 [ 950.580983][T11008] __lock_acquire+0x2cf8/0x7c50 [ 950.585882][T11008] ? ima_match_policy+0x104/0x2100 [ 950.591115][T11008] ? psi_task_switch+0x312/0x6d0 [ 950.596089][T11008] ? verify_lock_unused+0x140/0x140 [ 950.601367][T11008] ? ima_match_policy+0x207a/0x2100 [ 950.606712][T11008] lock_acquire+0x1b4/0x490 [ 950.611340][T11008] ? process_measurement+0x33c/0x1a10 [ 950.616742][T11008] ? __might_sleep+0xd0/0xd0 [ 950.621454][T11008] ? read_lock_is_recursive+0x10/0x10 [ 950.626862][T11008] ? ima_get_action+0x71/0xa0 [ 950.631570][T11008] down_write+0x36/0x60 [ 950.635885][T11008] ? process_measurement+0x33c/0x1a10 [ 950.641375][T11008] process_measurement+0x33c/0x1a10 [ 950.646696][T11008] ? ima_file_mmap+0x150/0x150 [ 950.651485][T11008] ? aa_file_perm+0x117/0xec0 [ 950.656291][T11008] ? mtree_load+0xeb/0xa40 [ 950.660743][T11008] ? mtree_load+0x90a/0xa40 [ 950.665293][T11008] ? aa_get_current_label+0x110/0x1d0 [ 950.670973][T11008] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 950.677171][T11008] ima_file_mmap+0x104/0x150 [ 950.682473][T11008] ? ima_file_free+0x3e0/0x3e0 [ 950.687331][T11008] ? common_file_perm+0x171/0x1c0 [ 950.692513][T11008] ? bpf_lsm_mmap_file+0x5/0x10 [ 950.697522][T11008] ? security_mmap_file+0x11b/0x180 [ 950.703038][T11008] __se_sys_remap_file_pages+0x53e/0x770 [ 950.708900][T11008] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 950.714954][T11008] ? lock_chain_count+0x20/0x20 [ 950.719860][T11008] ? lockdep_hardirqs_on+0x94/0x140 [ 950.725107][T11008] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 950.730951][T11008] do_syscall_64+0x4c/0xa0 [ 950.735401][T11008] ? clear_bhb_loop+0x60/0xb0 [ 950.740099][T11008] ? clear_bhb_loop+0x60/0xb0 [ 950.744988][T11008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.750918][T11008] RIP: 0033:0x7f939c98e969 [ 950.755472][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.775899][T11008] RSP: 002b:00007f939d723038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 950.784345][T11008] RAX: ffffffffffffffda RBX: 00007f939cbb6080 RCX: 00007f939c98e969 [ 950.792688][T11008] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 950.801128][T11008] RBP: 00007f939ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 950.809319][T11008] R10: 000000007ffffffd R11: 0000000000000246 R12: 0000000000000000 [ 950.817322][T11008] R13: 0000000000000001 R14: 00007f939cbb6080 R15: 00007ffc4d84e888 [ 950.825511][T11008] [ 951.279985][ T5282] net_ratelimit: 7 callbacks suppressed [ 951.280001][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 951.447751][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 951.847428][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.389055][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.501691][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.612499][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.715197][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.827084][ T4370] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.938917][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 953.053767][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 955.986480][ T4353] net_ratelimit: 27 callbacks suppressed [ 955.986512][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.108614][ T6710] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.219553][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.322886][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.425206][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.527723][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.629620][ T5282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.732868][ T4354] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.834719][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.937855][ T4353] bond2: (slave ip6gretap1): failed to get link speed/duplex