last executing test programs: 3m31.805939534s ago: executing program 4 (id=89): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3m31.491416928s ago: executing program 4 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'veth0_virt_wifi\x00', &(0x7f0000000600)=@ethtool_gfeatures}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004000bfa200000000000007020000f8ff000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace(0x10, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) 3m30.380291433s ago: executing program 4 (id=97): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) close(r0) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) 3m30.239285594s ago: executing program 4 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)={0x0, 0xfb, 0x59, 0x5, 0x2, "4eb31398fc6eb54a6d0bb0c5a884ec3d", "227a0b4845eda3f5941d345c80a9d8f36b3dbae566ef1611eff167d5f0af50fa9c3668d3dc32d625cdc210636da073140bfb09f1065ff6aa52efbe8f11a42712f728651a"}, 0x59, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 3m28.914048852s ago: executing program 4 (id=101): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000300)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 3m28.551744817s ago: executing program 4 (id=105): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r1 = dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[], 0x58) 3m13.614824396s ago: executing program 32 (id=105): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r1 = dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[], 0x58) 13.936117124s ago: executing program 3 (id=592): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x24}], 0x1}, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 12.760073219s ago: executing program 3 (id=595): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x609a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000740)={0x7, 0x0, [{0x2f3, 0x0, 0x1000}, {0x88b, 0x0, 0x9}, {0x27c, 0x0, 0x9}, {0x3f1, 0x0, 0x4}, {0xc1, 0x0, 0x6}, {0x321, 0x0, 0x3}, {0x27f, 0x0, 0x1ae}]}) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000007c0)=""/105, 0x69}], 0x1, 0x80000001, 0x80000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.675790874s ago: executing program 2 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) times(&(0x7f0000000280)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[], 0x11) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) 10.733226146s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r3, 0x73f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) 8.671996114s ago: executing program 5 (id=601): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x10, r2, 0x0) fanotify_mark(r1, 0x102, 0x48001050, r0, 0x0) 7.924190954s ago: executing program 5 (id=603): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40) 7.860765134s ago: executing program 3 (id=604): r0 = socket(0x2000000000000021, 0x2, 0x40006) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="39385055f297b1b821d35e3953953c15ba3597aee3f47af36cd25c412100150fff4060760242b15ac6e5c5baf85c184666422014b259e17a3e6569291cef20e73257335aeb863379599883237d3fcf646c25", 0x52, 0xfffffffffffffffd) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffd}, 0xffffff66, r2) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @multicast1, 0x0}, &(0x7f0000000280)=0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x1, 0x0, 0x4, r6, 0xf}, 0xc) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100004c2c5a105e047507"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a87000000000000000000000c0009"], 0x3c}, 0x1, 0x11}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000"], 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000080)={0x9, {0xf8000000, 0x4403, 0xda12, 0xffffbfff}}) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 6.248067336s ago: executing program 0 (id=606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x1) 5.771125943s ago: executing program 0 (id=607): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) listxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x4, 0x5ee, &(0x7f0000000f00)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0hJq5ciP+FEtmy0pULN64MCVHD0sQxdzq39ONOS6ftTMP9/ZKh595zL+fczjw5556ecyeA0hrM/qlE7I+I6RTRn+YX8zqjnjm4cNzDvz45m71SVKtv/JEi1fflx6f6z776yT0R8dOPKfZ1rC53Zu7axfGpqcmr9e3h2UvTwzP5gecnL4++NHri+LHjJ0aONHVd1wv2nb75/of9n429/e3Xf6eR734dS3EyXq0fuPQ6tspgDNZ+J2l1Vt+JrS6sTTrqn5Olb3HqLDqyq3WV4rHl71/27jwV/dERj968/vj0tbZWDthW1RRRBUoqiX8oqbwfkN/br7wPrrSlVwK0woNTCwMAq+O/c2FsMHpqYwO7H6ZYOqyTIqK5kbnl9kTEvbtjN8/dHbsZ2zQOBxSbvxERTxfFf6rF/0D0xEAt/ivL4j/rF5yp/8z2v95k+SuHisU/tM5C/PesGf/RIP7fWRL/7zZZ/uCj5Hu9y+K/t9lLAgAAAAAAgNK6cyoiXiz6+39lcf5PFMz/6YuIk1tQ/uCK7dV//6/c34JigAIPTkW8Ujj/t5LP/h3oqKf+U5sP0JXOXZiaPBIR/42IQ9G1K9seWaOMw5/v+6pR3mB9/l/+ysq/V58LWK/H/c5dy8+ZGJ8d3+x1AxEPbkQ8Uzj/Ny22/6mg/b8VEdOPWca+52+fKczoWjv+uzd5bcDaqt9EHCxs/x89tSItPp9j7trhC5fGz08uez7HcK0/MJz3ClZ79uMvvm9U/vrtf7HCR0wAG5K1/7vXjv+BtPR5PTMbL+PoXGe1UV6z/f/u9GbtkTN5H+Gj8dnZqyMR3el0R7Z32f7RjdcZnkR5POTxksX/oefWHv8r6v/3RsT8iv87/bl8TXHu///0/daoPs22/8DmZfE/saH2f+OJ0dsDPzQq//Ha/2O1tv5QfY/xP1hwKw/TFYNlBeHYWZTV6voCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJOgEhF7IlWGFtOVytBQRF9E/C92V6auzMy+cO7KB5cnsrza9/9X8m/67V/YTvn3/w8s2R5dsX00IvZGxJcdvbXtobNXpibaffEAAAAAAAAAAAAAAAAAAACwQ/Q1WP+f+b2j3bUDtl1nuysAtE1B/P/cjnoAraf9h/IS/1Be4h/KS/xDeYl/KC/xD+Ul/qG8xD8AAAAAADxR9h6480uKiPmXe2uvTHc9r6utNQO2W6XdFQDaxiN+oLxM/YHyco8PpHXyexqetN6Za5k+u4mTAQAAAAAAAAAAAKB0Du63/h/Kyvp/KC/r/6G88vX/B9pcD6D13OMDsc5K/sL1/+ueBQAAAAAAAAAAAABspZm5axfHp6Ymr0q8tTOq0cpEtVq9nn0Kdkp9tjyRf8xbU2g+FX5nXPuqRL7Wb2O/OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN3+DQAA//8jqB7U") r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x14ac42) close(0x3) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x31, 0x4) 5.532088126s ago: executing program 1 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.530219366s ago: executing program 5 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 5.284225209s ago: executing program 0 (id=611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x1c0, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x85, 0x2, {{'ecb(cipher_null)\x00'}, 0x1e8, "39bfd76e45b3eefe8986ef297ac4a233959e805c4090bac44ffed85af14a9725f736a18576de9b0bbf920c80c5605c77efdb3fc35cf044d5e763730e1f"}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1c0}}, 0x0) 5.283893239s ago: executing program 1 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10000001c) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, &(0x7f0000000100)) sendfile(r0, r0, 0x0, 0x800000009) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x381001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r3, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) syz_io_uring_setup(0x52c9, &(0x7f0000000180)={0x0, 0x8b0a, 0x100, 0x2, 0x11f, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000280)) 5.283625319s ago: executing program 2 (id=613): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x40, 0x10, 0x1, '\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000600)={0xa0, 0x16, 0x2, "e5de"}, 0x0, 0x0}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 4.411403581s ago: executing program 5 (id=614): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x609a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000740)={0x7, 0x0, [{0x2f3, 0x0, 0x1000}, {0x88b, 0x0, 0x9}, {0x27c, 0x0, 0x9}, {0x3f1, 0x0, 0x4}, {0xc1, 0x0, 0x6}, {0x321, 0x0, 0x3}, {0x27f, 0x0, 0x1ae}]}) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000007c0)=""/105, 0x69}], 0x1, 0x80000001, 0x80000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.006146826s ago: executing program 1 (id=615): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x0, 0x1df, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 2.706477713s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.705844564s ago: executing program 3 (id=617): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) 2.424135088s ago: executing program 0 (id=618): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.19278987s ago: executing program 5 (id=619): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.411080281s ago: executing program 0 (id=620): socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ptrace(0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 1.410768491s ago: executing program 2 (id=621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.364273932s ago: executing program 1 (id=622): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xf8f, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 882.567118ms ago: executing program 3 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 452.395754ms ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) 392.058755ms ago: executing program 5 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@discard}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000000000401, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003f458, 0x700000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(0x0, 0x0) 256.049046ms ago: executing program 2 (id=626): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 233.109807ms ago: executing program 1 (id=627): ioperm(0x80, 0x4, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_emit_ethernet(0x4e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000800)) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000f40)={0x0, 0x6}, 0x8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1ffd, 0x6, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000002c0)={[{@prjquota}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = syz_open_dev$video4linux(0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 94.020928ms ago: executing program 2 (id=628): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x1c0, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x85, 0x2, {{'ecb(cipher_null)\x00'}, 0x1e8, "39bfd76e45b3eefe8986ef297ac4a233959e805c4090bac44ffed85af14a9725f736a18576de9b0bbf920c80c5605c77efdb3fc35cf044d5e763730e1f"}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1c0}}, 0x0) 0s ago: executing program 3 (id=629): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x609a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000740)={0x7, 0x0, [{0x2f3, 0x0, 0x1000}, {0x88b, 0x0, 0x9}, {0x27c, 0x0, 0x9}, {0x3f1, 0x0, 0x4}, {0xc1, 0x0, 0x6}, {0x321, 0x0, 0x3}, {0x27f, 0x0, 0x1ae}]}) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000007c0)=""/105, 0x69}], 0x1, 0x80000001, 0x80000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): urred while creating quota [ 75.706176][ T4327] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.22: Failed to acquire dquot type 1 [ 75.743270][ T4327] EXT4-fs (loop1): 1 truncate cleaned up [ 75.783409][ T7] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 75.791886][ T7] usb 5-1: config 0 has no interface number 0 [ 75.803213][ T7] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 75.814610][ T7] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.827021][ T7] usb 5-1: config 0 interface 41 has no altsetting 0 [ 76.165109][ T4327] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 76.454845][ T4327] syz.1.22 (4327) used greatest stack depth: 20864 bytes left [ 77.027784][ T7] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 77.640947][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.641132][ T4332] loop3: detected capacity change from 0 to 4096 [ 77.824990][ T7] usb 5-1: config 0 descriptor?? [ 77.846086][ T4334] Zero length message leads to an empty skb [ 77.881566][ T4332] ntfs3: Unknown parameter 'windows_names' [ 77.919793][ T7] usb 5-1: can't set config #0, error -71 [ 77.946873][ T7] usb 5-1: USB disconnect, device number 2 [ 77.965923][ T4338] loop2: detected capacity change from 0 to 8 [ 77.987081][ T26] audit: type=1326 audit(1746436406.096:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 78.090537][ T4338] SQUASHFS error: xz decompression failed, data probably corrupt [ 78.098611][ T4338] SQUASHFS error: Failed to read block 0x108: -5 [ 78.105070][ T4338] SQUASHFS error: Unable to read metadata cache entry [106] [ 78.112386][ T4338] SQUASHFS error: Unable to read inode 0x11f [ 78.152783][ T26] audit: type=1326 audit(1746436406.256:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 78.199224][ T26] audit: type=1326 audit(1746436406.256:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 79.848636][ T26] audit: type=1326 audit(1746436406.256:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 80.079197][ T4370] loop0: detected capacity change from 0 to 64 [ 80.790675][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.801298][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.017819][ T4378] loop3: detected capacity change from 0 to 40427 [ 81.121329][ T4378] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.130546][ T4378] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.144580][ T4378] F2FS-fs (loop3): invalid crc value [ 81.156607][ T4386] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 81.210629][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 81.221863][ T4378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.236152][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.243874][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.287363][ T4378] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.294488][ T4378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.354513][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.361951][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.373390][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.380893][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.388525][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.395620][ T1324] cfg80211: failed to load regulatory.db [ 81.396376][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.413526][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.420635][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.429799][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.436934][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.970941][ T4375] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 82.971033][ T4375] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 83.238218][ T4246] Bluetooth: hci4: command 0x0405 tx timeout [ 85.297670][ T4452] loop1: detected capacity change from 0 to 4096 [ 85.339975][ T4457] loop4: detected capacity change from 0 to 16 [ 85.397969][ T4457] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.413107][ T4452] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 85.752088][ T4463] 9pnet: Insufficient options for proto=fd [ 85.848074][ T4464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 85.854887][ T4464] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.973643][ T4464] vhci_hcd vhci_hcd.0: Device attached [ 86.293262][ T1324] vhci_hcd: vhci_device speed not set [ 86.362608][ T1324] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 86.586563][ T4466] vhci_hcd: connection reset by peer [ 86.611875][ T4377] vhci_hcd: stop threads [ 86.617090][ T4377] vhci_hcd: release socket [ 86.743247][ T4447] loop0: detected capacity change from 0 to 32768 [ 86.785532][ T4377] vhci_hcd: disconnect device [ 87.137938][ T4447] XFS (loop0): Mounting V5 Filesystem [ 87.159089][ T4487] loop2: detected capacity change from 0 to 64 [ 87.332304][ T4447] XFS (loop0): Ending clean mount [ 87.388926][ T4447] XFS (loop0): Quotacheck needed: Please wait. [ 87.817681][ T4447] XFS (loop0): Quotacheck: Done. [ 87.937954][ T4167] XFS (loop0): Unmounting Filesystem [ 88.238520][ T4473] loop4: detected capacity change from 0 to 32768 [ 88.530820][ T4507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 91.061804][ T4519] loop2: detected capacity change from 0 to 256 [ 91.363893][ T4524] loop3: detected capacity change from 0 to 8 [ 92.637172][ T4519] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.653762][ T4524] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 93.620450][ T1324] vhci_hcd: vhci_device speed not set [ 93.664880][ T4521] process 'syz.3.75' launched './file2' with NULL argv: empty string added [ 93.675507][ T4521] cramfs: Error -5 while decompressing! [ 93.681368][ T4521] cramfs: ffffffff961c8228(26)->ffff88806a08a000(4096) [ 93.688291][ T4521] cramfs: Error -3 while decompressing! [ 93.693854][ T4521] cramfs: ffffffff961c8242(26)->ffff88806a08b000(4096) [ 93.700712][ T4521] cramfs: Error -3 while decompressing! [ 93.706261][ T4521] cramfs: ffffffff961c825c(16)->ffff88806a08c000(4096) [ 93.713375][ T4521] cramfs: Error -5 while decompressing! [ 93.719328][ T4521] cramfs: ffffffff961c8228(26)->ffff88806a08a000(4096) [ 93.941784][ T4529] loop4: detected capacity change from 0 to 256 [ 93.951102][ T4519] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.220291][ T4529] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.940522][ T4539] loop3: detected capacity change from 0 to 16 [ 95.059262][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.071328][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.081851][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.086551][ T4539] erofs: (device loop3): mounted with root inode @ nid 36. [ 95.096219][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.099367][ T26] audit: type=1800 audit(1746436423.206:6): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.72" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 95.129388][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.182475][ T4529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.412501][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.602512][ T1107] usb 3-1: device not accepting address 2, error -71 [ 99.733036][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.102666][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 100.233179][ T4213] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 100.254939][ T4213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.311444][ T4213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.609271][ T4213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 100.617864][ T4213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.627093][ T4213] usb 1-1: config 0 has no interface number 0 [ 100.635441][ T4213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 100.655755][ T4213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 100.684920][ T4213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.707582][ T4213] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.747369][ T4213] usb 1-1: config 0 interface 125 has no altsetting 0 [ 100.784782][ T4213] usb 1-1: config 0 interface 125 has no altsetting 2 [ 100.833872][ T4598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.960360][ T4603] loop1: detected capacity change from 0 to 164 [ 100.992683][ T4213] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 101.001906][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.062978][ T4213] usb 1-1: Product: syz [ 102.067180][ T4213] usb 1-1: Manufacturer: syz [ 102.071783][ T4213] usb 1-1: SerialNumber: syz [ 102.300120][ T4603] ISOFS: unable to read i-node block [ 102.307603][ T4213] usb 1-1: config 0 descriptor?? [ 102.316904][ T4603] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.352664][ T4213] usb 1-1: can't set config #0, error -71 [ 102.364473][ T4213] usb 1-1: USB disconnect, device number 2 [ 102.394576][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 102.645898][ T4623] loop0: detected capacity change from 0 to 512 [ 104.639493][ T4623] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.648047][ T4623] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.104: bg 0: block 248: padding at end of block bitmap is not set [ 104.673695][ T4623] Quota error (device loop0): write_blk: dquota write failed [ 104.681561][ T4623] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 104.693099][ T4623] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.104: Failed to acquire dquot type 1 [ 105.123705][ T4623] EXT4-fs (loop0): 1 truncate cleaned up [ 105.135201][ T4623] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 105.413282][ T4623] syz.0.104 (4623) used greatest stack depth: 20832 bytes left [ 107.945449][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 111.846849][ T4668] sp0: Synchronizing with TNC [ 111.902238][ T4668] loop3: detected capacity change from 0 to 512 [ 112.138917][ T4668] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 112.165902][ T4668] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.412797][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.273896][ T4707] loop1: detected capacity change from 0 to 128 [ 116.362568][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.373771][ T4707] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.456805][ T4718] loop2: detected capacity change from 0 to 64 [ 116.679311][ T4721] fuse: Bad value for 'fd' [ 117.992841][ T4212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.001926][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.107711][ T4212] usb 4-1: can't set config #1, error -71 [ 118.143325][ T4212] usb 4-1: USB disconnect, device number 2 [ 118.262111][ T4723] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.332581][ T4215] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.441271][ T4729] loop3: detected capacity change from 0 to 32768 [ 119.550610][ T4729] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.135 (4729) [ 119.592656][ T4215] usb 2-1: Using ep0 maxpacket: 16 [ 119.840464][ T4736] chnl_net:caif_netlink_parms(): no params data found [ 119.879207][ T4215] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 119.898821][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.908698][ T4215] usb 2-1: Product: syz [ 119.919082][ T4215] usb 2-1: Manufacturer: syz [ 119.925380][ T4215] usb 2-1: SerialNumber: syz [ 119.950209][ T4215] usb 2-1: config 0 descriptor?? [ 119.995092][ T4215] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 120.309279][ T4729] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 120.319578][ T4215] ssu100: probe of 2-1:0.0 failed with error -71 [ 120.340664][ T4729] BTRFS info (device loop3): turning on flush-on-commit [ 120.399906][ T4215] usb 2-1: USB disconnect, device number 2 [ 120.430676][ T4729] BTRFS info (device loop3): enabling disk space caching [ 120.452550][ T4729] BTRFS info (device loop3): turning off barriers [ 120.465813][ T4760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 120.475190][ T4729] BTRFS info (device loop3): doing ref verification [ 120.479575][ T4760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 120.498018][ T4729] BTRFS info (device loop3): enabling auto defrag [ 120.506311][ T4729] BTRFS info (device loop3): force clearing of disk cache [ 120.518222][ T4729] BTRFS info (device loop3): turning on sync discard [ 120.526426][ T4729] BTRFS info (device loop3): using default commit interval 30s [ 120.538988][ T4729] BTRFS info (device loop3): disk space caching is enabled [ 120.553470][ T4760] device ip6gretap0 entered promiscuous mode [ 120.559738][ T4729] BTRFS info (device loop3): has skinny extents [ 120.568833][ T4760] device syz_tun entered promiscuous mode [ 120.590724][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 120.621223][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.632492][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.700271][ T4736] device bridge_slave_0 entered promiscuous mode [ 120.759409][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.767143][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.775443][ T4736] device bridge_slave_1 entered promiscuous mode [ 120.828368][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.846034][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.960728][ T4729] BTRFS info (device loop3): enabling ssd optimizations [ 120.981964][ T4729] BTRFS info (device loop3): clearing free space tree [ 120.989710][ T4729] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.005765][ T4729] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.088504][ T4215] Bluetooth: hci5: command 0x0409 tx timeout [ 121.205640][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.271710][ T4736] team0: Port device team_slave_0 added [ 121.283292][ T4736] team0: Port device team_slave_1 added [ 121.573694][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.592457][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.608669][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.674908][ T4788] loop0: detected capacity change from 0 to 40427 [ 121.715901][ T4788] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.725644][ T4788] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.726778][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.743844][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.754168][ T7] usb 3-1: config 0 descriptor?? [ 121.757995][ T4788] F2FS-fs (loop0): invalid crc value [ 121.816158][ T4788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.884927][ T4788] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.892019][ T4788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.013039][ T4773] udc-core: couldn't find an available UDC or it's busy [ 122.020154][ T4773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.057422][ T4417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.101205][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.117365][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.155289][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.193978][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.200951][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.353452][ T4812] attempt to access beyond end of device [ 122.353452][ T4812] loop0: rw=2049, want=78344, limit=40427 [ 123.092541][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.177557][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 123.178899][ T7] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 123.194124][ T7] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 123.232459][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 123.285280][ T4417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.416823][ T4417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.458700][ T4736] device hsr_slave_0 entered promiscuous mode [ 123.459521][ T4736] device hsr_slave_1 entered promiscuous mode [ 123.463390][ T4736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.463467][ T4736] Cannot create hsr debugfs directory [ 123.556830][ T4417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.782550][ T4828] ipt_REJECT: TCP_RESET invalid for non-tcp [ 125.292850][ T4736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.355083][ T4736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.355136][ T4807] Bluetooth: hci5: command 0x040f tx timeout [ 125.404124][ T4833] loop1: detected capacity change from 0 to 512 [ 125.416033][ T4736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.454173][ T4833] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.561298][ T4833] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.155: invalid indirect mapped block 4294967295 (level 1) [ 125.665946][ T4736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.679884][ T4833] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.155: invalid indirect mapped block 4294967295 (level 1) [ 125.738090][ T4833] EXT4-fs (loop1): 2 truncates cleaned up [ 125.755916][ T4833] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 125.774726][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.922797][ T4839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 126.008217][ T4214] usb 3-1: USB disconnect, device number 4 [ 126.012879][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.117141][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.135496][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.147439][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.155418][ T2857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.254124][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.310723][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.455187][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.462386][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.492479][ T2857] usb 2-1: Using ep0 maxpacket: 8 [ 126.633608][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.748088][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.864792][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.871939][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.069498][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.273062][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.342568][ T2857] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 127.351777][ T2857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.371591][ T4874] loop3: detected capacity change from 0 to 64 [ 127.399206][ T4807] Bluetooth: hci5: command 0x0419 tx timeout [ 127.904976][ T4874] attempt to access beyond end of device [ 127.904976][ T4874] loop3: rw=0, want=268435470, limit=64 [ 127.916949][ T4874] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 128.122703][ T2857] usb 2-1: Product: syz [ 128.127336][ T2857] usb 2-1: Manufacturer: syz [ 128.131962][ T2857] usb 2-1: SerialNumber: syz [ 128.135298][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.156372][ T2857] usb 2-1: config 0 descriptor?? [ 128.223840][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.376764][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.386145][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.395104][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.441294][ T4736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.470975][ T4880] ipt_REJECT: TCP_RESET invalid for non-tcp [ 128.521809][ T2857] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 129.200535][ T2857] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 129.251149][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.262857][ T2857] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 129.280091][ T2857] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 129.289264][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.300376][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.316781][ T2857] usb 2-1: USB disconnect, device number 3 [ 129.324932][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.484748][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.594580][ T4889] fuse: Bad value for 'fd' [ 129.955545][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.386770][ T4882] netlink: 'syz.0.167': attribute type 10 has an invalid length. [ 130.452457][ T4882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.471795][ T4882] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.554515][ T4885] device bond0 entered promiscuous mode [ 130.580211][ T4885] device bond_slave_0 entered promiscuous mode [ 130.613467][ T4885] device bond_slave_1 entered promiscuous mode [ 131.485871][ T4885] device batadv0 entered promiscuous mode [ 131.651099][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.688013][ T4891] loop3: detected capacity change from 0 to 32768 [ 131.911315][ T4902] loop1: detected capacity change from 0 to 32768 [ 132.172813][ T4891] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.227089][ T4902] XFS (loop1): Mounting V5 Filesystem [ 132.372773][ T4902] XFS (loop1): Ending clean mount [ 132.384882][ T4902] XFS (loop1): Quotacheck needed: Please wait. [ 132.484089][ T4902] XFS (loop1): Quotacheck: Done. [ 132.545995][ T4168] ocfs2: Unmounting device (7,3) on (node local) [ 132.554979][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.575247][ T2857] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 132.587138][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.624633][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.653010][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.659447][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.123096][ T2857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.176299][ T2857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.329232][ T4417] device hsr_slave_0 left promiscuous mode [ 133.356321][ T4171] XFS (loop1): Unmounting Filesystem [ 133.412886][ T4417] device hsr_slave_1 left promiscuous mode [ 133.419709][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.442434][ T2857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.446692][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.451608][ T2857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.451634][ T2857] usb 3-1: Product: syz [ 133.451649][ T2857] usb 3-1: Manufacturer: syz [ 133.451664][ T2857] usb 3-1: SerialNumber: syz [ 133.502727][ T4916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.539878][ T4936] loop3: detected capacity change from 0 to 2048 [ 133.572935][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.601845][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.627352][ T4417] device bridge_slave_1 left promiscuous mode [ 133.673769][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.724793][ T4417] device bridge_slave_0 left promiscuous mode [ 133.732799][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.899882][ T4950] loop0: detected capacity change from 0 to 128 [ 133.936453][ T4417] device veth1_macvtap left promiscuous mode [ 133.948710][ T4417] device veth0_macvtap left promiscuous mode [ 133.960462][ T4417] device veth1_vlan left promiscuous mode [ 133.980082][ T4417] device veth0_vlan left promiscuous mode [ 134.294903][ T4954] ipt_REJECT: TCP_RESET invalid for non-tcp [ 134.902876][ T4955] capability: warning: `syz.2.174' uses 32-bit capabilities (legacy support in use) [ 134.926116][ T4916] udc-core: couldn't find an available UDC or it's busy [ 134.952985][ T4916] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 134.982056][ T4916] udc-core: couldn't find an available UDC or it's busy [ 135.004540][ T4916] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.113436][ T4961] loop0: detected capacity change from 0 to 16 [ 135.136820][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 135.157001][ T4961] erofs: (device loop0): mounted with root inode @ nid 36. [ 135.254882][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 135.339765][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.355115][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.120373][ T4417] bond0 (unregistering): Released all slaves [ 136.283033][ T2857] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 136.312890][ T2857] cdc_ncm 3-1:1.0: bind() failure [ 136.347994][ T2857] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 136.466511][ T4977] loop0: detected capacity change from 0 to 8 [ 136.563448][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.586321][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.777558][ T2857] cdc_ncm 3-1:1.1: bind() failure [ 136.787073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.799834][ T2857] usb 3-1: USB disconnect, device number 5 [ 136.853758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.924525][ T4736] device veth0_vlan entered promiscuous mode [ 136.989066][ T26] audit: type=1800 audit(1746436465.095:7): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.184" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 137.092871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.100911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.119323][ T4982] loop2: detected capacity change from 0 to 4096 [ 137.165322][ T4736] device veth1_vlan entered promiscuous mode [ 137.507513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.898256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.007108][ T4984] loop3: detected capacity change from 0 to 32768 [ 138.060932][ T4984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.189 (4984) [ 138.168830][ T4175] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 138.187882][ T4984] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 138.219829][ T4981] loop1: detected capacity change from 0 to 32768 [ 138.241740][ T4175] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 138.253162][ T4984] BTRFS info (device loop3): using free space tree [ 138.255215][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.259835][ T4981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.187 (4981) [ 138.284273][ T4984] BTRFS info (device loop3): has skinny extents [ 138.287410][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.325066][ T4736] device veth0_macvtap entered promiscuous mode [ 138.385470][ T4736] device veth1_macvtap entered promiscuous mode [ 138.414904][ T4981] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 138.450027][ T4981] BTRFS info (device loop1): using free space tree [ 138.459996][ T4981] BTRFS info (device loop1): has skinny extents [ 138.504948][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.575886][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.648243][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.666910][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.708025][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.774199][ T5039] ipt_REJECT: TCP_RESET invalid for non-tcp [ 139.116464][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.285267][ T4984] BTRFS info (device loop3): enabling ssd optimizations [ 139.472137][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.525346][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.536852][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.547494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.559304][ T4981] BTRFS info (device loop1): enabling ssd optimizations [ 139.654940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.723566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.795835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.938861][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.982372][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.995352][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.135196][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.708812][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.817514][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.870209][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.906399][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.928117][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.078057][ T4736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.127440][ T4736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.202455][ T4736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.211411][ T4736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.385821][ T4297] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 141.733686][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.741925][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.799900][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.379256][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.417806][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.486562][ T5099] overlayfs: overlapping lowerdir path [ 142.911828][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.945048][ T5088] loop2: detected capacity change from 0 to 32768 [ 143.139361][ T5108] loop3: detected capacity change from 0 to 16 [ 143.237241][ T5088] XFS (loop2): Mounting V5 Filesystem [ 143.346840][ T5108] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.142745][ T5083] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 144.353805][ T5088] XFS (loop2): Ending clean mount [ 144.442090][ T5088] XFS (loop2): Quotacheck needed: Please wait. [ 144.525435][ T5134] loop1: detected capacity change from 0 to 2048 [ 144.552483][ T5083] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.901871][ T5134] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,data_err=ignore,,errors=continue. Quota mode: none. [ 145.122957][ T5088] XFS (loop2): Quotacheck: Done. [ 145.380005][ T5083] usb 1-1: config 0 has no interface number 0 [ 145.386386][ T5083] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 145.396067][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.406790][ T5083] usb 1-1: config 0 descriptor?? [ 145.553075][ T5083] usb 1-1: selecting invalid altsetting 1 [ 145.635978][ T5083] dvb_ttusb_budget: ttusb_init_controller: error [ 145.659628][ T5143] ipt_REJECT: TCP_RESET invalid for non-tcp [ 145.691774][ T4175] XFS (loop2): Unmounting Filesystem [ 145.703613][ T5083] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 146.111359][ T5083] DVB: Unable to find symbol cx22700_attach() [ 146.251623][ T5083] DVB: Unable to find symbol tda10046_attach() [ 146.257927][ T5083] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 146.865301][ T5161] loop1: detected capacity change from 0 to 131072 [ 146.913398][ T5083] usb 1-1: USB disconnect, device number 3 [ 147.085545][ T5161] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.196354][ T5161] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.421851][ T5161] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 147.646566][ T5176] loop0: detected capacity change from 0 to 4096 [ 147.720193][ T5176] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000049663" or missing value [ 148.177925][ T4808] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 148.192476][ T5079] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.482414][ T5079] usb 3-1: Using ep0 maxpacket: 32 [ 148.485871][ T4808] usb 1-1: too many configurations: 217, using maximum allowed: 8 [ 148.590437][ T5202] loop5: detected capacity change from 0 to 256 [ 148.612867][ T5079] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.642943][ T4808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 148.650676][ T4808] usb 1-1: can't read configurations, error -61 [ 148.683059][ T5202] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.763829][ T5202] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 148.832705][ T5079] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.841789][ T5079] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.858301][ T4808] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 148.872444][ T5079] usb 3-1: Product: syz [ 148.882498][ T5079] usb 3-1: Manufacturer: syz [ 148.892509][ T5079] usb 3-1: SerialNumber: syz [ 148.913782][ T5079] usb 3-1: config 0 descriptor?? [ 148.952870][ T5181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.165513][ T4808] usb 1-1: too many configurations: 217, using maximum allowed: 8 [ 149.318404][ T4808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.337041][ T4808] usb 1-1: can't read configurations, error -61 [ 149.404104][ T4808] usb usb1-port1: attempt power cycle [ 150.628633][ T5204] loop3: detected capacity change from 0 to 32768 [ 150.680923][ T5204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.215 (5204) [ 150.698839][ T5243] loop0: detected capacity change from 0 to 164 [ 150.727219][ T5204] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 150.749218][ T5204] BTRFS info (device loop3): using free space tree [ 150.765016][ T5204] BTRFS info (device loop3): has skinny extents [ 150.921419][ T5204] BTRFS info (device loop3): enabling ssd optimizations [ 151.020915][ T5084] usb 3-1: USB disconnect, device number 6 [ 151.447264][ T5236] loop5: detected capacity change from 0 to 32768 [ 151.687921][ T5236] XFS (loop5): Mounting V5 Filesystem [ 151.787760][ T5274] loop2: detected capacity change from 0 to 32768 [ 151.876886][ T5243] loop0: detected capacity change from 0 to 32768 [ 151.954829][ T5243] XFS: noikeep mount option is deprecated. [ 151.972655][ T5236] XFS (loop5): Ending clean mount [ 152.212027][ T5243] XFS (loop0): Mounting V5 Filesystem [ 152.283156][ T5303] ipt_REJECT: TCP_RESET invalid for non-tcp [ 153.921722][ T4736] XFS (loop5): Unmounting Filesystem [ 153.973197][ T5243] XFS (loop0): log mount failed [ 154.208228][ T5315] loop3: detected capacity change from 0 to 40427 [ 154.312691][ T5315] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 154.320504][ T5315] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.350148][ T5315] F2FS-fs (loop3): invalid crc value [ 154.470240][ T5315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.016250][ T5315] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.023563][ T5315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.241082][ T5333] loop2: detected capacity change from 0 to 2048 [ 160.640116][ T5340] loop0: detected capacity change from 0 to 32768 [ 160.755778][ T5350] loop5: detected capacity change from 0 to 512 [ 160.945174][ T5350] EXT4-fs (loop5): Ignoring removed oldalloc option [ 160.951961][ T5350] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.969604][ T5340] XFS (loop0): Mounting V5 Filesystem [ 162.017810][ T26] audit: type=1800 audit(1746436490.125:8): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.232" name="bus" dev="loop2" ino=851 res=0 errno=0 [ 162.217007][ T5350] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.227: Parent and EA inode have the same ino 15 [ 162.278538][ T5350] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.291930][ T5350] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.227: Parent and EA inode have the same ino 15 [ 162.391901][ T5350] EXT4-fs (loop5): 1 orphan inode deleted [ 162.397765][ T5350] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,init_itable=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,dioread_nolock,init_itable,oldalloc,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 162.892003][ T5340] XFS (loop0): Ending clean mount [ 162.906997][ T5340] XFS (loop0): Quotacheck needed: Please wait. [ 162.990754][ T5340] XFS (loop0): Quotacheck: Done. [ 163.643435][ T5379] ipt_REJECT: TCP_RESET invalid for non-tcp [ 163.962913][ T4167] XFS (loop0): Unmounting Filesystem [ 165.540773][ T5407] netlink: set zone limit has 8 unknown bytes [ 165.618284][ T5405] loop5: detected capacity change from 0 to 64 [ 165.817506][ T5417] device sit0 entered promiscuous mode [ 166.070037][ T5417] netlink: 'syz.5.245': attribute type 1 has an invalid length. [ 166.079596][ T5417] netlink: 1 bytes leftover after parsing attributes in process `syz.5.245'. [ 166.376303][ T5422] capability: warning: `syz.3.248' uses deprecated v2 capabilities in a way that may be insecure [ 166.595191][ T4168] cgroup: fork rejected by pids controller in /syz3 [ 167.015790][ T5436] loop0: detected capacity change from 0 to 32768 [ 167.041474][ T5438] netlink: 67 bytes leftover after parsing attributes in process `syz.2.251'. [ 167.055515][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 167.384807][ T5436] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.393380][ T5436] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.500706][ T5436] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 167.797139][ T5442] ipt_REJECT: TCP_RESET invalid for non-tcp [ 167.945950][ T5436] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 168.325351][ T5454] netlink: 'syz.0.240': attribute type 5 has an invalid length. [ 168.618354][ T5457] fuse: Unknown parameter 'use00000000000000000000' [ 169.319284][ T5453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.586538][ T5475] loop2: detected capacity change from 0 to 1024 [ 171.606133][ T1461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.750004][ T1461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.923976][ T5480] loop0: detected capacity change from 0 to 40427 [ 171.963272][ T1461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.979821][ T5480] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 171.987652][ T5480] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.998037][ T5480] F2FS-fs (loop0): invalid crc value [ 172.091007][ T5480] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.145711][ T5480] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 172.152916][ T5480] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.281860][ T1461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.383544][ T4417] hfsplus: b-tree write err: -5, ino 4 [ 172.840747][ T5473] loop5: detected capacity change from 0 to 32768 [ 172.974775][ T5473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.260 (5473) [ 173.053456][ T5473] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 173.062208][ T5473] BTRFS info (device loop5): setting nodatacow, compression disabled [ 173.202541][ T5473] BTRFS info (device loop5): max_inline at 0 [ 173.208673][ T5473] BTRFS info (device loop5): enabling disk space caching [ 173.216569][ T5473] BTRFS info (device loop5): turning off barriers [ 173.223244][ T5473] BTRFS info (device loop5): turning on flush-on-commit [ 173.230217][ T5473] BTRFS info (device loop5): doing ref verification [ 173.237002][ T5473] BTRFS info (device loop5): force clearing of disk cache [ 173.244291][ T5473] BTRFS info (device loop5): enabling ssd optimizations [ 173.251379][ T5473] BTRFS info (device loop5): max_inline at 4096 [ 173.257769][ T5473] BTRFS info (device loop5): disk space caching is enabled [ 173.265969][ T5473] BTRFS info (device loop5): has skinny extents [ 173.327490][ T5477] loop1: detected capacity change from 0 to 32768 [ 174.499373][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 174.780822][ T4808] Bluetooth: hci1: command 0x0409 tx timeout [ 175.699866][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.707314][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.723096][ T5491] device bridge_slave_0 entered promiscuous mode [ 175.732118][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.748343][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.768115][ T5491] device bridge_slave_1 entered promiscuous mode [ 175.872101][ T5546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.036164][ T5473] BTRFS error (device loop5): open_ctree failed: -12 [ 176.581965][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.668459][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.759549][ T5491] team0: Port device team_slave_0 added [ 176.777138][ T5491] team0: Port device team_slave_1 added [ 176.842617][ T4807] Bluetooth: hci1: command 0x041b tx timeout [ 176.944635][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.966049][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.766127][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.836269][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.843277][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.887126][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.918248][ T4808] Bluetooth: hci1: command 0x040f tx timeout [ 179.665307][ T5574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.676557][ T5574] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 179.894076][ T5588] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 180.394872][ T5491] device hsr_slave_0 entered promiscuous mode [ 180.437048][ T5491] device hsr_slave_1 entered promiscuous mode [ 180.504295][ T5491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.542049][ T5491] Cannot create hsr debugfs directory [ 180.941046][ T5607] loop2: detected capacity change from 0 to 32768 [ 180.949092][ T5078] Bluetooth: hci0: command 0x0406 tx timeout [ 180.956216][ T5078] Bluetooth: hci2: command 0x0406 tx timeout [ 180.963892][ T5078] Bluetooth: hci3: command 0x0406 tx timeout [ 181.064182][ T5607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.073158][ T5607] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.081264][ T5075] Bluetooth: hci1: command 0x0419 tx timeout [ 181.092290][ T5607] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 181.310370][ T5607] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 181.841289][ T5615] ipt_REJECT: TCP_RESET invalid for non-tcp [ 185.488280][ T5652] loop1: detected capacity change from 0 to 4096 [ 185.559779][ T5652] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 185.613262][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.912542][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 186.052883][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.075422][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.114199][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.152698][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.209854][ T23] usb 6-1: config 0 descriptor?? [ 186.244453][ T5652] ntfs3: loop1: Failed to load $Extend. [ 186.281485][ T23] hub 6-1:0.0: USB hub found [ 186.356700][ T1461] device hsr_slave_0 left promiscuous mode [ 186.579449][ T23] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 186.608439][ T1461] device hsr_slave_1 left promiscuous mode [ 186.628518][ T1461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.653898][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.668737][ T1461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.688478][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.739573][ T1461] device bridge_slave_1 left promiscuous mode [ 186.760032][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.814916][ T1461] device bridge_slave_0 left promiscuous mode [ 186.832177][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.861123][ T1461] device veth1_macvtap left promiscuous mode [ 186.869353][ T1461] device veth0_macvtap left promiscuous mode [ 186.880725][ T1461] device veth1_vlan left promiscuous mode [ 186.886647][ T1461] device veth0_vlan left promiscuous mode [ 186.951245][ T5678] ipt_REJECT: TCP_RESET invalid for non-tcp [ 187.683359][ T23] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 187.848518][ T23] usb 6-1: USB disconnect, device number 2 [ 187.866671][ T5683] loop1: detected capacity change from 0 to 2048 [ 187.954505][ T5683] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 188.059976][ T5683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.061120][ T5695] loop5: detected capacity change from 0 to 512 [ 189.132703][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 189.170998][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 189.196224][ T5691] loop0: detected capacity change from 0 to 32768 [ 189.209114][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.247708][ T5691] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.256135][ T5691] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 189.284016][ T5695] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.303280][ T5691] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 189.340418][ T5695] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.297: bg 0: block 248: padding at end of block bitmap is not set [ 189.342015][ T5691] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 189.512790][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.568778][ T5695] Quota error (device loop5): write_blk: dquota write failed [ 189.614620][ T5695] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 189.714101][ T5695] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.297: Failed to acquire dquot type 1 [ 190.111772][ T5695] EXT4-fs (loop5): 1 truncate cleaned up [ 190.144262][ T5695] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.530292][ T1461] bond0 (unregistering): Released all slaves [ 190.655272][ T5708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.667743][ T5708] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 191.879205][ T5719] syz.0.304 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.051850][ T5491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.088228][ T5705] loop1: detected capacity change from 0 to 32768 [ 192.124542][ T5491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.209159][ T5491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.241016][ T5705] XFS (loop1): Mounting V5 Filesystem [ 192.281086][ T5491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.420715][ T5705] XFS (loop1): Ending clean mount [ 192.437675][ T5705] XFS (loop1): Quotacheck needed: Please wait. [ 192.575823][ T5747] ipt_REJECT: TCP_RESET invalid for non-tcp [ 192.617480][ T5705] XFS (loop1): Quotacheck: Done. [ 193.403145][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.415831][ T5752] loop5: detected capacity change from 0 to 128 [ 193.887193][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 193.997203][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.002775][ T5752] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.017426][ T5752] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.034944][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041288][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.138358][ T13] pwc: Logitech/Cisco VT Camera webcam detected. [ 194.208595][ T5759] ip6t_REJECT: ECHOREPLY is not supported [ 194.469354][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.512257][ T4171] XFS (loop1): Unmounting Filesystem [ 194.650455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.659506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.702485][ T13] pwc: send_video_command error -71 [ 194.707732][ T13] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 194.721012][ T13] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 194.738970][ T13] usb 3-1: USB disconnect, device number 7 [ 194.839774][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.775208][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.832294][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.872812][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.879950][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.923209][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.955942][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.984973][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.992066][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.022759][ T5775] loop0: detected capacity change from 0 to 4096 [ 196.040613][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.075689][ T5775] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 196.802844][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.863979][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.903272][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.944779][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.037704][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.098073][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.136153][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.173271][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.211458][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.254891][ T26] audit: type=1804 audit(1746436525.354:9): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.314" name="/newroot/79/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=30 res=1 errno=0 [ 197.300340][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.327167][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.339657][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.647710][ T5793] loop0: detected capacity change from 0 to 64 [ 197.687235][ T5793] hfs: unable to locate alternate MDB [ 197.700641][ T5793] hfs: continuing without an alternate MDB [ 197.701318][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.730817][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.768538][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.575690][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.596158][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.753963][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.766153][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.786304][ T5491] device veth0_vlan entered promiscuous mode [ 198.796212][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.810915][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.905606][ T5491] device veth1_vlan entered promiscuous mode [ 198.997392][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.042831][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.064508][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.193448][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.283783][ T5491] device veth0_macvtap entered promiscuous mode [ 199.295129][ T5491] device veth1_macvtap entered promiscuous mode [ 199.454015][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.769217][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.120973][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.131781][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.141652][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.182359][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.255052][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.297716][ T5808] loop5: detected capacity change from 0 to 32768 [ 200.326580][ T5810] loop0: detected capacity change from 0 to 1024 [ 200.348094][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.383955][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.408427][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.423400][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.439858][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.458358][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.471785][ T5810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.485720][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.578435][ T5808] XFS (loop5): Mounting V5 Filesystem [ 200.598136][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.643722][ T5797] loop1: detected capacity change from 0 to 32768 [ 200.649576][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.666870][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.673762][ T5808] XFS (loop5): Ending clean mount [ 200.683411][ T5491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.686847][ T5808] XFS (loop5): Quotacheck needed: Please wait. [ 200.694554][ T5491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.711858][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.763687][ T5491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.872894][ T5491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.881634][ T5491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.930149][ T5808] XFS (loop5): Quotacheck: Done. [ 200.953918][ T5491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.810199][ T5797] XFS (loop1): Mounting V5 Filesystem [ 201.884888][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.083392][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.433597][ T5837] loop0: detected capacity change from 0 to 40427 [ 202.445307][ T5797] XFS (loop1): log mount failed [ 202.472104][ T4736] XFS (loop5): Unmounting Filesystem [ 202.495868][ T5837] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 202.503868][ T5837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.542280][ T5837] F2FS-fs (loop0): invalid crc value [ 202.579145][ T5837] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.648906][ T5837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.656119][ T5837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.802611][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.810867][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.882877][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.083388][ T5845] attempt to access beyond end of device [ 203.083388][ T5845] loop0: rw=10241, want=45104, limit=40427 [ 203.135674][ T5845] attempt to access beyond end of device [ 203.135674][ T5845] loop0: rw=2049, want=78336, limit=40427 [ 203.152369][ T5845] attempt to access beyond end of device [ 203.152369][ T5845] loop0: rw=2049, want=45104, limit=40427 [ 203.712993][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.752906][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.827524][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.196580][ T5849] loop1: detected capacity change from 0 to 64 [ 204.224468][ T5838] loop2: detected capacity change from 0 to 32768 [ 204.347884][ T5838] XFS (loop2): Mounting V5 Filesystem [ 204.529725][ T5838] XFS (loop2): Ending clean mount [ 204.572664][ T5838] XFS (loop2): Quotacheck needed: Please wait. [ 204.702508][ T5838] XFS (loop2): Quotacheck: Done. [ 204.774839][ T5864] loop1: detected capacity change from 0 to 2048 [ 204.862762][ T5864] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 204.871300][ T5864] System zones: 0-7 [ 204.955320][ T5864] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 205.122217][ T4175] XFS (loop2): Unmounting Filesystem [ 205.246717][ T5870] loop5: detected capacity change from 0 to 40427 [ 205.790840][ T5870] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 205.798660][ T5870] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 205.814825][ T5870] F2FS-fs (loop5): invalid crc value [ 205.850062][ T5870] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.933228][ T5870] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 205.940344][ T5870] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.359490][ T5887] attempt to access beyond end of device [ 206.359490][ T5887] loop5: rw=2049, want=78344, limit=40427 [ 207.299236][ T5879] loop0: detected capacity change from 0 to 32768 [ 207.322391][ T4808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.343850][ T5879] XFS: noikeep mount option is deprecated. [ 207.440601][ T5879] XFS (loop0): Mounting V5 Filesystem [ 207.574006][ T5879] XFS (loop0): Ending clean mount [ 207.606434][ T5879] XFS (loop0): Quotacheck needed: Please wait. [ 207.720209][ T5879] XFS (loop0): Quotacheck: Done. [ 207.742729][ T4808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.762966][ T4808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.840395][ T4167] XFS (loop0): Unmounting Filesystem [ 207.872838][ T4808] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.893576][ T4808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.913530][ T4808] usb 4-1: SerialNumber: syz [ 208.051456][ T5901] loop5: detected capacity change from 0 to 32768 [ 208.169961][ T5901] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root [ 208.169961][ T5901] [ 208.216167][ T5901] ERROR: (device loop5): remounting filesystem as read-only [ 208.244820][ T4808] usb 4-1: 0:2 : does not exist [ 208.269282][ T4808] usb 4-1: unit 11 not found! [ 208.355931][ T4808] usb 4-1: USB disconnect, device number 3 [ 208.691066][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.048756][ T5916] loop5: detected capacity change from 0 to 64 [ 210.430064][ T5924] loop5: detected capacity change from 0 to 1024 [ 210.633300][ T5924] EXT4-fs (loop5): inline encryption not supported [ 210.875658][ T5924] EXT4-fs (loop5): Ignoring removed bh option [ 211.197846][ T5924] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 211.739692][ T5913] loop3: detected capacity change from 0 to 32768 [ 214.733713][ T4176] block nbd3: Receive control failed (result -32) [ 214.748566][ T5970] block nbd3: shutting down sockets [ 215.401728][ T5979] loop1: detected capacity change from 0 to 2048 [ 215.524021][ T5979] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.570824][ T5979] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.659235][ T6001] loop2: detected capacity change from 0 to 8192 [ 218.903723][ T6001] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.049560][ T6017] loop5: detected capacity change from 0 to 164 [ 220.805887][ T6017] ISOFS: unable to read i-node block [ 220.892517][ T6017] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 221.164075][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 221.267559][ T6028] loop1: detected capacity change from 0 to 512 [ 221.521037][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.651743][ T6028] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.399885][ T6034] loop0: detected capacity change from 0 to 32768 [ 222.463421][ T6034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.381 (6034) [ 222.848137][ T6034] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 222.857166][ T6034] BTRFS info (device loop0): force clearing of disk cache [ 222.864423][ T6034] BTRFS info (device loop0): enabling ssd optimizations [ 222.871482][ T6034] BTRFS info (device loop0): using spread ssd allocation scheme [ 222.879235][ T6034] BTRFS info (device loop0): using free space tree [ 222.886218][ T6034] BTRFS info (device loop0): has skinny extents [ 223.277963][ T6034] BTRFS info (device loop0): clearing free space tree [ 223.285137][ T6034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.294995][ T6034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.342894][ T6034] BTRFS info (device loop0): creating free space tree [ 223.363673][ T6034] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.373333][ T6034] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.165203][ T6066] loop5: detected capacity change from 0 to 1895 [ 224.443250][ T6073] loop5: detected capacity change from 1895 to 3079 [ 226.257353][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.345886][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.360058][ T6089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.074873][ T6111] loop0: detected capacity change from 0 to 2048 [ 228.312438][ T6128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.683702][ T26] audit: type=1326 audit(1746436556.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8ceb969 code=0x7ffc0000 [ 228.690020][ T6145] loop3: detected capacity change from 0 to 256 [ 228.749945][ T26] audit: type=1326 audit(1746436556.794:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4ac8ceb969 code=0x7ffc0000 [ 228.841844][ T26] audit: type=1326 audit(1746436556.794:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8ceb969 code=0x7ffc0000 [ 228.990290][ T26] audit: type=1326 audit(1746436556.794:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f4ac8ceb969 code=0x7ffc0000 [ 229.053737][ T26] audit: type=1326 audit(1746436556.794:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac8ceb969 code=0x7ffc0000 [ 229.952859][ T6157] netlink: 'syz.0.412': attribute type 39 has an invalid length. [ 231.274787][ T6152] loop2: detected capacity change from 0 to 32768 [ 231.589100][ T6167] loop3: detected capacity change from 0 to 40427 [ 231.638889][ T6152] XFS (loop2): Mounting V5 Filesystem [ 231.721114][ T6167] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.794172][ T6167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.812660][ T6163] loop0: detected capacity change from 0 to 32768 [ 232.008563][ T6163] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 232.043301][ T6152] XFS (loop2): Ending clean mount [ 232.068288][ T6152] XFS (loop2): Quotacheck needed: Please wait. [ 232.186225][ T6186] attempt to access beyond end of device [ 232.186225][ T6186] loop3: rw=2049, want=45104, limit=40427 [ 232.651372][ T6152] XFS (loop2): Quotacheck: Done. [ 232.724184][ T5491] attempt to access beyond end of device [ 232.724184][ T5491] loop3: rw=2049, want=45112, limit=40427 [ 232.742442][ T4175] XFS (loop2): Unmounting Filesystem [ 232.986531][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 233.264993][ T6183] loop5: detected capacity change from 0 to 32768 [ 233.358495][ T6183] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 233.385065][ T6183] dlm: no local IP address has been set [ 233.391164][ T6183] dlm: cannot start dlm midcomms -107 [ 233.439693][ T6183] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 234.952040][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.442665][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.467592][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 235.535831][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.550975][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.565520][ T13] usb 3-1: config 0 descriptor?? [ 235.630663][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 235.803591][ T6198] loop1: detected capacity change from 0 to 40427 [ 235.832061][ T6205] udc-core: couldn't find an available UDC or it's busy [ 235.902945][ T6198] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 235.922753][ T6205] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.930638][ T6198] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 235.943206][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 236.383730][ T6198] F2FS-fs (loop1): invalid crc value [ 236.392736][ T6198] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 237.145267][ T6213] loop3: detected capacity change from 0 to 32768 [ 237.293911][ T6236] loop5: detected capacity change from 0 to 164 [ 237.354228][ T6213] XFS (loop3): Mounting V5 Filesystem [ 237.532387][ T6236] ISOFS: unable to read i-node block [ 237.563025][ T6236] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 237.965992][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'. [ 238.251258][ T6213] XFS (loop3): Ending clean mount [ 238.294578][ T6213] XFS (loop3): Quotacheck needed: Please wait. [ 238.413417][ T4294] usb 3-1: USB disconnect, device number 8 [ 238.517425][ T6253] loop2: detected capacity change from 0 to 4096 [ 238.524002][ T6213] XFS (loop3): Quotacheck: Done. [ 238.541730][ T5491] XFS (loop3): Unmounting Filesystem [ 239.683478][ T6266] loop3: detected capacity change from 0 to 256 [ 239.977888][ T6266] loop3: detected capacity change from 0 to 4096 [ 240.155515][ T6275] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.793877][ T6289] loop3: detected capacity change from 0 to 2048 [ 242.454337][ T4808] Bluetooth: hci5: command 0x0406 tx timeout [ 242.472542][ T6288] loop5: detected capacity change from 0 to 16 [ 242.554497][ T6288] erofs: (device loop5): mounted with root inode @ nid 36. [ 242.594276][ T6289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.615836][ T4808] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 242.912415][ T4294] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.006182][ T4808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.026608][ T4808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 243.070623][ T4808] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.090959][ T4808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.131368][ T4808] usb 1-1: config 0 descriptor?? [ 243.132435][ T4294] usb 4-1: device descriptor read/64, error -71 [ 243.185019][ T4808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 243.386220][ T6284] udc-core: couldn't find an available UDC or it's busy [ 243.402721][ T6284] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 243.421335][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 243.422719][ T4294] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 243.865704][ T6304] loop1: detected capacity change from 0 to 40427 [ 243.875722][ T4294] usb 4-1: device descriptor read/64, error -71 [ 243.906685][ T6304] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 243.914565][ T6304] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 243.941818][ T6304] F2FS-fs (loop1): invalid crc value [ 243.974161][ T6304] F2FS-fs (loop1): Found nat_bits in checkpoint [ 244.016442][ T4294] usb usb4-port1: attempt power cycle [ 244.026547][ T6304] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 244.034093][ T6304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.693381][ T6320] loop3: detected capacity change from 0 to 164 [ 244.731299][ T4320] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 244.757267][ T4320] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 244.814080][ T6320] ISOFS: unable to read i-node block [ 244.845060][ T6320] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 244.968198][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 245.561005][ T1324] usb 1-1: USB disconnect, device number 7 [ 245.722694][ T6329] loop2: detected capacity change from 0 to 47 [ 246.041817][ T6335] loop5: detected capacity change from 0 to 32768 [ 246.170760][ T6329] attempt to access beyond end of device [ 246.170760][ T6329] loop2: rw=2049, want=50, limit=47 [ 246.235833][ T6329] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 246.435820][ T6329] attempt to access beyond end of device [ 246.435820][ T6329] loop2: rw=2049, want=52, limit=47 [ 246.461230][ T6329] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 246.655555][ T6329] attempt to access beyond end of device [ 246.655555][ T6329] loop2: rw=2049, want=50, limit=47 [ 246.667214][ T6329] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 246.670951][ T6335] XFS (loop5): Mounting V5 Filesystem [ 246.750272][ T6329] attempt to access beyond end of device [ 246.750272][ T6329] loop2: rw=2049, want=52, limit=47 [ 246.782640][ T6329] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 247.043129][ T6349] loop1: detected capacity change from 0 to 40427 [ 247.065610][ T6349] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 247.068756][ T6335] XFS (loop5): Ending clean mount [ 247.073522][ T6349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 247.079507][ T6349] F2FS-fs (loop1): invalid crc value [ 247.105508][ T6335] XFS (loop5): Quotacheck needed: Please wait. [ 247.156625][ T6349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.229303][ T6349] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 247.236841][ T6349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 247.431156][ T6335] XFS (loop5): Quotacheck: Done. [ 247.559415][ T6359] fuse: Unknown parameter '0x0000000000000005' [ 248.657108][ T6361] attempt to access beyond end of device [ 248.657108][ T6361] loop1: rw=10241, want=45104, limit=40427 [ 248.679260][ T6361] attempt to access beyond end of device [ 248.679260][ T6361] loop1: rw=2049, want=78336, limit=40427 [ 248.691924][ T6361] attempt to access beyond end of device [ 248.691924][ T6361] loop1: rw=2049, want=45104, limit=40427 [ 249.306861][ T4736] XFS (loop5): Unmounting Filesystem [ 249.375754][ T6357] loop0: detected capacity change from 0 to 4096 [ 249.511179][ T6366] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.893851][ T1324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 250.421179][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 250.436427][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 250.623966][ T1324] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.657804][ T1324] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.689518][ T1324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.709383][ T1324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.740996][ T1324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.948158][ T1324] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.962383][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.990993][ T1324] usb 4-1: Product: syz [ 251.001979][ T1324] usb 4-1: Manufacturer: syz [ 251.072073][ T6372] loop5: detected capacity change from 0 to 32768 [ 251.082393][ T4210] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 251.083476][ T1324] cdc_wdm 4-1:1.0: skipping garbage [ 251.102603][ T1324] cdc_wdm 4-1:1.0: skipping garbage [ 251.118548][ T1324] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 251.124807][ T1324] cdc_wdm 4-1:1.0: Unknown control protocol [ 251.179840][ T6372] XFS (loop5): Mounting V5 Filesystem [ 251.295842][ T6372] XFS (loop5): Ending clean mount [ 251.304665][ T6379] loop1: detected capacity change from 0 to 32768 [ 251.363192][ T4736] XFS (loop5): Unmounting Filesystem [ 251.452599][ T4210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.463086][ T4210] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 251.478364][ T4210] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.487554][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.497796][ T4210] usb 1-1: config 0 descriptor?? [ 251.521987][ T6379] XFS (loop1): Mounting V5 Filesystem [ 251.545848][ T4210] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 251.545988][ T13] usb 4-1: USB disconnect, device number 7 [ 251.698811][ T6379] XFS (loop1): Ending clean mount [ 251.709350][ T6379] XFS (loop1): Quotacheck needed: Please wait. [ 251.762924][ T6377] udc-core: couldn't find an available UDC or it's busy [ 251.770827][ T6399] loop2: detected capacity change from 0 to 1024 [ 251.785754][ T6377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 251.804031][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 251.864445][ T6379] XFS (loop1): Quotacheck: Done. [ 252.093086][ T4171] XFS (loop1): Unmounting Filesystem [ 252.101784][ T6399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.810710][ T6398] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 252.827820][ T6398] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 252.840561][ T6398] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.840561][ T6398] [ 252.851058][ T6398] EXT4-fs (loop2): Total free blocks count 0 [ 252.857088][ T6398] EXT4-fs (loop2): Free/Dirty block details [ 252.863099][ T6398] EXT4-fs (loop2): free_blocks=68451041280 [ 252.868976][ T6398] EXT4-fs (loop2): dirty_blocks=32 [ 252.874318][ T6398] EXT4-fs (loop2): Block reservation details [ 252.880369][ T6398] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 253.007180][ T6415] fuse: Unknown parameter '0x0000000000000005' [ 254.329732][ T4210] usb 1-1: USB disconnect, device number 8 [ 254.370684][ T6424] loop3: detected capacity change from 0 to 164 [ 254.488323][ T6424] ISOFS: unable to read i-node block [ 254.502447][ T6424] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 254.600974][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 254.772744][ T4210] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 255.042495][ T4210] usb 1-1: Using ep0 maxpacket: 32 [ 255.304171][ T6439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.314346][ T4210] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 255.392228][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.475212][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661629][ T4210] usb 1-1: config 0 descriptor?? [ 256.032661][ T4210] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 256.062963][ T4210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.133894][ T4210] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 256.153940][ T4210] usb 1-1: media controller created [ 256.198425][ T4210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.366048][ T6428] loop1: detected capacity change from 0 to 32768 [ 256.483206][ T6428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.475 (6428) [ 256.680189][ T6428] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 256.705007][ T6428] BTRFS info (device loop1): use no compression [ 256.813371][ T6428] BTRFS info (device loop1): enabling disk space caching [ 256.820745][ T6428] BTRFS info (device loop1): setting nodatasum [ 256.841815][ T6428] BTRFS info (device loop1): turning off barriers [ 257.161663][ T6428] BTRFS info (device loop1): turning on flush-on-commit [ 257.462487][ T4210] az6027: usb out operation failed. (-71) [ 257.469014][ T4210] stb0899_attach: Driver disabled by Kconfig [ 257.470026][ T6428] BTRFS info (device loop1): enabling ssd optimizations [ 257.479107][ T4210] az6027: no front-end attached [ 257.479107][ T4210] [ 257.496875][ T6428] BTRFS info (device loop1): using spread ssd allocation scheme [ 257.558065][ T6428] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 257.577329][ T6428] BTRFS info (device loop1): use zstd compression, level 3 [ 257.604311][ T4210] az6027: usb out operation failed. (-71) [ 257.612516][ T4210] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 257.621799][ T4210] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 257.638297][ T6428] BTRFS info (device loop1): force clearing of disk cache [ 257.672474][ T6428] BTRFS info (device loop1): max_inline at 2 [ 257.678513][ T6428] BTRFS info (device loop1): disk space caching is enabled [ 257.690855][ T6451] loop2: detected capacity change from 0 to 512 [ 257.707035][ T4210] dvb-usb: schedule remote query interval to 400 msecs. [ 257.722434][ T4210] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 257.731008][ T6428] BTRFS info (device loop1): has skinny extents [ 257.771131][ T6451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.784452][ T4210] usb 1-1: USB disconnect, device number 9 [ 257.867645][ T6451] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.881132][ T6428] BTRFS error (device loop1): open_ctree failed: -12 [ 257.965217][ T4393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4393) [ 257.980926][ T6451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 257.989233][ T6451] System zones: 1-12 [ 258.015133][ T6451] EXT4-fs (loop2): 1 truncate cleaned up [ 258.021015][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 259.868652][ T4210] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 260.200712][ T6493] loop3: detected capacity change from 0 to 256 [ 260.411478][ T6493] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 260.442410][ T4210] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 260.506403][ T6500] fuse: Unknown parameter '0x0000000000000005' [ 261.784887][ T6505] loop2: detected capacity change from 0 to 512 [ 261.847135][ T4210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.872838][ T4210] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 261.887912][ T4210] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.897259][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.910988][ T4210] usb 1-1: config 0 descriptor?? [ 262.030728][ T4210] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 262.163859][ T6482] udc-core: couldn't find an available UDC or it's busy [ 262.222543][ T6482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.263177][ T6505] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 262.295820][ T6505] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.722488][ T6470] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 263.346120][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 263.692744][ T6518] loop1: detected capacity change from 0 to 1024 [ 263.737815][ T6518] EXT4-fs (loop1): inline encryption not supported [ 263.813201][ T6518] EXT4-fs (loop1): Ignoring removed bh option [ 263.960341][ T6524] usb usb8: usbfs: process 6524 (syz.5.503) did not claim interface 0 before use [ 265.012852][ T6518] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 265.435220][ T5084] usb 1-1: USB disconnect, device number 10 [ 265.673781][ T6541] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.500: Allocating blocks 497-513 which overlap fs metadata [ 265.760963][ T6541] EXT4-fs (loop1): Remounting filesystem read-only [ 265.768704][ T6541] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.500: Allocating blocks 497-513 which overlap fs metadata [ 265.784733][ T6541] EXT4-fs (loop1): Remounting filesystem read-only [ 265.791940][ T6541] EXT4-fs (loop1): pa ffff8880568671c0: logic 48, phys. 177, len 21 [ 265.800613][ T6541] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 265.815777][ T6541] EXT4-fs (loop1): Remounting filesystem read-only [ 267.033061][ T6533] loop3: detected capacity change from 0 to 32768 [ 267.193883][ T6533] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 267.202859][ T6555] loop1: detected capacity change from 0 to 1024 [ 267.242408][ T6533] BTRFS info (device loop3): turning on sync discard [ 267.253194][ T6555] EXT4-fs (loop1): inline encryption not supported [ 267.273236][ T6533] BTRFS info (device loop3): setting nodatacow, compression disabled [ 267.280289][ T6555] EXT4-fs (loop1): Ignoring removed bh option [ 267.281348][ T6533] BTRFS info (device loop3): turning off barriers [ 267.312767][ T6533] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 267.423657][ T6533] BTRFS info (device loop3): trying to use backup root at mount time [ 267.442103][ T6533] BTRFS info (device loop3): metadata ratio 3 [ 267.462448][ T6533] BTRFS info (device loop3): enabling auto defrag [ 267.492470][ T6533] BTRFS info (device loop3): max_inline at 0 [ 267.533083][ T6533] BTRFS info (device loop3): using free space tree [ 267.563260][ T6555] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 267.774185][ T6533] BTRFS info (device loop3): has skinny extents [ 268.509300][ T6533] BTRFS error (device loop3): open_ctree failed: -12 [ 268.850458][ T6584] device ipvlan2 entered promiscuous mode [ 268.873504][ T6584] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 268.889766][ T6584] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.164463][ T6589] loop1: detected capacity change from 0 to 1024 [ 269.410734][ T6589] hfsplus: xattr searching failed [ 269.517902][ T144] hfsplus: b-tree write err: -5, ino 3 [ 269.551009][ T4171] hfsplus: node 4:3 still has 1 user(s)! [ 269.879443][ T6599] loop1: detected capacity change from 0 to 1024 [ 269.948314][ T6591] loop0: detected capacity change from 0 to 32768 [ 270.000525][ T6599] EXT4-fs (loop1): inline encryption not supported [ 270.054776][ T6599] EXT4-fs (loop1): Ignoring removed bh option [ 270.072216][ T6591] [ 270.072216][ T6591] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.072216][ T6591] [ 270.097857][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 270.122374][ T4213] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 270.492737][ T4213] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.644391][ T4213] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 270.862065][ T6591] ERROR: (device loop0): diWrite: ixpxd invalid [ 270.862065][ T6591] [ 270.873731][ T4213] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.885440][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.896502][ T4213] usb 6-1: config 0 descriptor?? [ 271.128971][ T6591] ERROR: (device loop0): txCommit: [ 271.128971][ T6591] [ 271.173598][ T4213] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 271.188038][ T6610] loop2: detected capacity change from 0 to 1024 [ 271.230173][ T6591] jfs_mkdir: dtSearch returned -17 [ 271.239277][ T6612] loop3: detected capacity change from 0 to 256 [ 271.263244][ T6610] EXT4-fs (loop2): inline encryption not supported [ 271.282613][ T4167] [ 271.282613][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.282613][ T4167] [ 271.290841][ T6610] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.521: lblock 1 mapped to illegal pblock 1 (length 1) [ 271.301327][ T4167] [ 271.301327][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.301327][ T4167] [ 271.308907][ T6612] exfat: Deprecated parameter 'utf8' [ 271.324059][ T6612] exfat: Deprecated parameter 'utf8' [ 271.329795][ T6612] exfat: Deprecated parameter 'namecase' [ 271.352491][ T6610] EXT4-fs (loop2): Remounting filesystem read-only [ 271.359045][ T6610] Quota error (device loop2): write_blk: dquota write failed [ 271.368860][ T6610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 271.372151][ T6593] udc-core: couldn't find an available UDC or it's busy [ 271.379181][ T6610] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.521: Failed to acquire dquot type 0 [ 271.392381][ T6612] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 271.410876][ T6610] EXT4-fs (loop2): Remounting filesystem read-only [ 271.417760][ T6615] loop1: detected capacity change from 0 to 1024 [ 271.462459][ T6593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 271.475296][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.517'. [ 271.490966][ T6615] EXT4-fs (loop1): inline encryption not supported [ 271.500038][ T6610] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.521: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.515604][ T6615] EXT4-fs (loop1): Ignoring removed bh option [ 271.559932][ T6610] EXT4-fs (loop2): Remounting filesystem read-only [ 271.570570][ T6615] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 271.731112][ T6610] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.521: Invalid inode bitmap blk 0 in block_group 0 [ 271.766541][ T6080] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 271.784401][ T6610] EXT4-fs (loop2): Remounting filesystem read-only [ 271.790947][ T6610] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 271.832774][ T6610] EXT4-fs (loop2): Remounting filesystem read-only [ 272.845229][ T6610] EXT4-fs (loop2): 1 orphan inode deleted [ 272.935469][ T6080] EXT4-fs (loop2): Remounting filesystem read-only [ 272.938326][ T6610] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,errors=remount-ro,block_validity,inlinecrypt,. Quota mode: writeback. [ 272.942110][ T6080] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 272.975110][ T5080] usb 6-1: USB disconnect, device number 3 [ 273.004959][ T6080] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:16: Failed to release dquot type 0 [ 273.039979][ T6080] EXT4-fs (loop2): Remounting filesystem read-only [ 273.077323][ T6080] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 273.149686][ T6080] EXT4-fs (loop2): Remounting filesystem read-only [ 273.161611][ T6080] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 273.183757][ T6080] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:16: Failed to release dquot type 0 [ 273.210476][ T6080] EXT4-fs (loop2): Remounting filesystem read-only [ 273.405109][ T26] audit: type=1326 audit(1746436601.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 273.484896][ T5080] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 273.522639][ T26] audit: type=1326 audit(1746436601.556:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 273.611552][ T26] audit: type=1326 audit(1746436601.556:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 273.678033][ T26] audit: type=1326 audit(1746436601.556:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 273.792358][ T26] audit: type=1326 audit(1746436601.556:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 273.852510][ T5080] usb 6-1: Using ep0 maxpacket: 32 [ 274.112814][ T5080] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 274.175234][ T5080] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 274.215199][ T26] audit: type=1326 audit(1746436601.556:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3016cb6969 code=0x7ffc0000 [ 274.369667][ T5080] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 274.580499][ T6629] loop0: detected capacity change from 0 to 32768 [ 274.702353][ T5080] usb 6-1: config 1 has no interface number 0 [ 274.708496][ T5080] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.732360][ T5080] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 274.762501][ T5080] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 274.771579][ T5080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.801973][ T6646] loop1: detected capacity change from 0 to 1024 [ 274.857859][ T5080] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 274.859612][ T6646] EXT4-fs (loop1): inline encryption not supported [ 274.879491][ T6646] EXT4-fs (loop1): Ignoring removed bh option [ 274.918273][ T6646] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 275.087402][ T5080] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 275.259478][ T6653] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.533: Allocating blocks 497-513 which overlap fs metadata [ 275.278357][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 275.287213][ T6653] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.533: Allocating blocks 497-513 which overlap fs metadata [ 275.303894][ T6653] EXT4-fs (loop1): Remounting filesystem read-only [ 275.623262][ T6644] EXT4-fs (loop1): pa ffff888020fc3c40: logic 48, phys. 177, len 21 [ 275.631378][ T6644] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 275.645535][ T6644] EXT4-fs (loop1): Remounting filesystem read-only [ 276.221660][ T6661] loop1: detected capacity change from 0 to 256 [ 276.243064][ T5080] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 276.313990][ T6661] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 277.061613][ T5080] usb 6-1: USB disconnect, device number 4 [ 277.073806][ T5080] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 277.331167][ T6670] loop2: detected capacity change from 0 to 1024 [ 277.424037][ T6670] EXT4-fs (loop2): inline encryption not supported [ 277.493650][ T6670] EXT4-fs (loop2): Ignoring removed bh option [ 277.816606][ T6670] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 278.342356][ T5084] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 279.002696][ T5084] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.084309][ T5084] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 279.153052][ T5084] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.173283][ T5084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.204570][ T5084] usb 1-1: config 0 descriptor?? [ 279.230883][ T6688] loop3: detected capacity change from 0 to 1024 [ 279.261345][ T5084] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 279.321733][ T6688] EXT4-fs (loop3): inline encryption not supported [ 279.361809][ T6688] EXT4-fs (loop3): Ignoring removed bh option [ 279.438147][ T6688] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 279.473626][ T6667] udc-core: couldn't find an available UDC or it's busy [ 279.492409][ T6690] loop5: detected capacity change from 0 to 32768 [ 279.493039][ T6667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 279.528550][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 279.821226][ T6699] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.545: Allocating blocks 497-513 which overlap fs metadata [ 280.180945][ T6699] EXT4-fs (loop3): Remounting filesystem read-only [ 280.188449][ T6699] EXT4-fs (loop3): pa ffff888020fc3ee0: logic 48, phys. 177, len 21 [ 280.197275][ T6699] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 280.214735][ T6699] EXT4-fs (loop3): Remounting filesystem read-only [ 280.235459][ T6690] XFS (loop5): Mounting V5 Filesystem [ 280.302501][ T6699] syz.3.545 (6699) used greatest stack depth: 20256 bytes left [ 280.347207][ T6690] XFS (loop5): Ending clean mount [ 280.358548][ T6690] XFS (loop5): Quotacheck needed: Please wait. [ 280.485074][ T6690] XFS (loop5): Quotacheck: Done. [ 281.016586][ T6720] loop1: detected capacity change from 0 to 32768 [ 281.169697][ T4736] XFS (loop5): Unmounting Filesystem [ 281.194800][ T6720] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 281.203071][ T6720] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 281.227839][ T6720] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 281.311294][ T6720] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 282.458366][ T7] usb 1-1: USB disconnect, device number 11 [ 285.818563][ T6758] loop3: detected capacity change from 0 to 1024 [ 285.892892][ T6758] EXT4-fs (loop3): inline encryption not supported [ 285.899538][ T6758] EXT4-fs (loop3): Ignoring removed bh option [ 285.975198][ T6758] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 286.310031][ T6763] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.559: Allocating blocks 497-513 which overlap fs metadata [ 286.327464][ T6763] EXT4-fs (loop3): Remounting filesystem read-only [ 286.335633][ T6763] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.559: Allocating blocks 497-513 which overlap fs metadata [ 286.352209][ T6763] EXT4-fs (loop3): Remounting filesystem read-only [ 286.663054][ T6757] EXT4-fs (loop3): pa ffff8880568670e0: logic 48, phys. 177, len 21 [ 286.671233][ T6757] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 286.685622][ T6757] EXT4-fs (loop3): Remounting filesystem read-only [ 286.756739][ T6766] loop5: detected capacity change from 0 to 128 [ 286.849926][ T6766] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.921197][ T6766] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.060852][ T4375] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.352717][ T5080] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 289.716076][ T6790] loop0: detected capacity change from 0 to 2048 [ 290.082464][ T5080] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.098196][ T5080] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 290.114257][ T6790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.117851][ T5080] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.135153][ T5080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.145072][ T6790] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.194791][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 290.194807][ T26] audit: type=1800 audit(1746436618.306:26): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.568" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 290.233185][ T5080] usb 6-1: config 0 descriptor?? [ 290.270080][ T6790] netlink: 248 bytes leftover after parsing attributes in process `syz.0.568'. [ 290.292459][ T5080] usb 6-1: can't set config #0, error -71 [ 290.323334][ T5080] usb 6-1: USB disconnect, device number 5 [ 290.362029][ T6802] tipc: Started in network mode [ 290.384018][ T6802] tipc: Node identity ac1414aa, cluster identity 4711 [ 290.428280][ T6802] tipc: Enabled bearer , priority 10 [ 290.498504][ T6804] tipc: Enabled bearer , priority 0 [ 290.667979][ T6797] loop2: detected capacity change from 0 to 32768 [ 290.765366][ T6797] ialloc: diAlloc returned -17! [ 290.799383][ T6817] ea_get: invalid extended attribute [ 290.823317][ T6816] loop0: detected capacity change from 0 to 1024 [ 290.833787][ T6817] ffff888060793ab0: 04 00 00 00 .... [ 291.009987][ T6816] EXT4-fs (loop0): inline encryption not supported [ 291.360580][ T6816] EXT4-fs (loop0): Ignoring removed bh option [ 291.501505][ T6816] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 291.530700][ T4796] tipc: Node number set to 2886997162 [ 291.861180][ T6830] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.574: Allocating blocks 497-513 which overlap fs metadata [ 291.969677][ T6830] EXT4-fs (loop0): Remounting filesystem read-only [ 292.114203][ T6830] EXT4-fs (loop0): pa ffff888020fc30e0: logic 48, phys. 177, len 21 [ 292.122324][ T6830] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 292.138213][ T6830] EXT4-fs (loop0): Remounting filesystem read-only [ 294.805590][ T4210] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 295.034109][ T6856] loop5: detected capacity change from 0 to 128 [ 295.049145][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.057480][ T6855] device bond0 left promiscuous mode [ 295.069762][ T6855] device bond_slave_0 left promiscuous mode [ 295.078951][ T6855] device bond_slave_1 left promiscuous mode [ 295.091048][ T6855] device batadv0 left promiscuous mode [ 295.119219][ T6856] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 295.199666][ T6856] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.213555][ T6856] ext2 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.254013][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.261722][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.272558][ T4210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.324083][ T4210] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 295.380483][ T4210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.397148][ T6863] loop1: detected capacity change from 0 to 4096 [ 295.425675][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.449948][ T4210] usb 3-1: config 0 descriptor?? [ 295.460159][ T6865] loop3: detected capacity change from 0 to 1024 [ 295.505659][ T4210] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 295.547420][ T6865] EXT4-fs (loop3): inline encryption not supported [ 295.581708][ T6865] EXT4-fs (loop3): Ignoring removed bh option [ 295.604675][ T26] audit: type=1800 audit(1746436623.716:27): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.586" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 295.657834][ T6865] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 295.706534][ T6848] udc-core: couldn't find an available UDC or it's busy [ 295.717888][ T6848] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.733311][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.582'. [ 295.884164][ T6870] loop1: detected capacity change from 0 to 128 [ 295.933356][ T6870] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 297.584600][ T5080] usb 3-1: USB disconnect, device number 9 [ 297.661416][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 300.800979][ T6899] loop1: detected capacity change from 0 to 40427 [ 300.893379][ T6899] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 300.901143][ T6899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 300.930219][ T6899] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 300.984157][ T6899] F2FS-fs (loop1): Found nat_bits in checkpoint [ 301.013616][ T6899] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 301.020684][ T6899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 301.400906][ T6920] ipt_REJECT: TCP_RESET invalid for non-tcp [ 302.229872][ T6922] loop0: detected capacity change from 0 to 1024 [ 302.326120][ T6922] EXT4-fs (loop0): inline encryption not supported [ 302.372476][ T6922] EXT4-fs (loop0): Ignoring removed bh option [ 302.430324][ T6922] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 302.728810][ T6928] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.600: Allocating blocks 497-513 which overlap fs metadata [ 302.746533][ T6928] EXT4-fs (loop0): Remounting filesystem read-only [ 302.753983][ T6928] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.600: Allocating blocks 497-513 which overlap fs metadata [ 302.771834][ T6928] EXT4-fs (loop0): Remounting filesystem read-only [ 303.068782][ T6921] EXT4-fs (loop0): pa ffff8880568678c0: logic 48, phys. 177, len 21 [ 303.076932][ T6921] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 303.088333][ T6921] EXT4-fs (loop0): Remounting filesystem read-only [ 303.104013][ T26] audit: type=1326 audit(1746436631.215:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.179034][ T26] audit: type=1326 audit(1746436631.245:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.201595][ T26] audit: type=1326 audit(1746436631.245:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.225726][ T26] audit: type=1326 audit(1746436631.245:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.248661][ T26] audit: type=1326 audit(1746436631.255:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.282414][ T26] audit: type=1326 audit(1746436631.255:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.327585][ T26] audit: type=1326 audit(1746436631.255:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.360598][ T26] audit: type=1326 audit(1746436631.255:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.383095][ T6937] loop5: detected capacity change from 0 to 512 [ 303.390302][ T26] audit: type=1326 audit(1746436631.265:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.447296][ T26] audit: type=1326 audit(1746436631.265:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.5.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3dd553969 code=0x7ffc0000 [ 303.672115][ T6937] EXT4-fs warning (device loop5): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 303.692500][ T4796] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.689257][ T6937] EXT4-fs (loop5): mount failed [ 305.345034][ T5080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 305.400647][ T6953] loop0: detected capacity change from 0 to 1024 [ 305.468476][ T5080] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.523788][ T6953] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 305.602408][ T6953] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 305.636053][ T6953] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.700854][ T6953] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 305.735859][ T4796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.772575][ T4796] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 305.863780][ T4796] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.883613][ T4796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.951575][ T6964] loop1: detected capacity change from 0 to 1024 [ 305.986171][ T4796] usb 4-1: config 0 descriptor?? [ 306.028887][ T6964] EXT4-fs (loop1): inline encryption not supported [ 306.074200][ T6968] ipt_REJECT: TCP_RESET invalid for non-tcp [ 306.105971][ T6964] EXT4-fs (loop1): Ignoring removed bh option [ 306.242566][ T5080] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.333814][ T6938] udc-core: couldn't find an available UDC or it's busy [ 306.430702][ T6938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 306.470536][ T6964] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 306.648245][ T5080] usb 3-1: Using ep0 maxpacket: 16 [ 306.676291][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.604'. [ 306.767524][ T4796] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 306.808035][ T5080] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 306.822449][ T5080] usb 3-1: config 0 has no interface number 0 [ 306.844078][ T5080] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 306.934632][ T5080] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 307.054986][ T6977] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.612: Allocating blocks 497-513 which overlap fs metadata [ 307.129656][ T6977] EXT4-fs (loop1): Remounting filesystem read-only [ 307.136741][ T6977] EXT4-fs (loop1): pa ffff888020fc3700: logic 48, phys. 177, len 21 [ 307.144848][ T6977] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 307.155313][ T6977] EXT4-fs (loop1): Remounting filesystem read-only [ 307.202646][ T5080] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 307.224932][ T5080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.242314][ T5080] usb 3-1: Product: syz [ 307.252654][ T5080] usb 3-1: Manufacturer: syz [ 307.257291][ T5080] usb 3-1: SerialNumber: syz [ 307.297918][ T5080] usb 3-1: config 0 descriptor?? [ 307.352627][ T6967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 307.359724][ T6967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 307.391857][ T6981] loop1: detected capacity change from 0 to 16 [ 307.421604][ T6981] erofs: (device loop1): mounted with root inode @ nid 36. [ 307.598775][ T6967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 307.612797][ T6967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 308.440340][ T23] usb 4-1: USB disconnect, device number 8 [ 308.613196][ T6994] loop3: detected capacity change from 0 to 164 [ 308.946680][ T6994] ISOFS: unable to read i-node block [ 309.002883][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 309.120527][ T6994] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 309.189568][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 309.712811][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 309.948681][ T7009] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 310.670476][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 310.790369][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.892548][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 310.953521][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 311.012790][ T7015] loop5: detected capacity change from 0 to 32768 [ 311.062601][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.078137][ T7022] loop1: detected capacity change from 0 to 512 [ 311.112544][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.151439][ T7022] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 311.292456][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 311.332414][ T7015] XFS (loop5): Mounting V5 Filesystem [ 311.342479][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.392511][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.412324][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 311.444499][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.502501][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.632407][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 311.933761][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 312.125899][ T7015] XFS (loop5): Ending clean mount [ 312.133820][ T7015] XFS (loop5): Quotacheck needed: Please wait. [ 312.152511][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 312.356051][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 312.582534][ T5080] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 312.802781][ T7015] XFS (loop5): Quotacheck: Done. [ 417.742236][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 417.748915][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0f1/1/0x4000000000000000 softirq=18566/18566 fqs=3 [ 417.761173][ C0] (t=10500 jiffies g=24637 q=41) [ 417.766216][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g24637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 417.777421][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 417.787408][ C0] rcu: RCU grace-period kthread stack dump: [ 417.793302][ C0] task:rcu_preempt state:R running task stack:27808 pid: 15 ppid: 2 flags:0x00004000 [ 417.804116][ C0] Call Trace: [ 417.807600][ C0] [ 417.810557][ C0] __schedule+0x11b8/0x43b0 [ 417.815088][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 417.820488][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 417.826407][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 417.832317][ C0] ? _raw_spin_unlock+0x40/0x40 [ 417.837188][ C0] ? rcu_is_watching+0x11/0xa0 [ 417.841964][ C0] ? release_firmware_map_entry+0x190/0x190 [ 417.847890][ C0] schedule+0x11b/0x1e0 [ 417.852064][ C0] schedule_timeout+0x15c/0x280 [ 417.856928][ C0] ? console_conditional_schedule+0x40/0x40 [ 417.862830][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 417.868739][ C0] ? update_process_times+0x200/0x200 [ 417.874133][ C0] ? prepare_to_swait_event+0x331/0x350 [ 417.879699][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 417.884577][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 417.890748][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 417.895598][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 417.900817][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 417.906038][ C0] rcu_gp_kthread+0x98/0x350 [ 417.910644][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 417.915771][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 417.921748][ C0] ? __kthread_parkme+0x157/0x1b0 [ 417.926801][ C0] kthread+0x436/0x520 [ 417.930883][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 417.936005][ C0] ? kthread_blkcg+0xd0/0xd0 [ 417.940609][ C0] ret_from_fork+0x1f/0x30 [ 417.945049][ C0] [ 417.948076][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 417.954398][ C0] Sending NMI from CPU 0 to CPUs 1: [ 417.959644][ C1] NMI backtrace for cpu 1 [ 417.959658][ C1] CPU: 1 PID: 7015 Comm: syz.5.625 Not tainted 5.15.181-syzkaller #0 [ 417.959676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 417.959689][ C1] RIP: 0010:rcu_read_lock_held+0x2b/0x40 [ 417.959716][ C1] Code: e8 2a 4a 3e 08 85 c0 74 26 31 db e8 ff af 00 00 84 c0 74 20 e8 56 b1 00 00 84 c0 74 17 48 c7 c7 60 be 11 8c be ff ff ff ff 5b b0 46 3e 08 bb 01 00 00 00 89 d8 5b c3 0f 1f 80 00 00 00 00 55 [ 417.959734][ C1] RSP: 0018:ffffc90000dd0dc8 EFLAGS: 00000002 [ 417.959749][ C1] RAX: 1ffffffff1824001 RBX: ffff888028e11dc0 RCX: c763de92bec87c00 [ 417.959762][ C1] RDX: 0000000000010000 RSI: 00000000ffffffff RDI: ffffffff8c11be60 [ 417.959781][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1ff3219 [ 417.959794][ C1] R10: fffffbfff1ff3219 R11: 1ffffffff1ff3218 R12: 0000000000000001 [ 417.959806][ C1] R13: 0000000000000001 R14: ffff88802353a8c0 R15: ffff888028e11dc0 [ 417.959818][ C1] FS: 00007fb3db3bb6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 417.959833][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.959845][ C1] CR2: 000000110c34dc5b CR3: 0000000023c24000 CR4: 00000000003506e0 [ 417.959860][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.959870][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.959880][ C1] Call Trace: [ 417.959885][ C1] [ 417.959890][ C1] __sigqueue_alloc+0x17a/0x4b0 [ 417.959910][ C1] __send_signal+0x203/0xdb0 [ 417.959933][ C1] group_send_sig_info+0x1c6/0x220 [ 417.959954][ C1] do_bpf_send_signal+0x7b/0x150 [ 417.959972][ C1] irq_work_run_list+0x1bb/0x330 [ 417.959992][ C1] ? irq_work_run+0xe0/0xe0 [ 417.960011][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 417.960033][ C1] irq_work_run+0x63/0xe0 [ 417.960051][ C1] __sysvec_irq_work+0x98/0x240 [ 417.960070][ C1] sysvec_irq_work+0x98/0xc0 [ 417.960088][ C1] [ 417.960092][ C1] [ 417.960098][ C1] asm_sysvec_irq_work+0x16/0x20 [ 417.960113][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 417.960133][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 1f 30 c8 02 66 2e 0f 1f 84 00 00 00 00 00 [ 417.960147][ C1] RSP: 0018:ffffc9000341fcb0 EFLAGS: 00000246 [ 417.960159][ C1] RAX: 00000000000000f6 RBX: ffffffff8bbaea10 RCX: 000000000000083f [ 417.960171][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 417.960181][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267a7 [ 417.960192][ C1] R10: ffffed10172267a7 R11: 1ffff110172267a6 R12: ffff8880b9133b01 [ 417.960205][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 417.960225][ C1] arch_irq_work_raise+0x82/0xd0 [ 417.960243][ C1] irq_work_queue+0x95/0x140 [ 417.960262][ C1] bpf_send_signal_common+0x2b2/0x420 [ 417.960280][ C1] ? rcu_lock_release+0x20/0x20 [ 417.960295][ C1] ? __cant_sleep+0x210/0x210 [ 417.960313][ C1] ? __context_tracking_exit+0x4c/0x80 [ 417.960333][ C1] bpf_send_signal+0x15/0x20 [ 417.960352][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x398 [ 417.960367][ C1] bpf_trace_run2+0x15b/0x2d0 [ 417.960387][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 417.960404][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 417.960426][ C1] ? lock_chain_count+0x20/0x20 [ 417.960446][ C1] __bpf_trace_sys_enter+0x60/0x70 [ 417.960467][ C1] trace_sys_enter+0x65/0x80 [ 417.960483][ C1] syscall_trace_enter+0x115/0x180 [ 417.960503][ C1] do_syscall_64+0x24/0xa0 [ 417.960518][ C1] ? clear_bhb_loop+0x15/0x70 [ 417.960533][ C1] ? clear_bhb_loop+0x15/0x70 [ 417.960549][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.960568][ C1] RIP: 0033:0x7fb3dd4efb39 [ 417.960590][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 417.960604][ C1] RSP: 002b:00007fb3db3ba840 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 417.960620][ C1] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fb3dd4efb39 [ 417.960632][ C1] RDX: 00007fb3db3ba840 RSI: 00007fb3db3ba970 RDI: 0000000000000011 [ 417.960643][ C1] RBP: 0000200000009780 R08: 0000000000000000 R09: 0000000000000000 [ 417.960653][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000200000009780 [ 417.960664][ C1] R13: 00007fb3db3baeb0 R14: 0000000000009793 R15: 00002000000006c0 [ 417.960684][ C1] [ 417.961638][ C0] NMI backtrace for cpu 0 [ 418.403675][ C0] CPU: 0 PID: 7027 Comm: syz.2.628 Not tainted 5.15.181-syzkaller #0 [ 418.411765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 418.421831][ C0] Call Trace: [ 418.425126][ C0] [ 418.427980][ C0] dump_stack_lvl+0x168/0x230 [ 418.432686][ C0] ? show_regs_print_info+0x20/0x20 [ 418.437906][ C0] ? load_image+0x3b0/0x3b0 [ 418.442433][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 418.447412][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 418.452374][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 418.458554][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 418.463945][ C0] ? _raw_spin_lock+0x40/0x40 [ 418.468643][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 418.474728][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 418.480732][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 418.485866][ C0] print_cpu_stall+0x31d/0x5f0 [ 418.490646][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 418.495864][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 418.500735][ C0] ? account_process_tick+0x227/0x3a0 [ 418.506126][ C0] update_process_times+0x193/0x200 [ 418.511345][ C0] tick_sched_timer+0x37d/0x560 [ 418.516213][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 418.521435][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 418.527016][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 418.532143][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 418.538230][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 418.543209][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 418.549220][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 418.554872][ C0] [ 418.557812][ C0] [ 418.560753][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 418.566745][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x70 [ 418.573264][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 3d f6 ff ff eb 31 eb 35 e8 04 a6 dc f7 e8 ff a3 dc f7 fb 65 48 8b 05 76 37 61 76 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 51 db c4 f7 48 [ 418.592888][ C0] RSP: 0018:ffffc900030aff08 EFLAGS: 00000286 [ 418.598972][ C0] RAX: ffff888021fa8000 RBX: 000000000000000f RCX: e0978c3814f86c00 [ 418.606954][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0 [ 418.614940][ C0] RBP: ffffc900030aff48 R08: dffffc0000000000 R09: fffffbfff1ad155e [ 418.622924][ C0] R10: fffffbfff1ad155e R11: 1ffffffff1ad155d R12: 0000000000000000 [ 418.630908][ C0] R13: 0000000000000000 R14: ffffc900030aff58 R15: 0000000000000000 [ 418.638913][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 418.644929][ C0] do_syscall_64+0x24/0xa0 [ 418.649383][ C0] ? clear_bhb_loop+0x15/0x70 [ 418.654075][ C0] ? clear_bhb_loop+0x15/0x70 [ 418.658771][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.664812][ C0] RIP: 0033:0x7f1f0fab1b39 [ 418.669245][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 418.688985][ C0] RSP: 002b:00007ffe2cf1ad00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 418.697506][ C0] RAX: ffffffffffffffda RBX: 00007f1f0fd3cfa8 RCX: 00007f1f0fab1b39 [ 418.705494][ C0] RDX: 00007ffe2cf1ad00 RSI: 00007ffe2cf1ae30 RDI: 0000000000000011 [ 418.713482][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000072cf1b58f [ 418.721464][ C0] R10: 00007f1f0fd3cfa0 R11: 0000000000000246 R12: 00007f1f0fd3cfac [ 418.729448][ C0] R13: 00007f1f0fd3cfa0 R14: 0000000000001014 R15: 0000000000000006 [ 418.737449][ C0] [ 419.283258][ T1421] ieee802154 phy0 wpan0: encryption failed: -22