last executing test programs: 41m53.903476737s ago: executing program 0 (id=701): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) bind$vsock_stream(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 41m52.598917882s ago: executing program 0 (id=703): r0 = io_uring_setup(0x1459, &(0x7f0000001400)={0x0, 0xe0a5, 0x2, 0x3, 0x37}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup3(r2, r0, 0x80000) read$FUSE(r3, &(0x7f0000006680)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002040)={0x2020}, 0x2020) 41m51.153514892s ago: executing program 0 (id=706): sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x100) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 41m50.338512724s ago: executing program 0 (id=709): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x400000000000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000003, 0x30, 0xffffffffffffffff, 0x69c5b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 41m48.987099611s ago: executing program 0 (id=712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 41m47.983606748s ago: executing program 0 (id=715): close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 41m32.518723521s ago: executing program 32 (id=715): close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 38.468640712s ago: executing program 2 (id=4854): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253d", 0x65}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22f", 0x77}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.831641766s ago: executing program 4 (id=4916): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="02", @ANYBLOB="01000000050000000100000000000000000000000000000000000000c2"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.745152523s ago: executing program 4 (id=4918): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa93, &(0x7f0000002740)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000900)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x200000, 0xfffffffe) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r0, 0x7449}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file3\x00', 0x0) 10.232118711s ago: executing program 3 (id=4921): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}], 0x1b8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.779648963s ago: executing program 3 (id=4922): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.54727099s ago: executing program 1 (id=4923): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) 7.071768548s ago: executing program 1 (id=4924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000070000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.058358228s ago: executing program 3 (id=4925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb0010000000000000e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.055205628s ago: executing program 4 (id=4926): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253d", 0x65}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a4", 0x69}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.965802591s ago: executing program 2 (id=4864): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253d", 0x65}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {0x0}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.859584983s ago: executing program 3 (id=4927): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) recvmmsg(r7, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 6.691004048s ago: executing program 4 (id=4928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x101) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x40080c4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 6.428357245s ago: executing program 2 (id=4929): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}], 0x1b8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.356054744s ago: executing program 3 (id=4930): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) 4.152661337s ago: executing program 3 (id=4931): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 4.083832279s ago: executing program 4 (id=4932): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.077230129s ago: executing program 1 (id=4933): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) 3.848585916s ago: executing program 2 (id=4934): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.784626852s ago: executing program 1 (id=4935): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') setgroups(0x51, 0x0) setreuid(0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 1.551388218s ago: executing program 2 (id=4936): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00303a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000002000000000000000000000000000000000000000000ffffe0000001c4cbe5f76871b68e13042aca023ce92156db895e4c4ed3563a037408b9dad3d329508dd1f31bfb50832ec3d6f42ce7afed7a64557c7c71ccf392b443d3f0488025876f6dad5418d108000000006f5f5cdcd93030145a3ed01f"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 396.01673ms ago: executing program 1 (id=4937): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253d", 0x65}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {0x0}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 154.049856ms ago: executing program 2 (id=4938): r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa93, &(0x7f0000002740)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000900)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x200000, 0xfffffffe) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000000)={r5, r0, 0x7449}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x24042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file3\x00', 0x0) 43.577909ms ago: executing program 4 (id=4939): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd71a, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xffbffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x44000, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0xc], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x9, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0xa00, 0xfdff, 0x6, 0xbc, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x10000, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x9, 0x22, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x1, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x5, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xff, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x8, 0xd, 0x101, 0xf, 0x13, 0x136, 0x6]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0xf73, 0x4) 0s ago: executing program 1 (id=4940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x101) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x40080c4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) kernel console output (not intermixed with test programs): =1800 audit(1777649770.669:140): pid=23823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4193" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2549.384546][T23835] loop3: detected capacity change from 0 to 16 [ 2550.645770][T23835] erofs: (device loop3): mounted with root inode @ nid 36. [ 2550.688850][T23834] syz.3.4196: attempt to access beyond end of device [ 2550.688850][T23834] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2550.719496][T23834] syz.3.4196: attempt to access beyond end of device [ 2550.719496][T23834] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2550.733723][T23834] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2550.755899][ T28] audit: type=1800 audit(1777649773.489:141): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4196" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2552.664321][T23855] loop4: detected capacity change from 0 to 16 [ 2552.732097][T23853] loop3: detected capacity change from 0 to 16 [ 2552.768196][T23855] erofs: (device loop4): mounted with root inode @ nid 36. [ 2552.780455][T23855] syz.4.4202: attempt to access beyond end of device [ 2552.780455][T23855] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2552.796373][T23853] erofs: (device loop3): mounted with root inode @ nid 36. [ 2552.807052][T23853] syz.3.4203: attempt to access beyond end of device [ 2552.807052][T23853] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2552.828533][T23853] syz.3.4203: attempt to access beyond end of device [ 2552.828533][T23853] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2552.842840][T23853] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2552.855286][T23855] syz.4.4202: attempt to access beyond end of device [ 2552.855286][T23855] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2552.869917][T23855] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2552.908720][T23855] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2552.919872][T23855] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2552.933888][ T28] audit: type=1800 audit(1777649775.599:142): pid=23853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4203" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2553.084212][ T28] audit: type=1800 audit(1777649775.629:143): pid=23855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4202" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2553.227448][T23857] loop1: detected capacity change from 0 to 2048 [ 2553.302488][T23857] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2553.326889][T23861] vlan0: entered promiscuous mode [ 2553.381049][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop1 [ 2553.418569][T23862] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2553.777786][T14645] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2553.819791][T23850] vlan0: left promiscuous mode [ 2553.993653][T14645] usb 4-1: Using ep0 maxpacket: 8 [ 2554.026257][T14645] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2554.063290][T14645] usb 4-1: can't read configurations, error -61 [ 2554.262188][T14645] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2554.477747][T14645] usb 4-1: Using ep0 maxpacket: 8 [ 2554.486845][T14645] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2554.505728][T14645] usb 4-1: can't read configurations, error -61 [ 2554.525375][T14645] usb usb4-port1: attempt power cycle [ 2554.629143][T23866] loop4: detected capacity change from 0 to 32768 [ 2554.704138][T23866] JBD2: Ignoring recovery information on journal [ 2554.947976][T14645] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2555.007968][T23866] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2555.027294][T14645] usb 4-1: Using ep0 maxpacket: 8 [ 2555.144393][T14645] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2555.397674][T14645] usb 4-1: can't read configurations, error -61 [ 2555.578688][T14645] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2555.648770][T14645] usb 4-1: Using ep0 maxpacket: 8 [ 2555.672285][T14645] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2555.698043][T14645] usb 4-1: can't read configurations, error -61 [ 2555.718007][T14645] usb usb4-port1: unable to enumerate USB device [ 2555.789251][T20072] ocfs2: Unmounting device (7,4) on (node local) [ 2558.125698][T23910] loop2: detected capacity change from 0 to 2048 [ 2558.138585][T23908] loop4: detected capacity change from 0 to 2048 [ 2558.151935][T23910] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2558.204922][T23908] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2558.224237][T23911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2558.265898][T23912] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2558.507843][T19732] Bluetooth: hci2: command 0x0406 tx timeout [ 2561.553796][T23916] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2561.594265][T23916] Remounting filesystem read-only [ 2561.617550][T23916] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2562.341528][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4225'. [ 2562.353157][T23923] overlayfs: missing 'lowerdir' [ 2563.081025][T23938] loop3: detected capacity change from 0 to 2048 [ 2563.123366][T23938] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2563.179256][T23941] vlan0: entered promiscuous mode [ 2563.191064][T23942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2563.233263][T23943] loop1: detected capacity change from 0 to 512 [ 2563.628718][T23929] vlan0: left promiscuous mode [ 2563.763152][T23946] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 2563.805437][T23946] Remounting filesystem read-only [ 2564.328957][T16582] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2564.387688][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 2564.397655][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2564.404923][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.447677][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.477694][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.486920][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2564.517663][T16582] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2564.540024][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.567689][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.576633][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.600524][T23937] loop2: detected capacity change from 0 to 32768 [ 2564.618521][T16582] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2564.625299][T16582] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 2564.664124][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.691421][T23937] JBD2: Ignoring recovery information on journal [ 2564.704144][T16582] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2564.740018][T16582] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2564.776462][T16582] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 2564.827651][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2564.836597][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2564.880412][T23937] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2564.887895][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2564.896791][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2564.928597][T16582] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2564.935376][T16582] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2564.980669][T16582] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2565.000743][T16582] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2565.019751][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2565.041376][T16582] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2565.064693][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2565.089760][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2565.116022][T16582] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2565.135683][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2565.163963][T16582] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 2565.177790][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2565.197109][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2565.224854][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2565.243362][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2565.278373][T23937] OCFS2: ERROR (device loop2): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 2565.348442][T23937] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2565.407866][T23937] OCFS2: File system is now read-only. [ 2565.423648][T23937] (syz.2.4231,23937,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 2565.457036][T23937] (syz.2.4231,23937,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 2565.477846][T23937] (syz.2.4231,23937,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 2565.498146][T23937] (syz.2.4231,23937,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 2565.506414][T23937] (syz.2.4231,23937,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 2565.535484][T23937] (syz.2.4231,23937,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 2565.725230][T16859] ocfs2: Unmounting device (7,2) on (node local) [ 2565.757580][T23957] loop1: detected capacity change from 0 to 16 [ 2565.810482][T23957] erofs: (device loop1): mounted with root inode @ nid 36. [ 2565.846159][T23957] syz.1.4235: attempt to access beyond end of device [ 2565.846159][T23957] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2565.894073][T23957] syz.1.4235: attempt to access beyond end of device [ 2565.894073][T23957] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2565.907974][T23957] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2565.937272][ T28] audit: type=1800 audit(1777649788.669:144): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4235" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2566.969618][T23965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4236'. [ 2566.981272][T23965] overlayfs: missing 'lowerdir' [ 2567.414000][T23968] loop1: detected capacity change from 0 to 16 [ 2567.503220][T23968] erofs: (device loop1): mounted with root inode @ nid 36. [ 2567.541633][T23968] syz.1.4237: attempt to access beyond end of device [ 2567.541633][T23968] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2567.579922][T23968] syz.1.4237: attempt to access beyond end of device [ 2567.579922][T23968] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2567.595098][T23968] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2567.637144][T23968] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2567.648992][T23968] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2567.705093][ T28] audit: type=1800 audit(1777649790.359:145): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4237" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2569.542160][T23982] loop1: detected capacity change from 0 to 16 [ 2569.559967][T23982] erofs: (device loop1): mounted with root inode @ nid 36. [ 2569.594609][T23982] syz.1.4241: attempt to access beyond end of device [ 2569.594609][T23982] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2569.621243][T23982] syz.1.4241: attempt to access beyond end of device [ 2569.621243][T23982] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2569.636857][T23982] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2569.680232][T23982] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2569.693605][T23982] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2569.758595][ T28] audit: type=1800 audit(1777649792.399:146): pid=23982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4241" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2570.552710][T23985] loop2: detected capacity change from 0 to 2048 [ 2570.604415][T23985] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2570.666018][T23989] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2571.507022][T23980] loop3: detected capacity change from 0 to 32768 [ 2571.621538][T23996] loop2: detected capacity change from 0 to 2048 [ 2571.672725][T23980] JBD2: Ignoring recovery information on journal [ 2571.683383][T23996] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2571.826873][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'. [ 2571.837942][T24000] overlayfs: missing 'lowerdir' [ 2571.893893][T24002] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2572.874711][T23980] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2572.891098][T24004] loop4: detected capacity change from 0 to 512 [ 2573.320049][T24009] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2573.411471][T24009] Remounting filesystem read-only [ 2573.433473][T24009] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2574.324396][T24014] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2574.372856][T24014] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2574.392889][T24014] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2574.483924][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2574.810152][T24024] loop1: detected capacity change from 0 to 16 [ 2574.826905][T24024] erofs: (device loop1): mounted with root inode @ nid 36. [ 2575.882468][T24024] syz.1.4252: attempt to access beyond end of device [ 2575.882468][T24024] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2576.001826][T24025] loop4: detected capacity change from 0 to 512 [ 2576.028279][T24024] syz.1.4252: attempt to access beyond end of device [ 2576.028279][T24024] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2576.043208][T24024] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2576.382865][T24021] loop2: detected capacity change from 0 to 2048 [ 2576.446903][ T28] audit: type=1800 audit(1777649798.799:147): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4252" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2576.497927][T24021] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2576.780109][T24030] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2576.926370][T24034] loop1: detected capacity change from 0 to 2048 [ 2576.984997][T24034] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2577.071325][T24036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2577.447658][T24041] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2577.459511][T24041] Remounting filesystem read-only [ 2577.479643][T24041] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2578.805166][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4256'. [ 2578.816385][T24045] overlayfs: missing 'lowerdir' [ 2579.450199][T24051] loop4: detected capacity change from 0 to 16 [ 2579.487577][T24051] erofs: (device loop4): mounted with root inode @ nid 36. [ 2579.517821][T24051] syz.4.4258: attempt to access beyond end of device [ 2579.517821][T24051] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2579.540487][T24051] syz.4.4258: attempt to access beyond end of device [ 2579.540487][T24051] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2579.555462][T24051] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2579.594632][T24051] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2579.606446][T24051] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2579.637760][ T28] audit: type=1800 audit(1777649802.319:148): pid=24051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4258" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2580.751851][T24060] loop2: detected capacity change from 0 to 16 [ 2581.051940][T24057] loop1: detected capacity change from 0 to 2048 [ 2581.283064][T24057] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2581.951103][T24060] erofs: (device loop2): mounted with root inode @ nid 36. [ 2581.994922][T24059] syz.2.4259: attempt to access beyond end of device [ 2581.994922][T24059] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2582.026742][T24059] syz.2.4259: attempt to access beyond end of device [ 2582.026742][T24059] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2582.030348][T24063] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2582.041563][T24059] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2582.077896][ T28] audit: type=1800 audit(1777649804.809:149): pid=24059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4259" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2582.117459][T19321] udevd[19321]: incorrect nilfs2 checksum on /dev/loop1 [ 2582.769558][T24065] loop4: detected capacity change from 0 to 16 [ 2582.928839][T24065] erofs: (device loop4): mounted with root inode @ nid 36. [ 2582.960246][T24065] syz.4.4261: attempt to access beyond end of device [ 2582.960246][T24065] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2582.983842][T24065] syz.4.4261: attempt to access beyond end of device [ 2582.983842][T24065] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2582.999501][T24065] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2583.041048][T24065] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2583.052751][T24065] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2583.109161][ T28] audit: type=1800 audit(1777649805.759:150): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4261" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2583.785304][T24073] loop2: detected capacity change from 0 to 16 [ 2583.817429][T24073] erofs: (device loop2): mounted with root inode @ nid 36. [ 2583.827836][T24073] syz.2.4263: attempt to access beyond end of device [ 2583.827836][T24073] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2583.844287][T24073] syz.2.4263: attempt to access beyond end of device [ 2583.844287][T24073] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2583.858238][T24073] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2583.870510][ T28] audit: type=1800 audit(1777649806.619:151): pid=24073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4263" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2584.019321][T24076] loop3: detected capacity change from 0 to 512 [ 2584.671978][T24075] loop1: detected capacity change from 0 to 2048 [ 2584.742906][T24075] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2584.865039][T24077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2585.419537][T24084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4268'. [ 2585.431114][T24084] overlayfs: missing 'lowerdir' [ 2585.915234][T24092] loop1: detected capacity change from 0 to 2048 [ 2585.932346][T24092] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2585.977007][T24095] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2585.988698][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop1 [ 2587.034881][T24099] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2587.581579][T24099] Remounting filesystem read-only [ 2587.802967][T15941] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 2587.812056][T15941] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 2587.820162][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2587.827436][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.839361][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.850960][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.861183][T15941] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 2587.868281][T15941] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 2587.875770][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.906608][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.927014][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2587.966911][T15941] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 2588.003069][T24107] overlayfs: missing 'lowerdir' [ 2588.017747][T15941] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 2588.035278][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.076235][T15941] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 2588.110484][T15941] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 2588.141653][T15941] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 2588.176452][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.193968][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.201650][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.209190][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.219272][T15941] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 2588.226115][T15941] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 2588.233620][T15941] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 2588.241114][T15941] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 2588.248658][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.257744][T15941] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 2588.265047][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.274385][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.283665][T15941] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 2588.291143][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.301742][T15941] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 2588.309252][T15941] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2588.318556][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.325902][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.339924][T15941] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2588.601367][T24111] loop3: detected capacity change from 0 to 512 [ 2589.728397][T24121] overlayfs: missing 'lowerdir' [ 2590.781566][T24124] loop3: detected capacity change from 0 to 16 [ 2590.799890][T24124] erofs: (device loop3): mounted with root inode @ nid 36. [ 2590.810288][T24124] syz.3.4276: attempt to access beyond end of device [ 2590.810288][T24124] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2590.835772][T24124] syz.3.4276: attempt to access beyond end of device [ 2590.835772][T24124] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2590.849979][T24124] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2590.862226][ T28] audit: type=1800 audit(1777649813.609:152): pid=24124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4276" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2591.458124][T24138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 2591.471265][T24138] overlayfs: missing 'lowerdir' [ 2591.837838][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'. [ 2591.865795][T24140] overlayfs: missing 'lowerdir' [ 2592.690680][T24149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4282'. [ 2592.715054][T24149] overlayfs: missing 'lowerdir' [ 2593.515038][T24147] loop3: detected capacity change from 0 to 2048 [ 2593.554886][T24147] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2593.659860][T24155] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2593.683463][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop3 [ 2595.317425][T24167] loop4: detected capacity change from 0 to 16 [ 2595.444956][T24167] erofs: (device loop4): mounted with root inode @ nid 36. [ 2595.474742][T24167] syz.4.4288: attempt to access beyond end of device [ 2595.474742][T24167] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2595.559084][T24167] syz.4.4288: attempt to access beyond end of device [ 2595.559084][T24167] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2595.575218][T24167] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2595.621016][ T28] audit: type=1800 audit(1777649818.339:153): pid=24167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4288" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2595.977988][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 2595.989067][T24175] overlayfs: missing 'lowerdir' [ 2596.064827][T24173] loop4: detected capacity change from 0 to 2048 [ 2596.093875][T24173] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2596.131972][T24179] loop3: detected capacity change from 0 to 16 [ 2596.143923][T24180] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2596.155694][T24179] erofs: (device loop3): mounted with root inode @ nid 36. [ 2596.166088][T24179] syz.3.4291: attempt to access beyond end of device [ 2596.166088][T24179] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2596.190377][T24179] syz.3.4291: attempt to access beyond end of device [ 2596.190377][T24179] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2596.204366][T24179] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2596.215788][ T28] audit: type=1800 audit(1777649818.959:154): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4291" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2596.272755][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2596.279409][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2596.789332][T24183] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2596.825898][T24183] Remounting filesystem read-only [ 2597.746537][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2597.778772][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2597.786123][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2597.797001][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2597.807256][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2597.822782][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2597.895607][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2597.914453][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2597.937148][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2597.966347][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.000893][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.036053][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2598.075547][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2598.083586][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.092565][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2598.099957][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2598.107413][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2598.115600][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.125221][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.132619][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.144516][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.154080][T24188] loop3: detected capacity change from 0 to 16 [ 2598.156132][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2598.169577][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2598.177009][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2598.186629][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2598.195922][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.206430][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2598.260105][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.372064][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.490818][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2598.590565][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.697251][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2598.719102][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2598.755272][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.786464][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.817627][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2598.965938][T24188] erofs: (device loop3): mounted with root inode @ nid 36. [ 2598.999642][T24188] syz.3.4295: attempt to access beyond end of device [ 2598.999642][T24188] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2599.099807][T24188] syz.3.4295: attempt to access beyond end of device [ 2599.099807][T24188] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2600.190500][T24188] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2600.203224][ T28] audit: type=1800 audit(1777649822.949:155): pid=24188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4295" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2601.013218][T24208] loop2: detected capacity change from 0 to 2048 [ 2601.047475][T24208] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2601.097214][T24210] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2601.882194][T24218] loop1: detected capacity change from 0 to 2048 [ 2601.947010][T24218] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2602.007630][T19321] udevd[19321]: incorrect nilfs2 checksum on /dev/loop1 [ 2602.033624][T24220] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2602.514132][T24226] loop3: detected capacity change from 0 to 16 [ 2602.532580][T24226] erofs: (device loop3): mounted with root inode @ nid 36. [ 2602.542811][T24226] syz.3.4304: attempt to access beyond end of device [ 2602.542811][T24226] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2602.592821][T24226] syz.3.4304: attempt to access beyond end of device [ 2602.592821][T24226] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2602.606828][T24226] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2602.620500][ T28] audit: type=1800 audit(1777649825.369:156): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4304" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2602.667555][T24227] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2602.728248][T24227] Remounting filesystem read-only [ 2602.744036][T24228] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2604.919510][T24250] loop3: detected capacity change from 0 to 512 [ 2605.858282][T24256] loop2: detected capacity change from 0 to 2048 [ 2605.951324][T24259] loop3: detected capacity change from 0 to 16 [ 2605.971563][T24259] erofs: (device loop3): mounted with root inode @ nid 36. [ 2606.003037][T24259] syz.3.4311: attempt to access beyond end of device [ 2606.003037][T24259] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2606.028244][T24259] syz.3.4311: attempt to access beyond end of device [ 2606.028244][T24259] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2606.043361][T24259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2606.088350][T24259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2606.100418][T24259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2606.131415][ T28] audit: type=1800 audit(1777649828.799:157): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4311" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2606.195015][T24256] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2606.912191][T24260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2607.535910][T24264] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2607.565939][T24264] Remounting filesystem read-only [ 2608.065581][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2608.103400][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2608.125850][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2608.140196][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2608.161309][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2608.173870][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2608.218888][T24270] loop3: detected capacity change from 0 to 16 [ 2608.253101][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4314'. [ 2608.276035][T24271] overlayfs: missing 'lowerdir' [ 2608.283835][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2608.296722][T24270] erofs: (device loop3): mounted with root inode @ nid 36. [ 2608.320510][T24270] syz.3.4315: attempt to access beyond end of device [ 2608.320510][T24270] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2608.353225][T24270] syz.3.4315: attempt to access beyond end of device [ 2608.353225][T24270] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2608.368806][T24270] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2608.415135][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2608.430850][ T28] audit: type=1800 audit(1777649831.129:158): pid=24270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4315" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2608.549565][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2608.732549][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2608.913838][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.151802][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2609.162671][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2609.186429][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.196302][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2609.204234][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2609.212256][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2609.220017][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.232661][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.240393][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.248886][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.262718][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2609.269940][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2609.277283][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2609.285119][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2609.294306][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.303627][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2609.313002][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.333292][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.345928][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2609.361891][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.372189][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2609.383356][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2609.405371][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.457240][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.491294][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2609.776173][T24283] loop3: detected capacity change from 0 to 16 [ 2609.805182][T24283] erofs: (device loop3): mounted with root inode @ nid 36. [ 2609.846118][T24283] syz.3.4318: attempt to access beyond end of device [ 2609.846118][T24283] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2609.866919][T24283] syz.3.4318: attempt to access beyond end of device [ 2609.866919][T24283] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2609.882444][T24283] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2609.922945][T24283] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2609.934755][T24283] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2609.976709][ T28] audit: type=1800 audit(1777649832.639:159): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4318" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2611.584365][T24292] overlayfs: missing 'lowerdir' [ 2612.523225][T24296] loop2: detected capacity change from 0 to 16 [ 2612.537533][T24296] erofs: (device loop2): mounted with root inode @ nid 36. [ 2612.565760][T24296] syz.2.4323: attempt to access beyond end of device [ 2612.565760][T24296] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2612.601316][T24296] syz.2.4323: attempt to access beyond end of device [ 2612.601316][T24296] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2612.616371][T24296] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2612.657004][T24296] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2612.669330][T24296] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2612.700192][ T28] audit: type=1800 audit(1777649835.379:160): pid=24296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4323" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2613.776311][T24307] loop2: detected capacity change from 0 to 16 [ 2613.830760][T24307] erofs: (device loop2): mounted with root inode @ nid 36. [ 2613.864625][T24307] syz.2.4326: attempt to access beyond end of device [ 2613.864625][T24307] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2613.887783][T24307] syz.2.4326: attempt to access beyond end of device [ 2613.887783][T24307] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2613.903519][T24307] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2613.945486][T24307] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2613.957436][T24307] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2614.007528][ T28] audit: type=1800 audit(1777649836.659:161): pid=24307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4326" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2615.115798][T24313] loop2: detected capacity change from 0 to 2048 [ 2615.186545][T24313] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2615.250648][T24317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2616.510744][T24330] loop1: detected capacity change from 0 to 16 [ 2616.532975][T24330] erofs: (device loop1): mounted with root inode @ nid 36. [ 2616.543099][T24330] syz.1.4332: attempt to access beyond end of device [ 2616.543099][T24330] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2616.566020][T24330] syz.1.4332: attempt to access beyond end of device [ 2616.566020][T24330] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2616.581602][T24330] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2616.619224][ T28] audit: type=1800 audit(1777649839.339:162): pid=24330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4332" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2617.489497][T24335] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2617.513333][T24335] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2617.646822][T24335] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2617.748258][T24339] loop2: detected capacity change from 0 to 16 [ 2617.789702][T24339] erofs: (device loop2): mounted with root inode @ nid 36. [ 2618.973881][T24343] loop2: detected capacity change from 0 to 2048 [ 2619.004054][T24343] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2619.035554][T24344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2619.640135][T24351] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2620.046718][T24351] Remounting filesystem read-only [ 2620.136889][T24358] loop4: detected capacity change from 0 to 2048 [ 2620.172415][T24358] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2620.225748][T24361] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2620.590836][T24366] loop1: detected capacity change from 0 to 16 [ 2620.599096][T24366] erofs: (device loop1): mounted with root inode @ nid 36. [ 2620.609095][T24366] syz.1.4342: attempt to access beyond end of device [ 2620.609095][T24366] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2620.626355][T24366] syz.1.4342: attempt to access beyond end of device [ 2620.626355][T24366] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2620.640810][T24366] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2620.658189][ T28] audit: type=1800 audit(1777649843.399:163): pid=24366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4342" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2620.853473][T24367] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2620.906659][T24367] Remounting filesystem read-only [ 2620.972358][T24367] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2621.650577][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2621.670093][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2621.690072][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2621.707540][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.716977][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.737742][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.747076][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2621.767036][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2621.774965][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.794830][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.814276][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.833995][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2621.843760][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2621.851494][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.861015][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2621.869809][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2621.877316][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2621.885986][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2621.895316][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2621.908692][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2621.916089][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2621.926586][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2621.934866][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2621.944476][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2621.952303][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2621.977903][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2622.001900][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2622.019837][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2622.047701][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2622.056738][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2622.088042][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2622.097003][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2622.128043][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2622.137020][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2622.167715][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2622.175277][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2627.470298][T24379] loop3: detected capacity change from 0 to 16 [ 2627.482939][T24380] loop2: detected capacity change from 0 to 16 [ 2627.528095][T24380] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 2627.537496][T24379] erofs: (device loop3): erofs_read_superblock: cannot read erofs superblock [ 2627.757189][T19321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2627.807348][T24384] loop1: detected capacity change from 0 to 8 [ 2629.227906][T24391] loop2: detected capacity change from 0 to 2048 [ 2629.277678][T24391] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2629.326357][T24395] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2629.703958][T24399] loop4: detected capacity change from 0 to 2048 [ 2629.762935][T24399] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2629.913744][T24404] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2631.791503][T24412] loop1: detected capacity change from 0 to 16 [ 2631.908890][T24406] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2631.979140][T24412] erofs: (device loop1): mounted with root inode @ nid 36. [ 2632.006662][T24412] syz.1.4355: attempt to access beyond end of device [ 2632.006662][T24412] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2632.052519][T24412] syz.1.4355: attempt to access beyond end of device [ 2632.052519][T24412] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2632.066921][T24412] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2632.098123][T24412] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2632.109878][T24412] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2632.143842][ T28] audit: type=1800 audit(1777649854.829:164): pid=24412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4355" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2632.202862][T24406] Remounting filesystem read-only [ 2632.842621][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2632.869263][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2632.889420][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2632.905517][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2632.985686][T24421] loop2: detected capacity change from 0 to 16 [ 2633.011202][T24421] erofs: (device loop2): mounted with root inode @ nid 36. [ 2633.030058][T24421] syz.2.4356: attempt to access beyond end of device [ 2633.030058][T24421] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2633.064566][T24421] syz.2.4356: attempt to access beyond end of device [ 2633.064566][T24421] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2633.080057][T24421] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2633.104257][ T28] audit: type=1800 audit(1777649855.839:165): pid=24421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4356" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2633.242292][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2633.468265][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2633.763292][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2633.793770][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2633.831010][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2633.902051][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2633.937333][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2633.984500][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2634.007003][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2634.015741][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.028538][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2634.035988][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2634.048375][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2634.055912][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.147757][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2634.175422][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2634.207607][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2634.235887][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2634.297394][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2634.305437][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2634.312836][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2634.320374][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.329349][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2634.336591][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.345578][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.354623][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2634.365032][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2634.517060][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2636.197736][T24431] loop2: detected capacity change from 0 to 512 [ 2637.067692][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2637.099160][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2637.106463][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2637.156738][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2638.167825][ T5819] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2638.368114][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 2638.376298][ T5819] usb 3-1: config 0 has no interfaces? [ 2638.385752][ T5819] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2638.405713][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.427482][ T5819] usb 3-1: Product: syz [ 2638.474903][ T5819] usb 3-1: Manufacturer: syz [ 2638.501097][ T5819] usb 3-1: SerialNumber: syz [ 2638.521664][T24456] loop4: detected capacity change from 0 to 512 [ 2639.308887][ T5819] usb 3-1: config 0 descriptor?? [ 2640.031506][T24466] loop1: detected capacity change from 0 to 512 [ 2640.658296][T24449] loop3: detected capacity change from 0 to 512 [ 2640.970730][T19533] usb 3-1: USB disconnect, device number 36 [ 2641.024875][T24474] loop1: detected capacity change from 0 to 2048 [ 2641.062188][T24474] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2641.087136][T24477] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2641.183044][T24479] overlayfs: missing 'lowerdir' [ 2642.467904][T24491] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2643.192731][T24491] Remounting filesystem read-only [ 2643.239609][T24488] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2644.037722][T14645] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2644.237814][T14645] usb 2-1: Using ep0 maxpacket: 8 [ 2644.252127][T14645] usb 2-1: config 0 has no interfaces? [ 2644.268716][T14645] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2644.294291][T14645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2644.317385][T14645] usb 2-1: Product: syz [ 2644.327059][T14645] usb 2-1: Manufacturer: syz [ 2644.344189][T14645] usb 2-1: SerialNumber: syz [ 2644.358881][T14645] usb 2-1: config 0 descriptor?? [ 2644.790434][ T5819] usb 2-1: USB disconnect, device number 40 [ 2644.804756][T24507] loop3: detected capacity change from 0 to 16 [ 2644.848213][T24507] erofs: (device loop3): mounted with root inode @ nid 36. [ 2644.929938][T24507] syz.3.4378: attempt to access beyond end of device [ 2644.929938][T24507] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2644.969226][T24507] syz.3.4378: attempt to access beyond end of device [ 2644.969226][T24507] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2645.007938][T24507] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2645.089452][ T28] audit: type=1800 audit(1777649867.839:166): pid=24507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4378" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2645.414888][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4380'. [ 2646.845467][T24525] loop4: detected capacity change from 0 to 512 [ 2648.161565][T24539] loop1: detected capacity change from 0 to 2048 [ 2648.188664][T24539] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2648.250558][T24540] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2648.786355][T24542] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2649.492909][T24542] Remounting filesystem read-only [ 2649.539950][T24541] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2652.753615][T24554] loop1: detected capacity change from 0 to 16 [ 2652.818941][T24554] erofs: (device loop1): mounted with root inode @ nid 36. [ 2652.831014][T24554] syz.1.4390: attempt to access beyond end of device [ 2652.831014][T24554] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2652.846476][T24554] syz.1.4390: attempt to access beyond end of device [ 2652.846476][T24554] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2652.861470][T24554] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2652.878974][ T28] audit: type=1800 audit(1777649875.619:167): pid=24554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4390" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2654.774610][T24586] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2655.746749][T24596] loop4: detected capacity change from 0 to 16 [ 2655.755564][T24596] erofs: (device loop4): mounted with root inode @ nid 36. [ 2656.443328][T24587] loop1: detected capacity change from 0 to 32768 [ 2656.489497][T24587] JBD2: Ignoring recovery information on journal [ 2656.665931][T24587] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2657.196668][T15941] ocfs2: Unmounting device (7,1) on (node local) [ 2657.627371][T24620] loop2: detected capacity change from 0 to 16 [ 2657.682272][T24620] erofs: (device loop2): mounted with root inode @ nid 36. [ 2657.704998][T24620] syz.2.4415: attempt to access beyond end of device [ 2657.704998][T24620] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2657.725811][T24620] syz.2.4415: attempt to access beyond end of device [ 2657.725811][T24620] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2657.740846][T24620] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2657.767872][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.788750][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2657.875952][ T28] audit: type=1800 audit(1777649880.499:168): pid=24620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4415" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2658.433290][T24611] loop3: detected capacity change from 0 to 32768 [ 2658.568325][T24611] JBD2: Ignoring recovery information on journal [ 2658.872202][T24611] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2659.783605][T24637] loop4: detected capacity change from 0 to 2048 [ 2659.905561][T24637] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2659.940262][T19321] udevd[19321]: incorrect nilfs2 checksum on /dev/loop4 [ 2659.962426][T24645] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2660.152152][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2661.553950][T22949] Bluetooth: hci2: command 0x0406 tx timeout [ 2661.567709][T24652] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2661.652297][T24652] Remounting filesystem read-only [ 2661.692951][T24649] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2662.246058][T24662] loop4: detected capacity change from 0 to 16 [ 2662.263694][T24662] erofs: (device loop4): mounted with root inode @ nid 36. [ 2662.284728][T24662] syz.4.4426: attempt to access beyond end of device [ 2662.284728][T24662] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2662.304994][T24662] syz.4.4426: attempt to access beyond end of device [ 2662.304994][T24662] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2662.320041][T24662] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2662.341978][ T28] audit: type=1800 audit(1777649885.079:169): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4426" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2663.627690][T19732] Bluetooth: hci2: command 0x0406 tx timeout [ 2664.603121][T24660] loop2: detected capacity change from 0 to 32768 [ 2664.653837][T24660] JBD2: Ignoring recovery information on journal [ 2665.638143][T24660] JBD2: journal reset failed [ 2665.659596][T24660] (syz.2.4425,24660,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 2665.724517][T24660] (syz.2.4425,24660,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 2668.205758][T20881] Bluetooth: hci2: command 0x0406 tx timeout [ 2668.496326][T24707] loop4: detected capacity change from 0 to 512 [ 2669.790075][T24719] loop3: detected capacity change from 0 to 32768 [ 2669.875511][T24719] JBD2: Ignoring recovery information on journal [ 2669.919216][T24719] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2670.128302][ T5819] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2670.263293][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2670.270147][T19732] Bluetooth: hci2: command 0x0406 tx timeout [ 2670.368968][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 2671.355166][ T5819] usb 5-1: config 0 has no interfaces? [ 2671.398131][ T5819] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2671.437678][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.448436][ T5819] usb 5-1: Product: syz [ 2671.452661][ T5819] usb 5-1: Manufacturer: syz [ 2671.457397][ T5819] usb 5-1: SerialNumber: syz [ 2671.465774][ T5819] usb 5-1: config 0 descriptor?? [ 2671.713766][ T5819] usb 5-1: USB disconnect, device number 41 [ 2672.162221][T24754] loop3: detected capacity change from 0 to 512 [ 2672.737640][T19732] Bluetooth: hci2: command 0x0406 tx timeout [ 2673.066963][T24764] loop4: detected capacity change from 0 to 2048 [ 2673.109358][T24764] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2673.266717][T24766] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2673.824922][T24777] loop2: detected capacity change from 0 to 512 [ 2675.773341][T24779] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2675.786839][T24779] Remounting filesystem read-only [ 2675.945423][T24784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4460'. [ 2675.964071][T24784] overlayfs: missing 'lowerdir' [ 2676.957197][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2676.994985][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2677.017756][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2677.038403][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.078082][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.087200][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.309049][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2677.429827][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2677.528565][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.665702][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.786792][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2677.851359][T23064] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2678.028521][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2678.075763][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2678.104092][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2678.116539][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2678.132809][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2678.141282][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2678.154300][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2678.163728][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2678.175935][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2678.185300][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2678.256441][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2678.281560][T23064] usb 4-1: Using ep0 maxpacket: 8 [ 2678.315791][T23064] usb 4-1: config 0 has no interfaces? [ 2678.330509][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2678.412493][T23064] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2678.437121][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2678.500212][T23064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2678.524076][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2678.586002][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2678.615106][T23064] usb 4-1: Product: syz [ 2678.661608][T23064] usb 4-1: Manufacturer: syz [ 2678.693350][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2678.722654][T23064] usb 4-1: SerialNumber: syz [ 2678.776557][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2678.876885][T23064] usb 4-1: config 0 descriptor?? [ 2678.910617][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2679.148492][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2679.197613][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2679.211121][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2679.224922][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2679.267616][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2679.274923][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2679.297643][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2679.435494][T23064] usb 4-1: USB disconnect, device number 40 [ 2679.645558][T24791] loop2: detected capacity change from 0 to 32768 [ 2679.724841][T24791] JBD2: Ignoring recovery information on journal [ 2679.902403][T24791] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2680.071306][T16859] ocfs2: Unmounting device (7,2) on (node local) [ 2680.349041][T20881] Bluetooth: hci2: command 0x0406 tx timeout [ 2680.442719][T24815] loop2: detected capacity change from 0 to 2048 [ 2680.461105][T24815] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2680.496221][T24822] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2680.576272][T24824] loop1: detected capacity change from 0 to 16 [ 2681.307739][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4472'. [ 2681.326000][T24826] overlayfs: missing 'lowerdir' [ 2681.387587][T24824] erofs: (device loop1): mounted with root inode @ nid 36. [ 2681.896996][T24823] syz.1.4471: attempt to access beyond end of device [ 2681.896996][T24823] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2681.946815][T24823] syz.1.4471: attempt to access beyond end of device [ 2681.946815][T24823] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2681.962484][T24823] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2682.248425][ T28] audit: type=1800 audit(1777649904.719:170): pid=24823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4471" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2682.983638][T24835] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2683.037761][T24835] Remounting filesystem read-only [ 2683.291463][T24839] loop4: detected capacity change from 0 to 512 [ 2683.994022][T24829] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2684.806670][T24828] loop3: detected capacity change from 0 to 32768 [ 2684.904997][T24828] JBD2: Ignoring recovery information on journal [ 2685.109252][T24828] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2685.342177][T24864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4484'. [ 2685.360840][T24864] overlayfs: missing 'lowerdir' [ 2686.301455][T24869] syz_tun: entered allmulticast mode [ 2686.395644][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2687.124095][T24875] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2689.467673][T20881] Bluetooth: hci2: command 0x0406 tx timeout [ 2689.854030][T24903] loop3: detected capacity change from 0 to 32768 [ 2690.314209][T24903] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2690.591787][T24919] loop4: detected capacity change from 0 to 512 [ 2690.810288][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066cdd800: rx timeout, send abort [ 2691.320574][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066cdd800: abort rx timeout. Force session deactivation [ 2691.775261][T24924] loop1: detected capacity change from 0 to 32768 [ 2691.799597][ T28] audit: type=1800 audit(1777649914.539:171): pid=24926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4497" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 2692.562762][T24924] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 2692.616248][T24924] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2692.711830][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801dba7800: rx timeout, send abort [ 2692.795836][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2692.907393][T24934] loop4: detected capacity change from 0 to 16 [ 2692.925692][T24934] erofs: (device loop4): mounted with root inode @ nid 36. [ 2692.959553][T24934] syz.4.4505: attempt to access beyond end of device [ 2692.959553][T24934] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2693.003911][T24934] syz.4.4505: attempt to access beyond end of device [ 2693.003911][T24934] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2693.031476][T24934] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2693.078242][T24934] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2693.090906][T24934] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2693.192360][ T28] audit: type=1800 audit(1777649915.789:172): pid=24934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4505" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2693.223107][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801dba7800: abort rx timeout. Force session deactivation [ 2695.687708][ T28] audit: type=1800 audit(1777649917.919:173): pid=24945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4502" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 2696.500694][T15941] ocfs2: Unmounting device (7,1) on (node local) [ 2697.734500][T24960] loop2: detected capacity change from 0 to 32768 [ 2698.207881][T24972] loop1: detected capacity change from 0 to 32768 [ 2698.253407][T24960] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2698.401304][T24972] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 2698.424203][T24972] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2698.628202][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ede000: rx timeout, send abort [ 2699.095309][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880224c7c00: rx timeout, send abort [ 2699.139282][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ede000: abort rx timeout. Force session deactivation [ 2699.607867][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880224c7c00: abort rx timeout. Force session deactivation [ 2701.421890][T15941] ocfs2: Unmounting device (7,1) on (node local) [ 2701.422474][T16859] ocfs2: Unmounting device (7,2) on (node local) [ 2703.235527][T25002] loop2: detected capacity change from 0 to 2048 [ 2703.267435][T25004] loop4: detected capacity change from 0 to 2048 [ 2703.290623][T25002] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2703.379414][T25004] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2703.496208][T25009] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2703.527498][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop2 [ 2703.617768][T25010] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2704.111383][T19732] Bluetooth: hci2: command 0x0406 tx timeout [ 2704.398587][T25015] loop3: detected capacity change from 0 to 512 [ 2707.317010][T25014] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2707.341496][T25014] Remounting filesystem read-only [ 2707.388884][T25013] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2710.843067][T25046] loop4: detected capacity change from 0 to 2048 [ 2711.313679][T25046] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2711.538143][T25056] loop3: detected capacity change from 0 to 512 [ 2712.131578][T25059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2712.248302][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop4 [ 2712.963620][T25063] loop3: detected capacity change from 0 to 32768 [ 2713.118105][T25065] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2713.137256][T25065] Remounting filesystem read-only [ 2713.241219][T25063] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2713.678692][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2713.709002][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2713.723606][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2713.748711][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2713.792356][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2713.833640][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2713.881860][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259d2000: rx timeout, send abort [ 2713.906043][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2713.947661][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2713.986057][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.017719][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.028703][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.039761][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2714.067743][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2714.084389][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.104552][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2714.116587][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2714.136666][ T28] audit: type=1800 audit(1777649936.879:174): pid=25073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4540" name=".log" dev="loop3" ino=17059 res=0 errno=0 [ 2714.158447][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2714.195821][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.209960][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.220287][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.232758][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.248553][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2714.257103][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2714.268208][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2714.276896][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2714.294391][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.310257][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2714.331416][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.364669][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.385466][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2714.396628][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259d2000: abort rx timeout. Force session deactivation [ 2714.597362][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.611114][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2714.632013][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2714.657516][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.680473][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.704366][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2714.705720][T16582] ocfs2: Unmounting device (7,3) on (node local) [ 2715.070347][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4547'. [ 2715.094304][T25086] overlayfs: missing 'lowerdir' [ 2717.806473][T25103] loop3: detected capacity change from 0 to 2048 [ 2717.848392][T25103] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2717.945160][T25104] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2718.170756][T25102] loop2: detected capacity change from 0 to 32768 [ 2718.383951][T25102] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2719.028041][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bee7c00: rx timeout, send abort [ 2719.538022][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bee7c00: abort rx timeout. Force session deactivation [ 2720.887911][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2720.896593][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2721.290185][T16859] ocfs2: Unmounting device (7,2) on (node local) [ 2721.863007][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4557'. [ 2721.878618][T25126] overlayfs: missing 'lowerdir' [ 2723.591127][T25139] loop3: detected capacity change from 0 to 512 [ 2724.536406][T25145] loop2: detected capacity change from 0 to 2048 [ 2724.602205][T25145] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2724.662365][T25152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2726.774288][T25155] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2727.087679][T25155] Remounting filesystem read-only [ 2727.098225][T20881] Bluetooth: hci2: command 0x0406 tx timeout [ 2727.498451][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2727.519460][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2727.579680][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2727.605399][T25168] loop3: detected capacity change from 0 to 16 [ 2727.627958][T25168] erofs: (device loop3): mounted with root inode @ nid 36. [ 2727.660735][T25168] syz.3.4568: attempt to access beyond end of device [ 2727.660735][T25168] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2727.711469][T25168] syz.3.4568: attempt to access beyond end of device [ 2727.711469][T25168] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2727.731275][T25168] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2727.746648][ T28] audit: type=1800 audit(1777649950.489:175): pid=25168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4568" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2728.052705][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.302148][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.637680][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.712162][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2728.730936][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2728.769030][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.794852][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.840022][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.864415][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2728.887984][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2728.912699][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2728.957631][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2728.965401][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2729.001648][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2729.021021][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2729.047635][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2729.050157][T25173] loop4: detected capacity change from 0 to 2048 [ 2729.055502][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2729.115648][T25173] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2729.147948][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2729.160466][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2729.178010][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2729.188249][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2729.217691][T25174] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2729.235103][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2729.265791][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2729.308090][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2729.316714][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2729.347773][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2729.624736][T25178] loop3: detected capacity change from 0 to 16 [ 2729.799024][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2729.963681][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2730.088013][T25180] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2730.117882][T25178] erofs: (device loop3): mounted with root inode @ nid 36. [ 2730.311371][T25178] syz.3.4572: attempt to access beyond end of device [ 2730.311371][T25178] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2731.437631][ T28] audit: type=1800 audit(1777649954.179:176): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4572" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2731.510743][T25180] Remounting filesystem read-only [ 2731.556651][T25179] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2731.635706][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2731.649746][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2731.673322][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2731.706536][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2731.946277][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2733.846790][T25206] loop1: detected capacity change from 0 to 2048 [ 2733.866287][T25206] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2733.937807][T25209] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2734.028004][T25212] loop4: detected capacity change from 0 to 16 [ 2734.095117][T25212] erofs: (device loop4): mounted with root inode @ nid 36. [ 2734.117724][T25212] syz.4.4582: attempt to access beyond end of device [ 2734.117724][T25212] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2734.152891][T25212] syz.4.4582: attempt to access beyond end of device [ 2734.152891][T25212] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2734.169032][T25212] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2734.193708][T25212] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2734.206634][T25212] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2734.301670][ T28] audit: type=1800 audit(1777649956.929:177): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4582" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2735.384525][T25221] loop2: detected capacity change from 0 to 2048 [ 2735.513920][T25221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2736.403838][T25228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2736.896188][T25229] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2736.940968][T25229] Remounting filesystem read-only [ 2737.198052][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2737.217632][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2737.226084][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2737.277853][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.313781][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.353959][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.385344][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2737.441736][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2737.464408][T25238] loop3: detected capacity change from 0 to 2048 [ 2737.477992][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.518080][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.552756][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.580370][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2737.623178][T25238] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2737.636802][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2737.687988][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.778906][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2737.790431][T25242] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2737.837885][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2737.847174][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2737.868151][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop3 [ 2737.899052][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2737.951585][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2738.264086][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2739.100036][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2739.300900][T25248] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 2739.316633][T25248] Remounting filesystem read-only [ 2739.689218][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2739.697189][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2739.855994][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2740.054233][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2740.115654][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.156075][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2740.186704][T16582] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2740.198095][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 2740.208593][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.214104][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.216587][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.241788][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.243012][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.274750][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.285794][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2740.293535][T16582] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2740.303104][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.303116][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2740.303137][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.313062][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.313095][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.314759][T16582] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2740.361829][T16582] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 2740.372042][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.385738][T16582] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2740.393852][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2740.405004][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.405216][T16582] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2740.423289][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2740.435184][T16582] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 2740.443054][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2740.451748][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.464168][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2740.482620][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.493201][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.501016][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.511922][T16582] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2740.519229][T16582] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2740.526883][T16582] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2740.534778][T16582] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2740.567048][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.586846][T16582] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2740.625674][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.658986][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.686940][T16582] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2740.703001][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.722324][T16582] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 2740.731453][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2740.744180][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.753553][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2740.765568][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2741.045750][T25265] loop2: detected capacity change from 0 to 2048 [ 2741.068815][T25265] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2741.116429][T25269] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2741.468948][T25274] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2741.484724][T25274] Remounting filesystem read-only [ 2741.943047][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2742.147360][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2742.315240][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2742.361660][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.372271][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.382522][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.393756][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2742.403180][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2742.413148][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.423530][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.433236][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.443417][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2742.451123][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2742.459787][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.470495][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2742.478677][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2742.488719][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2742.498832][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.517747][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2742.525957][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2742.536009][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2742.558952][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2742.568513][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2742.597771][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2742.605800][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2742.643271][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.677647][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2742.707768][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.744364][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.757250][T25279] loop4: detected capacity change from 0 to 2048 [ 2742.758479][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2742.787794][T25279] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2742.815779][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.837655][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2742.856487][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2742.974861][T25284] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2743.096327][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2743.249751][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2743.416234][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2744.813163][T25290] loop2: detected capacity change from 0 to 512 [ 2745.843081][T25294] loop3: detected capacity change from 0 to 2048 [ 2745.892768][T25294] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2746.022228][T25297] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2746.607245][T25302] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 2746.955942][T25302] Remounting filesystem read-only [ 2747.376889][T16582] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2747.428173][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 2747.489452][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2747.502401][T25160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2747.649142][T25160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2747.662674][T25160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2747.688889][T25160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2747.713027][T25160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2747.730782][T25160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2747.971252][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.415458][T25310] loop2: detected capacity change from 0 to 2048 [ 2748.429144][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.475558][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.488655][T16582] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2748.496149][T16582] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2748.504833][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.516571][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.534515][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.544072][T25310] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2748.572114][T16582] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2748.619372][T20043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.634304][T16582] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 2748.640098][T25315] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2748.655411][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2748.706165][T16582] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2748.717448][T16582] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2748.940716][T25318] loop4: detected capacity change from 0 to 16 [ 2749.004261][T25318] erofs: (device loop4): mounted with root inode @ nid 36. [ 2749.038024][T25318] syz.4.4614: attempt to access beyond end of device [ 2749.038024][T25318] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2749.092405][T16582] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 2749.105315][T25318] syz.4.4614: attempt to access beyond end of device [ 2749.105315][T25318] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2749.122634][T25318] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2749.135247][ T28] audit: type=1800 audit(1777649971.879:178): pid=25318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4614" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2749.240970][T25319] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2749.306704][T25319] Remounting filesystem read-only [ 2749.321939][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2749.372118][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2749.383388][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2749.395752][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2749.624329][T16582] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2749.637708][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2749.711843][T16582] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2749.720930][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2749.768691][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2749.783937][T16582] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2749.822866][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2749.835382][T16582] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2749.850374][T20043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2749.882196][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2749.905285][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2749.934654][T16582] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2749.944512][T25160] Bluetooth: hci1: command tx timeout [ 2749.971920][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.007894][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2750.015547][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2750.037951][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.050424][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.060630][T16582] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2750.068918][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.079936][T16582] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 2750.090122][T16582] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.100114][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2750.108052][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.108689][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2750.117425][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.151234][T16582] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2750.171524][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.238125][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2750.247425][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2750.265959][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.285273][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2750.316543][T20043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2750.332110][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2750.346999][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2750.372378][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2750.384265][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2750.396101][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2750.455208][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2750.739303][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2750.819849][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2750.919324][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2751.030730][T20043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2751.054383][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2751.153004][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2751.226242][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2751.235147][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2751.245895][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2751.255200][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2751.263161][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2751.272776][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2751.285384][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2751.297738][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2751.307371][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2751.316053][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2751.536725][T25332] loop2: detected capacity change from 0 to 16 [ 2751.715058][T25332] erofs: (device loop2): mounted with root inode @ nid 36. [ 2751.735245][T25332] syz.2.4615: attempt to access beyond end of device [ 2751.735245][T25332] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2751.961167][T25332] syz.2.4615: attempt to access beyond end of device [ 2751.961167][T25332] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2751.978740][T25332] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2752.034713][ T28] audit: type=1800 audit(1777649974.739:179): pid=25332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4615" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2752.063860][T25160] Bluetooth: hci1: command tx timeout [ 2752.844942][T20043] tipc: Disabling bearer [ 2752.921685][T20043] tipc: Left network mode [ 2754.107735][T25160] Bluetooth: hci1: command tx timeout [ 2754.166684][T25306] chnl_net:caif_netlink_parms(): no params data found [ 2754.244134][T25347] loop2: detected capacity change from 0 to 2048 [ 2754.279117][T25347] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2754.360643][T25354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2754.389936][T25353] loop4: detected capacity change from 0 to 2048 [ 2754.460661][T25353] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2754.674195][T25357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2758.209345][T25160] Bluetooth: hci1: command tx timeout [ 2758.342851][T25364] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2758.356059][T25364] Remounting filesystem read-only [ 2758.665388][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2758.718655][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2758.726946][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2758.777686][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2758.829786][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2758.848927][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2758.868587][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2758.876975][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2758.966226][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.120990][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.324107][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.526992][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2759.647876][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2759.727817][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.738181][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2759.746162][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2759.754979][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2759.764125][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.774330][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2759.786960][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2759.799769][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2759.834394][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2759.843857][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2759.854843][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2759.865583][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2759.879809][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.892409][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2759.901848][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.923872][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.937113][T25306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2759.950095][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2759.964397][T25306] bridge0: port 1(bridge_slave_0) entered disabled state [ 2759.987943][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2759.999634][T25306] bridge_slave_0: entered allmulticast mode [ 2760.019119][T25306] bridge_slave_0: entered promiscuous mode [ 2760.026962][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2760.050457][T25306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2760.060106][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2760.083863][T25306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2760.096176][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2760.122569][T25306] bridge_slave_1: entered allmulticast mode [ 2760.132590][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2760.149435][T25306] bridge_slave_1: entered promiscuous mode [ 2760.158617][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2760.988537][T25397] loop4: detected capacity change from 0 to 512 [ 2761.753499][T25306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2761.801157][T25306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2762.268641][T25407] loop2: detected capacity change from 0 to 16 [ 2762.392039][T25407] erofs: (device loop2): mounted with root inode @ nid 36. [ 2762.425238][T25407] syz.2.4632: attempt to access beyond end of device [ 2762.425238][T25407] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2762.464330][T25407] syz.2.4632: attempt to access beyond end of device [ 2762.464330][T25407] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2762.483543][T25407] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2762.531228][T25407] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2762.549154][T25407] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2762.598628][ T28] audit: type=1800 audit(1777649985.249:180): pid=25407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4632" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2763.376277][T25409] loop4: detected capacity change from 0 to 2048 [ 2763.390156][T25409] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2763.439111][T25413] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2763.719112][T25306] team0: Port device team_slave_0 added [ 2763.775878][T25306] team0: Port device team_slave_1 added [ 2764.097046][T25306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2764.106416][T25306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.197270][T25306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2764.469918][T25306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2764.507757][T25306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2764.633276][T25306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2764.752018][T25425] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2764.830363][T25425] Remounting filesystem read-only [ 2764.924007][T25425] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2765.058991][T25429] trusted_key: encrypted_key: insufficient parameters specified [ 2765.081990][T25306] hsr_slave_0: entered promiscuous mode [ 2765.118414][T25306] hsr_slave_1: entered promiscuous mode [ 2765.152232][T25306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2765.167648][T25306] Cannot create hsr debugfs directory [ 2765.313227][T20043] hsr_slave_0: left promiscuous mode [ 2765.349449][T20043] hsr_slave_1: left promiscuous mode [ 2765.437869][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2765.457762][T20043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2765.488828][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2765.517603][T20043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2765.556582][T20043] geneve1: left allmulticast mode [ 2765.580281][T20043] geneve1: left promiscuous mode [ 2765.587619][T20043] bridge0: port 3(geneve1) entered disabled state [ 2765.643577][T20043] bridge_slave_1: left allmulticast mode [ 2765.674485][T20043] bridge_slave_1: left promiscuous mode [ 2765.700170][T20043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2765.764990][T20043] bridge_slave_0: left allmulticast mode [ 2765.787662][T20043] bridge_slave_0: left promiscuous mode [ 2765.826631][T20043] bridge0: port 1(bridge_slave_0) entered disabled state [ 2766.208545][T20043] veth1_macvtap: left promiscuous mode [ 2766.215474][T20043] veth0_macvtap: left promiscuous mode [ 2766.379572][T20043] veth1_vlan: left promiscuous mode [ 2766.534830][T20043] veth0_vlan: left promiscuous mode [ 2769.977695][T25451] loop4: detected capacity change from 0 to 512 [ 2771.781126][T20043] team0 (unregistering): Port device team_slave_1 removed [ 2771.937335][T20043] team0 (unregistering): Port device team_slave_0 removed [ 2772.102883][T20043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2772.214138][T20043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2772.421284][T25461] loop4: detected capacity change from 0 to 16 [ 2772.456275][T25461] erofs: (device loop4): mounted with root inode @ nid 36. [ 2772.500820][T25461] syz.4.4641: attempt to access beyond end of device [ 2772.500820][T25461] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2772.543626][T25461] syz.4.4641: attempt to access beyond end of device [ 2772.543626][T25461] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2772.564176][T25461] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2772.613948][T25461] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2772.631890][T25461] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2772.697784][ T28] audit: type=1800 audit(1777649995.329:181): pid=25461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4641" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2774.230180][T20043] bond0 (unregistering): Released all slaves [ 2774.738897][T25467] loop2: detected capacity change from 0 to 2048 [ 2774.822376][T25467] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2774.939774][T19321] udevd[19321]: incorrect nilfs2 checksum on /dev/loop2 [ 2774.967976][T25474] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2775.261539][T25477] loop3: detected capacity change from 0 to 2048 [ 2775.373101][T25477] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2775.787805][T25480] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2776.088620][T25482] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2776.459958][T25480] Remounting filesystem read-only [ 2776.509290][T25478] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2776.689993][T20043] IPVS: stop unused estimator thread 0... [ 2777.780218][T25507] loop2: detected capacity change from 0 to 16 [ 2777.957185][T25507] erofs: (device loop2): mounted with root inode @ nid 36. [ 2778.000621][T25507] syz.2.4650: attempt to access beyond end of device [ 2778.000621][T25507] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2778.027197][T25507] syz.2.4650: attempt to access beyond end of device [ 2778.027197][T25507] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2778.050979][T25507] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2778.102416][T25507] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2778.115811][T25507] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2778.152917][ T28] audit: type=1800 audit(1777650000.809:182): pid=25507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4650" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2779.155011][T25306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2779.303030][T25306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2779.391493][T25306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2779.472630][T25306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2780.308017][T25523] loop2: detected capacity change from 0 to 16 [ 2780.388549][T25523] erofs: (device loop2): mounted with root inode @ nid 36. [ 2780.419347][T25523] syz.2.4654: attempt to access beyond end of device [ 2780.419347][T25523] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2780.491714][T25523] syz.2.4654: attempt to access beyond end of device [ 2780.491714][T25523] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2780.517738][T25523] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2780.588459][ T28] audit: type=1800 audit(1777650003.279:183): pid=25523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4654" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2780.640554][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2780.677135][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2781.444930][T25306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2781.561348][T25306] 8021q: adding VLAN 0 to HW filter on device team0 [ 2781.636104][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2781.646152][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2781.735365][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2781.748490][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2784.250919][T25306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2786.159715][T25306] veth0_vlan: entered promiscuous mode [ 2786.431249][T25306] veth1_vlan: entered promiscuous mode [ 2786.790131][T25306] veth0_macvtap: entered promiscuous mode [ 2786.872276][T25306] veth1_macvtap: entered promiscuous mode [ 2787.081039][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2787.132320][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.159732][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2787.227822][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.267717][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2787.301010][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.323492][T25306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2787.371144][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2787.428314][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.444903][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2787.525863][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.569722][T25306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2787.613321][T25306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2787.671448][T25306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2787.705493][T25306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.721946][T25306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.735669][T25306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.778948][T25306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2789.766396][ T8192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.799765][ T8192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.980088][ T8192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.993417][ T8192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2790.903849][T25635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4680'. [ 2790.922779][T25635] overlayfs: missing 'lowerdir' [ 2791.758677][T25638] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2792.150170][T25641] loop4: detected capacity change from 0 to 32768 [ 2792.449060][T25641] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2793.102112][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803023ec00: rx timeout, send abort [ 2793.508301][ T28] audit: type=1800 audit(1777650016.249:184): pid=25665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4682" name=".log" dev="loop4" ino=17059 res=0 errno=0 [ 2793.610904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803023ec00: abort rx timeout. Force session deactivation [ 2794.086178][T25675] bridge0: port 3(geneve1) entered blocking state [ 2794.093583][T25675] bridge0: port 3(geneve1) entered disabled state [ 2794.101087][T25675] geneve1: entered allmulticast mode [ 2794.115652][T25675] geneve1: entered promiscuous mode [ 2794.142008][T25675] bridge0: port 3(geneve1) entered blocking state [ 2794.148907][T25675] bridge0: port 3(geneve1) entered forwarding state [ 2794.187448][T20072] ocfs2: Unmounting device (7,4) on (node local) [ 2794.448981][T25682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4691'. [ 2794.468025][T25682] overlayfs: missing 'lowerdir' [ 2798.726449][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4701'. [ 2798.747733][T25734] overlayfs: missing 'lowerdir' [ 2800.949865][T25756] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2800.993707][T25756] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2801.045516][T25756] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2801.476634][T25772] loop2: detected capacity change from 0 to 2048 [ 2801.908359][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4714'. [ 2801.920811][T25776] overlayfs: missing 'lowerdir' [ 2802.850908][T25772] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2802.978315][T25784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2804.624317][T25802] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2804.675503][T25802] Remounting filesystem read-only [ 2805.385809][T25818] loop1: detected capacity change from 0 to 2048 [ 2805.422577][T25818] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2805.515557][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop1 [ 2805.525838][T25821] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2805.673836][T25825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4727'. [ 2805.692761][T25825] overlayfs: missing 'lowerdir' [ 2808.568138][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2808.596579][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2808.607894][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2808.615294][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.478844][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.521611][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.578217][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2809.586018][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2809.615051][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.626685][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.636491][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.646747][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2809.654240][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2809.680984][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.694530][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2809.702366][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2809.720712][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2809.737048][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.775844][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2809.808531][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2809.816279][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2809.870187][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2809.900976][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2809.918380][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2809.935834][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2809.954717][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2809.975828][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2809.995466][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2810.024176][T25850] loop4: detected capacity change from 0 to 2048 [ 2810.036875][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2810.073613][T25850] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2810.102762][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2810.162602][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2810.182229][T25853] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2810.206263][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2810.239133][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2810.249550][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2810.259263][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2810.269832][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2812.672112][T25872] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2812.699057][T25872] Remounting filesystem read-only [ 2812.707182][T25872] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2815.232557][T25914] loop1: detected capacity change from 0 to 16 [ 2817.552660][T25914] erofs: (device loop1): mounted with root inode @ nid 36. [ 2817.595355][T25912] syz.1.4757: attempt to access beyond end of device [ 2817.595355][T25912] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2817.631056][T25912] syz.1.4757: attempt to access beyond end of device [ 2817.631056][T25912] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2817.648397][T25912] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2817.666972][ T28] audit: type=1800 audit(1777650040.409:185): pid=25912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4757" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2818.121290][T25924] loop1: detected capacity change from 0 to 16 [ 2818.137221][T25924] erofs: (device loop1): mounted with root inode @ nid 36. [ 2818.159438][T25924] syz.1.4760: attempt to access beyond end of device [ 2818.159438][T25924] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2818.181826][T25924] syz.1.4760: attempt to access beyond end of device [ 2818.181826][T25924] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2818.197348][T25924] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2818.271604][ T28] audit: type=1800 audit(1777650040.959:186): pid=25924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4760" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2819.283230][T25938] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2819.318944][T25938] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2819.360894][T25938] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2819.883730][T25948] vlan0: entered promiscuous mode [ 2820.658438][T25941] vlan0: left promiscuous mode [ 2822.343347][T25975] loop1: detected capacity change from 0 to 16 [ 2822.359371][T25975] erofs: (device loop1): mounted with root inode @ nid 36. [ 2822.380351][T25975] syz.1.4776: attempt to access beyond end of device [ 2822.380351][T25975] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2822.413893][T25975] syz.1.4776: attempt to access beyond end of device [ 2822.413893][T25975] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2822.430204][T25975] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2822.455731][ T28] audit: type=1800 audit(1777650045.189:187): pid=25975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4776" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2823.344028][T25979] loop2: detected capacity change from 0 to 2048 [ 2823.400493][T25979] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2823.436716][T25981] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2823.579588][T25980] loop3: detected capacity change from 0 to 512 [ 2824.157781][T25993] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2824.896065][T25993] Remounting filesystem read-only [ 2824.936901][T25991] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2826.730432][T26017] loop4: detected capacity change from 0 to 2048 [ 2826.816299][T26017] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2826.841873][T26021] loop2: detected capacity change from 0 to 16 [ 2826.914813][T26021] erofs: (device loop2): mounted with root inode @ nid 36. [ 2826.936412][T26021] syz.2.4788: attempt to access beyond end of device [ 2826.936412][T26021] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2827.115779][T26021] syz.2.4788: attempt to access beyond end of device [ 2827.115779][T26021] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2827.132026][T26021] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2827.159840][ T28] audit: type=1800 audit(1777650049.889:188): pid=26021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4788" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2827.697651][T26023] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2828.294340][T26017] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2828.339794][T19732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2828.351745][T19732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2828.363289][T19732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2828.376233][T19732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2828.389153][T19732] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2828.397343][T19732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2828.547431][T26017] Remounting filesystem read-only [ 2829.366309][ T6130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.809413][ T6130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.856227][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2829.884494][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2829.893772][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2829.902422][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2829.913212][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2829.927611][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2829.938740][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2829.946124][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2829.967677][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2829.977075][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.001798][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.022004][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2830.032424][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2830.043302][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.054267][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2830.065025][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2830.073517][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2830.082357][ T6130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.094122][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.104733][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2830.138808][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2830.185843][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2830.263667][ T6130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.299780][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2830.307379][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2830.323872][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2830.343442][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2830.354385][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.365858][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2830.376380][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.400575][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.421474][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2830.436851][T26050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2830.450125][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.460753][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2830.483518][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2830.539989][T25160] Bluetooth: hci0: command tx timeout [ 2830.549307][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2830.549339][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2830.576187][T26056] loop2: detected capacity change from 0 to 16 [ 2830.621943][T26056] erofs: (device loop2): mounted with root inode @ nid 36. [ 2830.647848][T26056] syz.2.4798: attempt to access beyond end of device [ 2830.647848][T26056] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2830.728080][T26056] syz.2.4798: attempt to access beyond end of device [ 2830.728080][T26056] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2830.746315][T26056] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2830.774842][ T28] audit: type=1800 audit(1777650053.509:189): pid=26056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4798" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2831.035692][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2831.892710][T26034] chnl_net:caif_netlink_parms(): no params data found [ 2833.403235][T25160] Bluetooth: hci0: command tx timeout [ 2833.494275][ T6130] tipc: Disabling bearer [ 2833.522131][T26080] loop2: detected capacity change from 0 to 16 [ 2833.524782][ T6130] tipc: Left network mode [ 2833.550783][T26080] erofs: (device loop2): mounted with root inode @ nid 36. [ 2833.564332][T26080] syz.2.4803: attempt to access beyond end of device [ 2833.564332][T26080] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 2833.600313][T26080] syz.2.4803: attempt to access beyond end of device [ 2833.600313][T26080] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 2833.619365][T26080] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 2833.636408][ T28] audit: type=1800 audit(1777650056.379:190): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4803" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2833.742502][T26034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.780421][T26034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.812601][T26034] bridge_slave_0: entered allmulticast mode [ 2833.846936][T26034] bridge_slave_0: entered promiscuous mode [ 2834.068404][T26084] loop1: detected capacity change from 0 to 32768 [ 2834.112859][T26084] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2834.362053][T26034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2834.404285][T26034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2834.443675][T26034] bridge_slave_1: entered allmulticast mode [ 2834.518397][ T28] audit: type=1800 audit(1777650057.269:191): pid=26084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4804" name=".log" dev="loop1" ino=17059 res=0 errno=0 [ 2834.553431][T26034] bridge_slave_1: entered promiscuous mode [ 2834.740994][T26034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2834.811497][T26034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2834.977524][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f982800: rx timeout, send abort [ 2835.468244][T25160] Bluetooth: hci0: command tx timeout [ 2835.486443][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f982800: abort rx timeout. Force session deactivation [ 2835.798695][T25306] ocfs2: Unmounting device (7,1) on (node local) [ 2835.872618][T26034] team0: Port device team_slave_0 added [ 2835.905956][T26034] team0: Port device team_slave_1 added [ 2837.657767][T25160] Bluetooth: hci0: command tx timeout [ 2838.044775][T26034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2838.065193][T26034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.147758][T26034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2838.461791][T26034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2838.497666][T26034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.554653][T26034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2838.845328][T26034] hsr_slave_0: entered promiscuous mode [ 2838.868844][T26034] hsr_slave_1: entered promiscuous mode [ 2838.938333][T26034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2838.987610][T26034] Cannot create hsr debugfs directory [ 2840.660236][T26148] loop4: detected capacity change from 0 to 2048 [ 2840.737707][ T6130] hsr_slave_0: left promiscuous mode [ 2840.749280][T26148] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2840.798540][ T6130] hsr_slave_1: left promiscuous mode [ 2840.853641][T26151] binder: 26150:26151 ioctl c0306201 200000000680 returned -14 [ 2841.485929][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2841.506301][T19321] udevd[19321]: incorrect nilfs2 checksum on /dev/loop4 [ 2841.530233][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2841.570640][T26156] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2841.678841][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2841.753282][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2841.844975][ T6130] geneve1: left allmulticast mode [ 2841.987771][ T6130] geneve1: left promiscuous mode [ 2842.026794][ T6130] bridge0: port 3(geneve1) entered disabled state [ 2842.048324][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2842.056723][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2842.089596][ T6130] bridge_slave_1: left allmulticast mode [ 2842.112645][ T6130] bridge_slave_1: left promiscuous mode [ 2842.133800][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.175907][ T6130] bridge_slave_0: left allmulticast mode [ 2842.206307][ T6130] bridge_slave_0: left promiscuous mode [ 2842.501429][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.546608][T26148] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 2842.564696][T26148] Remounting filesystem read-only [ 2842.621768][ T6130] veth1_macvtap: left promiscuous mode [ 2842.639013][ T6130] veth0_macvtap: left promiscuous mode [ 2842.666639][ T6130] veth1_vlan: left promiscuous mode [ 2842.683402][ T6130] veth0_vlan: left promiscuous mode [ 2844.218217][T20072] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 2844.253926][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2097152 [ 2844.294035][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.316066][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.355082][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.398265][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.423255][T20072] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 2844.441610][T20072] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 2844.477850][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.512654][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.537659][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.560402][T20072] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 2844.582848][T20072] NILFS (loop4): discard dirty block: blocknr=3, size=1024 [ 2844.599624][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.625654][T20072] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 2844.634724][T20072] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 2844.658204][T20072] NILFS (loop4): discard dirty page: offset=268697600, ino=6 [ 2844.673792][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.686951][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.704605][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.714994][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.744690][T20072] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 2844.755191][T20072] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 2844.764734][T20072] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 2844.775623][T20072] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 2844.792386][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.810649][T20072] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 2844.826763][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.850863][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.873471][T20072] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 2844.892050][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.903965][T20072] NILFS (loop4): discard dirty page: offset=67371008, ino=3 [ 2844.923726][T20072] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2844.937341][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.957145][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2844.971293][T20072] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 2846.029883][ T6130] team0 (unregistering): Port device team_slave_1 removed [ 2846.161133][ T6130] team0 (unregistering): Port device team_slave_0 removed [ 2846.308349][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2846.417416][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2847.285095][ T6130] bond0 (unregistering): Released all slaves [ 2851.513376][ T6130] IPVS: stop unused estimator thread 0... [ 2852.354292][T26034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2853.522662][T26034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2853.694911][T26034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2853.780017][T26034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2856.213631][T26034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2856.343919][T26034] 8021q: adding VLAN 0 to HW filter on device team0 [ 2856.410249][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.418847][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2856.460955][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.472343][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2859.885768][T26276] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2859.959055][T26276] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2860.013767][T26276] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2860.092417][T26034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2860.240898][T26034] veth0_vlan: entered promiscuous mode [ 2860.283277][T26034] veth1_vlan: entered promiscuous mode [ 2860.418287][T26034] veth0_macvtap: entered promiscuous mode [ 2860.460822][T26034] veth1_macvtap: entered promiscuous mode [ 2860.531854][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.590875][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.627541][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.652064][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.675514][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2860.715437][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.773901][T26034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2860.826714][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.883529][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.925789][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2860.958944][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2860.997711][T26034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2861.047816][T26034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2861.071071][T26034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2861.170732][T26034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.217377][T26034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.249679][T26034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.277625][T26034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.436091][T26300] loop2: detected capacity change from 0 to 2048 [ 2861.492244][T26300] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2861.599814][T26306] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2861.659256][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.716920][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.763917][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.827108][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.994166][T26300] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 2862.010538][T26300] Remounting filesystem read-only [ 2862.166811][T26313] binder: BINDER_SET_CONTEXT_MGR already set [ 2862.229980][T16859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 2862.243138][T26313] binder: 26312:26313 ioctl 4018620d 200000000100 returned -16 [ 2862.257772][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2097152 [ 2862.267429][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2862.287326][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.302092][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.334376][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.367440][T16859] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 2862.382479][T26317] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2862.423024][T16859] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 2862.446489][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.471740][T26317] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2862.482583][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.501434][T26317] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 2862.514933][T26320] binder: BINDER_SET_CONTEXT_MGR already set [ 2862.532437][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.544812][T26320] binder: 26312:26320 ioctl 4018620d 200000001000 returned -16 [ 2862.569128][T16859] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 2862.593317][T16859] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 2862.613663][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.653783][T16859] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 2862.670142][T16859] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 2862.688683][T16859] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 2862.699080][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.723176][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2862.769895][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2862.802091][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2862.830348][T16859] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 2862.854932][T16859] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 2862.870234][T16859] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 2862.881011][T16859] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 2862.889850][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.902047][T16859] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 2862.912819][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2862.953758][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2864.067591][T16859] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 2864.077235][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2864.141691][T16859] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 2864.197547][T16859] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2864.239596][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2864.277549][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2864.299783][T16859] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 2864.866072][T26348] loop3: detected capacity change from 0 to 2048 [ 2864.935121][T26343] loop4: detected capacity change from 0 to 32768 [ 2864.987855][T26348] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2865.160713][T26343] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2865.213392][T26354] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2865.545021][T26348] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 2865.701546][ T28] audit: type=1800 audit(1777650088.359:192): pid=26343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4861" name=".log" dev="loop4" ino=17059 res=0 errno=0 [ 2865.815914][T26348] Remounting filesystem read-only [ 2865.859421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc03800: rx timeout, send abort [ 2866.082496][T26034] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2866.131026][T26034] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 2866.140452][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2866.154544][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.167326][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.205155][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.229432][T26034] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2866.252530][T26034] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2866.268239][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.297611][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.331266][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.371242][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc03800: abort rx timeout. Force session deactivation [ 2866.380083][T26034] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2866.452848][T26034] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 2866.490645][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.528035][T26034] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2866.570029][T26034] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2866.628791][T26034] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 2866.647963][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.669304][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2866.680545][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2866.692424][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2866.703787][T26034] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2866.718603][T20072] ocfs2: Unmounting device (7,4) on (node local) [ 2866.744074][T19732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2866.770526][T19732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2866.783465][T19732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2866.800296][T26034] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2866.812809][T19732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2866.822264][T26034] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2866.834383][T26034] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2866.848236][T19732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2866.866546][T19732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2866.964492][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2866.975836][T26034] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2866.993379][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2867.005945][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2867.019120][T26034] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2867.023220][T24046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2867.033234][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2867.071447][T26034] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 2867.105309][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2867.157907][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2867.218803][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2867.255952][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2867.371257][T24046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2867.526683][T26380] loop3: detected capacity change from 0 to 2048 [ 2867.550554][T26380] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2867.604434][T26383] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2867.623548][T24046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2867.626590][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop3 [ 2868.016038][T24046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2868.141641][T26385] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 2868.156936][T26385] Remounting filesystem read-only [ 2868.520504][T26397] loop1: detected capacity change from 0 to 2048 [ 2868.548105][T26397] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2868.688997][T19536] udevd[19536]: incorrect nilfs2 checksum on /dev/loop1 [ 2868.811301][T26401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2869.068053][T19732] Bluetooth: hci3: command tx timeout [ 2869.140779][T24046] tipc: Disabling bearer [ 2869.304925][T26397] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 2869.333365][T26397] Remounting filesystem read-only [ 2869.599296][T24046] tipc: Left network mode [ 2869.796020][T26369] chnl_net:caif_netlink_parms(): no params data found [ 2869.874991][T25306] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 2869.932202][T25306] NILFS (loop1): discard dirty page: offset=0, ino=2097152 [ 2869.987635][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2870.019811][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.066213][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.115886][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.144058][T25306] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 2870.152007][T25306] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 2870.162883][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.189934][T26034] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2870.205525][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.227976][T26034] NILFS (loop3): discard dirty page: offset=0, ino=2097152 [ 2870.236386][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2870.267629][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.302001][T26369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2870.313866][T26369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2870.325124][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.358010][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.373010][T25306] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 2870.374449][T26369] bridge_slave_0: entered allmulticast mode [ 2870.408968][T25306] NILFS (loop1): discard dirty block: blocknr=3, size=1024 [ 2870.424319][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.441682][T26369] bridge_slave_0: entered promiscuous mode [ 2870.450795][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.450825][T25306] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 2870.450842][T25306] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 2870.450998][T25306] NILFS (loop1): discard dirty page: offset=268697600, ino=6 [ 2870.451020][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.451039][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2870.451056][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2870.451072][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2870.462291][T26034] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2870.558205][T25306] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 2870.577947][T26034] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2870.598510][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.620129][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.628191][T25306] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 2870.634122][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.662229][T25306] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 2870.673115][T26034] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2870.682344][T25306] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 2870.692246][T26034] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 2870.702018][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.714342][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.723717][T25306] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 2870.750170][T26369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2870.751556][T26034] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 2870.776449][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.794049][T26369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2870.804343][T26034] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 2870.830253][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.833004][T26034] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 2870.850004][T26369] bridge_slave_1: entered allmulticast mode [ 2870.852671][T26369] bridge_slave_1: entered promiscuous mode [ 2870.890483][T25306] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 2870.898077][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.915852][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2870.935411][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2870.957676][T25306] NILFS (loop1): discard dirty page: offset=67371008, ino=3 [ 2870.977704][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2870.997974][T25306] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.016198][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2871.042741][T26034] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2871.053272][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2871.076986][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2871.091401][T26034] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 2871.127566][T25306] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 2871.148524][T26034] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 2871.159650][T19732] Bluetooth: hci3: command tx timeout [ 2871.177737][T26034] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 2871.189363][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.201449][T26034] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2871.214215][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.225918][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.237772][T26034] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2871.247398][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.260219][T26034] NILFS (loop3): discard dirty page: offset=67371008, ino=3 [ 2871.273228][T26034] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2871.290800][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2871.314533][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2871.362494][T26034] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2871.863572][T26369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2872.075388][T26369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2873.228325][T25160] Bluetooth: hci3: command tx timeout [ 2873.982845][T26369] team0: Port device team_slave_0 added [ 2874.733489][T26369] team0: Port device team_slave_1 added [ 2874.908377][T25160] Bluetooth: hci1: command 0x0406 tx timeout [ 2875.269822][T26369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2875.312852][T19732] Bluetooth: hci3: command tx timeout [ 2875.321821][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2875.497750][T26369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2875.567319][T26369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2875.601876][T26369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2875.703088][T26369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active Stopping sshd: stopped /usr/sbin/sshd (pid 5531) [ 2877.052409][T26369] hsr_slave_0: entered promiscuous mode OK [ 2877.123961][T26369] hsr_slave_1: entered promiscuous mode [ 2877.277784][T24046] hsr_slave_0: left promiscuous mode [ 2877.292139][T24046] hsr_slave_1: left promiscuous mode [ 2877.338567][T24046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2877.375303][T24046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2877.419642][T24046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 Stopping crond: [ 2877.447264][T24046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2877.492941][T24046] geneve1: left allmulticast mode [ 2877.510650][T24046] geneve1: left promiscuous mode [ 2877.520793][T24046] bridge0: port 3(geneve1) entered disabled state [ 2877.540885][T24046] bridge_slave_1: left allmulticast mode [ 2877.551312][T24046] bridge_slave_1: left promiscuous mode [ 2877.559410][T24046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2877.571992][T24046] bridge_slave_0: left allmulticast mode [ 2877.603523][T24046] bridge_slave_0: left promiscuous mode stopped /usr/sbin/crond (pid 5514) OK [ 2877.632140][T24046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2877.744747][T24046] veth1_macvtap: left promiscuous mode [ 2877.761805][T24046] veth0_macvtap: left promiscuous mode [ 2877.774890][T24046] veth1_vlan: left promiscuous mode [ 2877.784647][T24046] veth0_vlan: left promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5433) Stopping network: [ 2879.064871][T24046] team0 (unregistering): Port device team_slave_1 removed [ 2879.146695][T24046] team0 (unregistering): Port device team_slave_0 removed [ 2879.236287][T24046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2879.322333][T24046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2879.936652][T24046] bond0 (unregistering): Released all slaves [ 2880.578658][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4897'. [ 2882.061253][T24046] IPVS: stop unused estimator thread 0... OK Stopping iptables: OK [ 2884.144464][T26547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4908'. [ 2884.407665][T26369] netdevsim netdevsim2 netdevsim0: renamed from eth0 Stopping system message bus: [ 2884.475942][T26369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2884.542021][T26369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2884.590635][T26369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2885.147593][T26369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2885.596337][T26369] 8021q: adding VLAN 0 to HW filter on device team0 [ 2885.731016][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2885.739393][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2885.794457][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2885.802462][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state done [ 2888.454035][T26369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2888.601344][T26369] veth0_vlan: entered promiscuous mode [ 2888.652726][T26369] veth1_vlan: entered promiscuous mode [ 2888.785150][T26588] loop4: detected capacity change from 0 to 2048 [ 2888.895646][T26588] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2888.908144][T26369] veth0_macvtap: entered promiscuous mode [ 2888.943219][T26369] veth1_macvtap: entered promiscuous mode [ 2889.286905][T26594] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2889.830815][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2889.880193][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2889.978150][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2889.996568][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2890.031229][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2890.059766][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2890.094087][T26369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2890.127935][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2890.154858][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2890.192150][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2890.214605][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2890.241234][T26369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2890.267512][T26369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2890.303531][T26369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2890.376797][T26369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2890.437864][T26369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2890.482490][T26369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2890.517551][T26369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2890.773178][T19783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2890.814619][T19783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2890.934459][T19783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2890.958034][T19783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 killall: can't kill pid 19329: No such process killall: can't kill pid 19556: No such process Stopping klogd: OK Stopping acpid: [ 2895.413124][T26636] binder: 26629:26636 ioctl c0306201 200000000680 returned -14 OK Stopping syslogd: [ 2899.237252][T26662] loop1: detected capacity change from 0 to 16 [ 2899.257949][T26662] erofs: (device loop1): mounted with root inode @ nid 36. [ 2900.193076][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. stopped /sbin/syslogd (pid 5120) OK [ 2900.765047][T26678] binder: BINDER_SET_CONTEXT_MGR already set [ 2900.802167][T26674] loop2: detected capacity change from 0 to 2048 [ 2900.813766][T26678] binder: 26677:26678 ioctl 4018620d 200000000100 returned -16 [ 2900.878645][T26674] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) serialport: VM disconnected.