last executing test programs: 10m36.527822134s ago: executing program 0 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xed08f22113700cb4, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x3f, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(0x0, 0xe, 0x0, 0x0) 10m30.480333018s ago: executing program 0 (id=142): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x24020400) syz_mount_image$fuse(0x0, 0x0, 0x814400, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x10, 0x0) ftruncate(0xffffffffffffffff, 0x80000001) 10m27.252753171s ago: executing program 0 (id=143): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb512", 0x17}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91", 0x76}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132", 0x1e}], 0x3}}, {{0x0, 0x0, &(0x7f0000005080)}}], 0x2, 0x4000c8d1) 10m21.596549985s ago: executing program 0 (id=150): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d07, &(0x7f0000003640)=0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m13.477267564s ago: executing program 0 (id=157): prlimit64(0x0, 0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90024}, 0x880) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000409000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0xd6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 10m12.449101176s ago: executing program 0 (id=158): r0 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x11d, 0x1c, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x242242) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000", @ANYRES32], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x5, 0x0, 0x0) 9m57.275834378s ago: executing program 32 (id=158): r0 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x11d, 0x1c, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x242242) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000", @ANYRES32], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x5, 0x0, 0x0) 9m40.968731185s ago: executing program 1 (id=187): r0 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) 9m39.83478402s ago: executing program 1 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 9m37.773199244s ago: executing program 1 (id=191): syz_open_dev$video4linux(&(0x7f0000000a40), 0x1000, 0x40041) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0), 0x0) syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x5, 0x1, 0x8b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000002580), 0x0, 0x2) read(r3, &(0x7f0000002640)=""/102, 0x66) mmap(&(0x7f0000e37000/0x3000)=nil, 0x3000, 0x2000003, 0x11, r3, 0x6e4cf000) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000540)={0x1, 0x2, @stop_pts=0x5}) 9m29.752462711s ago: executing program 1 (id=199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x1}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x14, 0x3, "a79c32ffb9fbee54"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20bb7bcad0230550ca1bb4b60de42fec"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="51319326693b4d97e689acc140c84b0676342e3aa54ee8be94adcae4f7d64b93"}]}]}, 0x64}}, 0x4000840) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x31) 9m26.002954521s ago: executing program 1 (id=201): syz_open_dev$video4linux(&(0x7f0000000a40), 0x1000, 0x40041) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0), 0x0) syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000002580), 0x0, 0x2) read(r3, &(0x7f0000002640)=""/102, 0x66) mmap(&(0x7f0000e37000/0x3000)=nil, 0x3000, 0x2000003, 0x11, r3, 0x6e4cf000) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000540)={0x1, 0x2, @stop_pts=0x5}) 9m22.742609078s ago: executing program 1 (id=204): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x1}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x14, 0x3, "a79c32ffb9fbee54"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20bb7bcad0230550ca1bb4b60de42fec"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="51319326693b4d97e689acc140c84b0676342e3aa54ee8be94adcae4f7d64b93"}]}]}, 0x64}}, 0x4000840) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x31) 9m6.982847575s ago: executing program 33 (id=204): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x1}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x14, 0x3, "a79c32ffb9fbee54"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20bb7bcad0230550ca1bb4b60de42fec"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="51319326693b4d97e689acc140c84b0676342e3aa54ee8be94adcae4f7d64b93"}]}]}, 0x64}}, 0x4000840) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x31) 2m37.496329583s ago: executing program 2 (id=890): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x5900) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x2, r4) close(r5) 2m37.258722804s ago: executing program 2 (id=893): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000000000), 0x0) 2m37.098172294s ago: executing program 2 (id=897): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r1, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 2m36.055981129s ago: executing program 2 (id=902): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000040), 0x1, 0x540, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) 2m34.521891116s ago: executing program 2 (id=907): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 2m34.277303677s ago: executing program 2 (id=908): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 2m19.187397229s ago: executing program 34 (id=908): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 1m26.674066057s ago: executing program 6 (id=1045): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x307482, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='rxrpc_congest\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='cq_modify\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000000001c000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000e17f7f85572a104e627ade0a87d7833c4b1e82381a9a9c05e331aeedf0e2830fc059a2a607b878d17b5d2ea59bb0c7fb8eb9d05f567ee662226805c15854e08c8925f77fedaa6c89336b0439ba947205fd1e0d3641bcb50391839e18dad4de00f3e92c8668ad1407cb46e940c39d923ee346aefce2c3eb8658974d448cd1091c2ffe87244bb4abdb7b06e6dbc743e9e02d921bd98b5876b2db88ee7ad7e900ba2e54dc32696640007d6652652e8a1c8d8afe29221b5442539842c083d8ffbce6f4482a9aad2d06921b8ec2f6d3651790ee193cc0f213dba4425c9100271e0190519a131a5321355ca5bfee957fdf70fc96a7b550"], 0x45) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m25.631837531s ago: executing program 6 (id=1048): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4", 0xe1}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c0a8b", 0x66}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8906de55d53d4ef6cb26fb90479fa63a37d98b31cc593ba936e8a0a2c656ac678557413d29673226cb4c9ff71ac0403c2f63e194f4ed03165abe1faa282b6f7eab949048adc", 0xb7}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e411ac18dade4a3e4dc9cb8fcd2ff9b016022924df9c2a5", 0x23}], 0x7}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x153}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m25.256435189s ago: executing program 6 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1004c080}, 0x38000016) 1m24.639604198s ago: executing program 6 (id=1052): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0x6, {0x0, 0xfa}, 0x5, 0xd0aa}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 1m20.316990744s ago: executing program 6 (id=1064): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) chmod(0x0, 0x1) 1m18.523895705s ago: executing program 6 (id=1069): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.02424626s ago: executing program 35 (id=1069): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.019913521s ago: executing program 3 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.755937795s ago: executing program 3 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 2.545517292s ago: executing program 4 (id=1221): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) 2.269177558s ago: executing program 4 (id=1224): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 2.180970209s ago: executing program 3 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000002003f13c7160d7f89c701ff0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0acf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.040450827s ago: executing program 4 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.960853488s ago: executing program 5 (id=1228): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, 0x8f) 1.908093504s ago: executing program 7 (id=1229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.793089659s ago: executing program 5 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) 1.749451355s ago: executing program 4 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x74, 0x4, 0x28, 0xfffff02f}]}) 1.70405787s ago: executing program 7 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.703915991s ago: executing program 3 (id=1233): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.55694379s ago: executing program 5 (id=1234): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.525015933s ago: executing program 7 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.459917132s ago: executing program 3 (id=1236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000080000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.344676277s ago: executing program 4 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.185043337s ago: executing program 3 (id=1238): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.08393752s ago: executing program 5 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.072368221s ago: executing program 7 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 486.107347ms ago: executing program 7 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 340.011656ms ago: executing program 5 (id=1242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 174.755647ms ago: executing program 7 (id=1243): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 135.645712ms ago: executing program 4 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=1245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1fb49a98f4c93, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.407842][ T28] audit: type=1326 audit(1768308433.173:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.468456][ T28] audit: type=1326 audit(1768308433.173:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.562378][ T9276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.571933][ T28] audit: type=1326 audit(1768308433.203:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.618389][ T9276] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.622680][ T28] audit: type=1326 audit(1768308433.203:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.653973][ T9276] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.635: bg 0: block 345: padding at end of block bitmap is not set [ 555.681520][ T28] audit: type=1326 audit(1768308433.203:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.682068][ T9276] EXT4-fs (loop4): Remounting filesystem read-only [ 555.704098][ T28] audit: type=1326 audit(1768308433.203:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.704142][ T28] audit: type=1326 audit(1768308433.203:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 555.710960][ T9276] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1606: inode #18: comm syz.4.635: cleanup dec ref error -117 [ 555.846759][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.501653][ T9288] overlayfs: missing 'lowerdir' [ 556.529337][ T9287] overlayfs: missing 'workdir' [ 557.308046][ T9302] loop4: detected capacity change from 0 to 1024 [ 557.532690][ T9304] loop3: detected capacity change from 0 to 1024 [ 558.393047][ T9308] hfsplus: xattr searching failed [ 558.399224][ T9309] hfsplus: xattr search failed [ 558.404327][ T9309] hfsplus: unable to mark blocks free: error -4 [ 558.410693][ T9309] hfsplus: can't free extent [ 558.510983][ T6955] hfsplus: b-tree write err: -5, ino 4 [ 558.537236][ T6955] hfsplus: b-tree write err: -5, ino 4 [ 558.678685][ T9313] loop4: detected capacity change from 0 to 1024 [ 559.111926][ T9316] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 559.118465][ T9316] hfsplus: xattr searching failed [ 559.130912][ T9316] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 559.137600][ T9316] hfsplus: xattr search failed [ 559.660320][ T6967] hfsplus: b-tree write err: -5, ino 4 [ 561.442835][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.634'. [ 562.221027][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 563.559481][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.565815][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.757633][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 563.757648][ T28] audit: type=1326 audit(1768308441.633:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.131112][ T28] audit: type=1326 audit(1768308441.653:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.240038][ T28] audit: type=1326 audit(1768308441.653:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.298511][ T28] audit: type=1326 audit(1768308441.653:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.346832][ T28] audit: type=1326 audit(1768308441.673:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.427873][ T28] audit: type=1326 audit(1768308441.673:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.491142][ T28] audit: type=1326 audit(1768308441.673:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.694913][ T28] audit: type=1326 audit(1768308441.673:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 565.870985][ T28] audit: type=1326 audit(1768308441.673:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 566.050736][ T28] audit: type=1326 audit(1768308441.673:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 569.469632][ T9398] loop2: detected capacity change from 0 to 1024 [ 569.745647][ T6955] hfsplus: b-tree write err: -5, ino 4 [ 571.698971][ T9428] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 588.873277][ T9579] loop5: detected capacity change from 0 to 1024 [ 588.894854][ T9579] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 588.901823][ T9579] hfsplus: xattr search failed [ 590.903442][ T6955] hfsplus: b-tree write err: -5, ino 4 [ 597.053567][ T9650] loop2: detected capacity change from 0 to 1024 [ 597.424352][ T9656] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 597.424470][ T9656] hfsplus: xattr searching failed [ 597.429576][ T9656] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 597.429647][ T9656] hfsplus: xattr search failed [ 598.014496][ T1082] hfsplus: b-tree write err: -5, ino 4 [ 600.739388][ T9700] loop3: detected capacity change from 0 to 128 [ 600.759929][ T9700] ======================================================= [ 600.759929][ T9700] WARNING: The mand mount option has been deprecated and [ 600.759929][ T9700] and is ignored by this kernel. Remove the mand [ 600.759929][ T9700] option from the mount to silence this warning. [ 600.759929][ T9700] ======================================================= [ 600.842219][ T9700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.877416][ T9700] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 602.291385][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.041903][ T9739] lo speed is unknown, defaulting to 1000 [ 604.048345][ T9739] lo speed is unknown, defaulting to 1000 [ 604.057574][ T9739] lo speed is unknown, defaulting to 1000 [ 604.072769][ T9739] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 604.092495][ T9739] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 605.599662][ T9744] loop3: detected capacity change from 0 to 512 [ 605.739867][ T9745] loop2: detected capacity change from 0 to 512 [ 607.037059][ T9745] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 607.038339][ T9739] lo speed is unknown, defaulting to 1000 [ 607.059623][ T9739] lo speed is unknown, defaulting to 1000 [ 607.066864][ T9739] lo speed is unknown, defaulting to 1000 [ 607.074800][ T9739] lo speed is unknown, defaulting to 1000 [ 607.082776][ T9745] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 607.091497][ T9745] EXT4-fs (loop2): orphan cleanup on readonly fs [ 607.102388][ T9739] lo speed is unknown, defaulting to 1000 [ 607.116886][ T9738] siw: device registration error -23 [ 607.172050][ T9745] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.747: corrupted inode contents [ 607.191497][ T9745] EXT4-fs (loop2): Remounting filesystem read-only [ 607.199543][ T9745] EXT4-fs (loop2): 1 truncate cleaned up [ 607.220542][ T9744] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 607.229316][ T9744] EXT4-fs (loop3): orphan cleanup on readonly fs [ 607.230444][ T3486] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 607.248786][ T3486] __quota_error: 55 callbacks suppressed [ 607.248799][ T3486] Quota error (device loop2): write_blk: dquota write failed [ 607.260788][ T9744] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.748: corrupted inode contents [ 607.273769][ T3486] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 607.275141][ T9744] EXT4-fs (loop3): Remounting filesystem read-only [ 607.290445][ T3486] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 607.290733][ T9744] EXT4-fs (loop3): 1 truncate cleaned up [ 607.301110][ T3486] Quota error (device loop2): write_blk: dquota write failed [ 607.314451][ T3486] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 607.329421][ T3486] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 607.342273][ T9753] loop5: detected capacity change from 0 to 128 [ 607.378683][ T3486] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 607.408186][ T3486] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 607.424282][ T9753] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.441788][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 607.456512][ T3486] Quota error (device loop3): write_blk: dquota write failed [ 607.466538][ T3486] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 607.478508][ T9753] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 607.511436][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 607.563226][ T3486] Quota error (device loop3): write_blk: dquota write failed [ 607.608215][ T3486] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 607.886725][ T3486] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 608.326722][ T9745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 608.345010][ T9744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 608.452671][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.479091][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.684056][ T6873] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.968870][ T9766] lo speed is unknown, defaulting to 1000 [ 608.975036][ T9766] lo speed is unknown, defaulting to 1000 [ 608.990538][ T9766] lo speed is unknown, defaulting to 1000 [ 609.030076][ T9766] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 609.228302][ T9768] loop3: detected capacity change from 0 to 512 [ 609.721849][ T9766] lo speed is unknown, defaulting to 1000 [ 609.729235][ T9766] lo speed is unknown, defaulting to 1000 [ 609.791704][ T9766] lo speed is unknown, defaulting to 1000 [ 609.799354][ T9766] lo speed is unknown, defaulting to 1000 [ 609.805948][ T9766] lo speed is unknown, defaulting to 1000 [ 609.948834][ T9768] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 609.957747][ T9768] EXT4-fs (loop3): orphan cleanup on readonly fs [ 609.983481][ T9768] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.752: corrupted inode contents [ 609.996847][ T9768] EXT4-fs (loop3): Remounting filesystem read-only [ 610.004926][ T9768] EXT4-fs (loop3): 1 truncate cleaned up [ 610.037528][ T3453] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 610.090429][ T3453] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 610.123479][ T3453] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 610.145955][ T9768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 610.506331][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.032635][ T9790] siw: device registration error -23 [ 611.048733][ T9790] loop2: detected capacity change from 0 to 512 [ 612.383520][ T9790] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 612.394881][ T9790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 612.461439][ T9790] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.758: corrupted inode contents [ 612.500733][ T9790] EXT4-fs (loop2): Remounting filesystem read-only [ 612.507643][ T9790] EXT4-fs (loop2): 1 truncate cleaned up [ 612.523880][ T6960] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 612.567358][ T6960] __quota_error: 8 callbacks suppressed [ 612.567373][ T6960] Quota error (device loop2): write_blk: dquota write failed [ 612.717430][ T6960] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 612.776818][ T6960] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 612.797703][ T6960] Quota error (device loop2): write_blk: dquota write failed [ 612.812943][ T6960] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 612.823498][ T6960] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 612.833853][ T6960] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 612.842890][ T6960] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 612.854596][ T9790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 613.198807][ T9805] siw: device registration error -23 [ 613.372555][ T9806] lo speed is unknown, defaulting to 1000 [ 613.676115][ T9807] loop5: detected capacity change from 0 to 512 [ 614.795633][ T9807] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 614.807303][ T9807] EXT4-fs (loop5): orphan cleanup on readonly fs [ 614.842553][ T9807] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.763: corrupted inode contents [ 614.843705][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.856966][ T9807] EXT4-fs (loop5): Remounting filesystem read-only [ 614.870633][ T9807] EXT4-fs (loop5): 1 truncate cleaned up [ 616.152876][ T9819] siw: device registration error -23 [ 616.947534][ T9820] loop2: detected capacity change from 0 to 512 [ 617.151817][ T3486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.163158][ T9820] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 617.172140][ T9820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 617.177386][ T3486] Quota error (device loop5): write_blk: dquota write failed [ 617.183132][ T9820] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.764: corrupted inode contents [ 617.187005][ T3486] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 617.207336][ T9820] EXT4-fs (loop2): Remounting filesystem read-only [ 617.215232][ T9820] EXT4-fs (loop2): 1 truncate cleaned up [ 617.234652][ T3486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.251751][ T3486] Quota error (device loop5): write_blk: dquota write failed [ 617.262373][ T3486] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 617.278457][ T3486] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 617.295329][ T3486] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.328310][ T3486] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.341500][ T3486] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 617.353638][ T9807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 617.423823][ T9820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 617.518261][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.736601][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.146153][ T9830] loop3: detected capacity change from 0 to 512 [ 620.067835][ T9844] siw: device registration error -23 [ 620.167745][ T9843] siw: device registration error -23 [ 621.678409][ T9845] loop5: detected capacity change from 0 to 512 [ 621.800412][ T9846] loop4: detected capacity change from 0 to 512 [ 623.289621][ T9830] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 623.359497][ T9846] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 623.368057][ T9846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 623.387321][ T9846] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.769: corrupted inode contents [ 623.403960][ T9846] EXT4-fs (loop4): Remounting filesystem read-only [ 623.410971][ T9846] EXT4-fs (loop4): 1 truncate cleaned up [ 623.416931][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 623.428345][ T1082] __quota_error: 8 callbacks suppressed [ 623.428358][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 623.437970][ T9845] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 623.449730][ T9845] EXT4-fs (loop5): orphan cleanup on readonly fs [ 623.483170][ T1082] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 623.496082][ T9845] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.770: corrupted inode contents [ 623.527380][ T9845] EXT4-fs (loop5): Remounting filesystem read-only [ 623.534297][ T9845] EXT4-fs (loop5): 1 truncate cleaned up [ 623.574179][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 623.632858][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 623.693027][ T1082] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 623.740494][ T1082] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 623.757490][ T1082] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 623.766627][ T1082] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 623.985492][ T9860] loop3: detected capacity change from 0 to 512 [ 624.093355][ T9860] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 624.104887][ T9860] EXT4-fs (loop3): orphan cleanup on readonly fs [ 624.165841][ T9860] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.772: corrupted inode contents [ 624.186382][ T9860] EXT4-fs (loop3): Remounting filesystem read-only [ 624.194427][ T9860] EXT4-fs (loop3): 1 truncate cleaned up [ 624.390938][ T1082] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 624.433258][ T1082] Quota error (device loop5): write_blk: dquota write failed [ 624.456943][ T1082] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 624.477746][ T1082] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 624.512144][ T1082] Quota error (device loop5): write_blk: dquota write failed [ 624.521562][ T1082] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 624.532031][ T1082] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 624.546932][ T9846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.555649][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 624.570300][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 624.581222][ T1082] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 624.594116][ T9845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.659516][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.671181][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.685520][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.717131][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.721026][ T9860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 625.098858][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.273691][ T9873] siw: device registration error -23 [ 625.513271][ T9875] loop5: detected capacity change from 0 to 512 [ 625.523307][ T9876] siw: device registration error -23 [ 626.260074][ T9877] loop4: detected capacity change from 0 to 512 [ 628.035222][ T9875] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 628.043794][ T9875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 628.062908][ T9877] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 628.066495][ T9875] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.775: corrupted inode contents [ 628.071244][ T9877] EXT4-fs (loop4): orphan cleanup on readonly fs [ 628.092970][ T9875] EXT4-fs (loop5): Remounting filesystem read-only [ 628.100017][ T9875] EXT4-fs (loop5): 1 truncate cleaned up [ 628.111781][ T3453] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 628.133523][ T9877] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.774: corrupted inode contents [ 628.151873][ T9877] EXT4-fs (loop4): Remounting filesystem read-only [ 628.158820][ T9877] EXT4-fs (loop4): 1 truncate cleaned up [ 628.174912][ T3453] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 628.187919][ T3453] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 628.207724][ T3453] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 628.224043][ T3453] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 628.254387][ T3453] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 628.266982][ T9875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.267069][ T9877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.857087][ T9895] lo speed is unknown, defaulting to 1000 [ 629.476095][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.506940][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.644748][ T9908] siw: device registration error -23 [ 630.877295][ T9907] lo speed is unknown, defaulting to 1000 [ 631.373981][ T9911] loop2: detected capacity change from 0 to 512 [ 631.878210][ T9911] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 631.886484][ T9911] EXT4-fs (loop2): orphan cleanup on readonly fs [ 631.904396][ T9911] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.781: corrupted inode contents [ 632.153034][ T9911] EXT4-fs (loop2): Remounting filesystem read-only [ 632.160444][ T9911] EXT4-fs (loop2): 1 truncate cleaned up [ 632.240726][ T9921] siw: device registration error -23 [ 632.321793][ T9922] lo speed is unknown, defaulting to 1000 [ 632.471840][ T9924] loop5: detected capacity change from 0 to 512 [ 633.107527][ T3453] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 633.169731][ T9924] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 633.178319][ T9924] EXT4-fs (loop5): orphan cleanup on readonly fs [ 633.224965][ T9924] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.779: corrupted inode contents [ 633.265616][ T3453] __quota_error: 20 callbacks suppressed [ 633.265632][ T3453] Quota error (device loop2): write_blk: dquota write failed [ 633.287508][ T9924] EXT4-fs (loop5): Remounting filesystem read-only [ 633.294464][ T9924] EXT4-fs (loop5): 1 truncate cleaned up [ 633.345756][ T3453] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 633.361894][ T3453] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 633.373077][ T3453] Quota error (device loop2): write_blk: dquota write failed [ 633.394583][ T3453] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 633.609215][ T9932] lo speed is unknown, defaulting to 1000 [ 634.133292][ T3453] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 634.189804][ T3453] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 634.239730][ T3453] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 634.289374][ T3453] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 634.306777][ T3453] Quota error (device loop5): write_blk: dquota write failed [ 634.315622][ T3453] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 634.325816][ T3453] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 634.337172][ T3453] Quota error (device loop5): write_blk: dquota write failed [ 634.346858][ T3453] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 634.357301][ T3453] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 634.459128][ T9911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.529861][ T9924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.615645][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.442665][ T9939] lo speed is unknown, defaulting to 1000 [ 637.352603][ T9953] loop3: detected capacity change from 0 to 512 [ 637.396029][ T9948] lo speed is unknown, defaulting to 1000 [ 637.799168][ T9953] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 637.807573][ T9953] EXT4-fs (loop3): orphan cleanup on readonly fs [ 637.819862][ T9953] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.787: corrupted inode contents [ 637.840568][ T9953] EXT4-fs (loop3): Remounting filesystem read-only [ 637.847999][ T9953] EXT4-fs (loop3): 1 truncate cleaned up [ 637.858428][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 637.882127][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 637.893048][ T3486] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 637.907048][ T9953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 637.930289][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.223003][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.427536][ T9960] siw: device registration error -23 [ 638.572071][ T9961] loop5: detected capacity change from 0 to 512 [ 638.657580][ T9961] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 638.667787][ T9961] EXT4-fs (loop5): orphan cleanup on readonly fs [ 638.711864][ T9961] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.788: corrupted inode contents [ 638.726463][ T9961] EXT4-fs (loop5): Remounting filesystem read-only [ 638.736750][ T9961] EXT4-fs (loop5): 1 truncate cleaned up [ 638.755075][ T3486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 638.957346][ T3486] __quota_error: 8 callbacks suppressed [ 638.957363][ T3486] Quota error (device loop5): write_blk: dquota write failed [ 639.067400][ T3486] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 639.080576][ T3486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 639.094087][ T3486] Quota error (device loop5): write_blk: dquota write failed [ 639.101243][ T9965] loop3: detected capacity change from 0 to 1024 [ 639.102380][ T3486] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 639.118311][ T3486] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 639.128484][ T3486] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 639.139593][ T3486] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 639.155391][ T9961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 639.428600][ T9965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.611141][ T9973] lo speed is unknown, defaulting to 1000 [ 640.185136][ T9965] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.230201][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.798793][ T9983] siw: device registration error -23 [ 640.865551][ T9987] loop2: detected capacity change from 0 to 512 [ 640.875770][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.721475][ T9989] lo speed is unknown, defaulting to 1000 [ 641.759877][ T9987] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 641.768247][ T9987] EXT4-fs (loop2): orphan cleanup on readonly fs [ 641.808286][ T9987] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.792: corrupted inode contents [ 641.828966][ T9987] EXT4-fs (loop2): Remounting filesystem read-only [ 641.836421][ T9987] EXT4-fs (loop2): 1 truncate cleaned up [ 641.854319][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 641.897521][ T12] Quota error (device loop2): write_blk: dquota write failed [ 641.904984][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 641.915470][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 641.926177][ T12] Quota error (device loop2): write_blk: dquota write failed [ 641.934071][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 641.957392][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 641.989399][ T9987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.213059][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.442317][T10002] loop3: detected capacity change from 0 to 512 [ 642.642857][T10002] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 642.653097][T10002] EXT4-fs (loop3): orphan cleanup on readonly fs [ 642.696824][T10002] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.794: corrupted inode contents [ 642.712157][T10002] EXT4-fs (loop3): Remounting filesystem read-only [ 642.720332][T10002] EXT4-fs (loop3): 1 truncate cleaned up [ 642.872555][ T3453] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 642.897343][ T3453] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 642.909670][ T3453] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 642.922329][T10002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.000255][ T9998] lo speed is unknown, defaulting to 1000 [ 643.248760][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.330628][T10010] loop2: detected capacity change from 0 to 1024 [ 643.608629][T10010] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 643.615436][T10010] hfsplus: xattr search failed [ 643.720615][ T3453] hfsplus: b-tree write err: -5, ino 4 [ 644.889982][T10027] loop3: detected capacity change from 0 to 512 [ 645.007711][T10028] siw: device registration error -23 [ 646.130132][T10029] loop2: detected capacity change from 0 to 512 [ 647.316924][T10029] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 647.325399][T10029] EXT4-fs (loop2): orphan cleanup on readonly fs [ 647.336974][T10027] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 647.345391][T10027] EXT4-fs (loop3): orphan cleanup on readonly fs [ 647.347467][T10029] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.802: corrupted inode contents [ 647.361922][T10027] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.800: corrupted inode contents [ 647.366798][T10029] EXT4-fs (loop2): Remounting filesystem read-only [ 647.383471][T10029] EXT4-fs (loop2): 1 truncate cleaned up [ 647.390090][T10027] EXT4-fs (loop3): Remounting filesystem read-only [ 647.397465][T10027] EXT4-fs (loop3): 1 truncate cleaned up [ 647.403430][ T1082] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.420824][ T1082] __quota_error: 8 callbacks suppressed [ 647.420839][ T1082] Quota error (device loop2): write_blk: dquota write failed [ 647.434238][ T1082] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 647.445190][ T1082] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.493090][ T1082] Quota error (device loop2): write_blk: dquota write failed [ 647.514964][ T1082] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 647.553982][ T1082] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 647.590415][ T1082] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 647.601076][ T1082] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 647.758532][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.772633][ T1082] Quota error (device loop3): write_blk: dquota write failed [ 647.788025][ T1082] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 647.804690][ T1082] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.816248][ T1082] Quota error (device loop3): write_blk: dquota write failed [ 647.824629][ T1082] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 647.834954][ T1082] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 647.847118][T10029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.920522][T10027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 649.162240][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.172095][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.199375][T10039] lo speed is unknown, defaulting to 1000 [ 651.480008][T10049] lo speed is unknown, defaulting to 1000 [ 651.515072][T10050] lo speed is unknown, defaulting to 1000 [ 652.322088][T10060] siw: device registration error -23 [ 652.468070][T10061] loop4: detected capacity change from 0 to 512 [ 652.848733][T10061] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 652.857064][T10061] EXT4-fs (loop4): orphan cleanup on readonly fs [ 652.878006][T10061] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.806: corrupted inode contents [ 652.890499][T10061] EXT4-fs (loop4): Remounting filesystem read-only [ 652.897487][T10061] EXT4-fs (loop4): 1 truncate cleaned up [ 652.916207][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 652.951145][ T1082] __quota_error: 2 callbacks suppressed [ 652.951160][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 653.018726][ T1082] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 653.046205][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 653.064063][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 653.082809][ T1082] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 653.095189][ T1082] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 653.121082][ T1082] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 653.136425][ T1082] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 653.149109][T10061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.404356][T10067] lo speed is unknown, defaulting to 1000 [ 654.088206][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.427693][T10079] siw: device registration error -23 [ 655.746079][T10080] lo speed is unknown, defaulting to 1000 [ 657.100141][T10082] lo speed is unknown, defaulting to 1000 [ 657.528576][T10085] loop4: detected capacity change from 0 to 512 [ 659.005836][T10085] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 659.015507][T10085] EXT4-fs (loop4): orphan cleanup on readonly fs [ 659.029649][T10085] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.808: corrupted inode contents [ 659.050330][T10085] EXT4-fs (loop4): Remounting filesystem read-only [ 659.058248][T10085] EXT4-fs (loop4): 1 truncate cleaned up [ 659.069284][ T6960] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 659.117851][ T6960] Quota error (device loop4): write_blk: dquota write failed [ 659.125517][ T6960] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 659.139297][ T6960] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 659.203586][ T6960] Quota error (device loop4): write_blk: dquota write failed [ 659.216702][ T6960] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 659.237678][ T6960] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 659.252043][ T6960] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 659.263532][ T6960] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 659.277849][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.424315][T10095] siw: device registration error -23 [ 659.574694][T10096] loop2: detected capacity change from 0 to 512 [ 659.738994][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.873683][T10096] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 659.883809][T10096] EXT4-fs (loop2): orphan cleanup on readonly fs [ 659.923642][T10096] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.809: corrupted inode contents [ 659.942746][T10096] EXT4-fs (loop2): Remounting filesystem read-only [ 659.949864][T10096] EXT4-fs (loop2): 1 truncate cleaned up [ 659.964381][ T6967] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 659.977620][ T6967] Quota error (device loop2): write_blk: dquota write failed [ 659.985152][ T6967] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 659.995502][ T6967] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 660.011184][ T6967] Quota error (device loop2): write_blk: dquota write failed [ 660.019633][ T6967] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 660.031298][ T6967] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 660.053408][T10096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.374344][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.486199][T10102] siw: device registration error -23 [ 660.636450][T10104] loop4: detected capacity change from 0 to 512 [ 660.787724][T10104] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 660.798244][T10104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 660.843653][T10104] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.812: corrupted inode contents [ 660.856974][T10104] EXT4-fs (loop4): Remounting filesystem read-only [ 660.865015][T10104] EXT4-fs (loop4): 1 truncate cleaned up [ 660.872213][ T49] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 661.034051][ T49] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 661.073231][ T49] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 661.123792][T10104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 661.436846][T10109] lo speed is unknown, defaulting to 1000 [ 662.203379][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.167586][T10118] siw: device registration error -23 [ 663.752696][T10117] loop2: detected capacity change from 0 to 512 [ 663.792744][T10117] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 663.801170][T10117] EXT4-fs (loop2): orphan cleanup on readonly fs [ 663.812067][T10117] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.815: corrupted inode contents [ 663.826797][T10117] EXT4-fs (loop2): Remounting filesystem read-only [ 663.833854][T10117] EXT4-fs (loop2): 1 truncate cleaned up [ 663.887698][ T79] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 663.902827][ T79] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 663.925305][T10122] lo speed is unknown, defaulting to 1000 [ 663.931608][ T79] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 663.953953][T10117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.272130][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.569708][T10132] lo speed is unknown, defaulting to 1000 [ 665.890140][T10136] loop3: detected capacity change from 0 to 512 [ 667.219750][T10136] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 667.228680][T10136] EXT4-fs (loop3): orphan cleanup on readonly fs [ 667.247819][T10136] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.817: corrupted inode contents [ 667.263272][T10136] EXT4-fs (loop3): Remounting filesystem read-only [ 667.271626][T10136] EXT4-fs (loop3): 1 truncate cleaned up [ 667.277759][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 667.300929][ T12] __quota_error: 14 callbacks suppressed [ 667.300988][ T12] Quota error (device loop3): write_blk: dquota write failed [ 667.314621][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 667.359161][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 667.393028][ T12] Quota error (device loop3): write_blk: dquota write failed [ 667.417788][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 667.456717][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 667.494727][ T12] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 667.513205][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 667.548905][T10136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.813809][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.426256][T10148] loop3: detected capacity change from 0 to 512 [ 668.500546][T10148] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 668.510420][T10148] EXT4-fs (loop3): orphan cleanup on readonly fs [ 668.540033][T10148] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.820: corrupted inode contents [ 668.553399][T10148] EXT4-fs (loop3): Remounting filesystem read-only [ 668.561722][T10148] EXT4-fs (loop3): 1 truncate cleaned up [ 668.584533][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 668.818187][ T12] Quota error (device loop3): write_blk: dquota write failed [ 668.833824][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 668.857277][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 668.897561][ T12] Quota error (device loop3): write_blk: dquota write failed [ 668.905003][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 668.952535][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 668.974514][T10148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.294605][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.588667][T10158] siw: device registration error -23 [ 669.843027][T10160] loop4: detected capacity change from 0 to 512 [ 671.240811][T10160] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 671.250861][T10160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 671.288737][T10160] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.821: corrupted inode contents [ 671.312470][T10160] EXT4-fs (loop4): Remounting filesystem read-only [ 671.319896][T10160] EXT4-fs (loop4): 1 truncate cleaned up [ 671.331734][ T6955] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 671.373171][T10161] lo speed is unknown, defaulting to 1000 [ 671.459622][ T6955] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 671.513877][ T6955] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 671.548971][T10160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 672.345257][T10170] lo speed is unknown, defaulting to 1000 [ 672.466001][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.603377][T10181] lo speed is unknown, defaulting to 1000 [ 674.004145][T10187] lo speed is unknown, defaulting to 1000 [ 674.787540][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 674.787556][ T28] audit: type=1326 audit(1768308552.633:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 674.827464][T10192] loop5: detected capacity change from 0 to 1024 [ 674.881939][ T28] audit: type=1326 audit(1768308552.633:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 675.025699][T10192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.056303][ T28] audit: type=1326 audit(1768308552.633:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f6ef8f783 code=0x7ffc0000 [ 675.063879][T10192] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.079802][ T28] audit: type=1326 audit(1768308552.643:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f6ef8e1ff code=0x7ffc0000 [ 675.192406][ T28] audit: type=1326 audit(1768308552.653:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7f6ef8f7d7 code=0x7ffc0000 [ 675.386363][T10199] lo speed is unknown, defaulting to 1000 [ 675.988881][ T28] audit: type=1326 audit(1768308552.653:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f6ef8df90 code=0x7ffc0000 [ 676.012043][ T28] audit: type=1326 audit(1768308552.653:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f6ef8f34b code=0x7ffc0000 [ 676.041518][ T28] audit: type=1326 audit(1768308552.703:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f6ef8e3aa code=0x7ffc0000 [ 676.077565][ T28] audit: type=1326 audit(1768308552.703:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f6ef8e3aa code=0x7ffc0000 [ 676.225066][ T28] audit: type=1326 audit(1768308552.703:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f6ef8de97 code=0x7ffc0000 [ 676.298091][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.852556][T10209] loop2: detected capacity change from 0 to 512 [ 677.227589][T10209] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 677.235918][T10209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 677.257661][T10209] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.830: corrupted inode contents [ 677.313590][T10209] EXT4-fs (loop2): Remounting filesystem read-only [ 677.320821][T10209] EXT4-fs (loop2): 1 truncate cleaned up [ 677.339213][ T49] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 677.512960][ T49] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 677.537442][ T49] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 678.883082][T10221] loop3: detected capacity change from 0 to 512 [ 679.111066][T10222] lo speed is unknown, defaulting to 1000 [ 679.702047][T10221] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 679.710543][T10221] EXT4-fs (loop3): orphan cleanup on readonly fs [ 679.717040][T10209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 679.854432][T10221] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.832: corrupted inode contents [ 679.880999][T10221] EXT4-fs (loop3): Remounting filesystem read-only [ 679.888263][T10221] EXT4-fs (loop3): 1 truncate cleaned up [ 679.896589][ T6960] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 679.928170][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.933426][ T6960] __quota_error: 17 callbacks suppressed [ 679.933441][ T6960] Quota error (device loop3): write_blk: dquota write failed [ 680.042229][ T6960] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 680.097496][ T6960] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 680.127361][ T6960] Quota error (device loop3): write_blk: dquota write failed [ 680.134830][ T6960] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 680.160310][ T6960] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 680.345367][ T6960] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 680.362132][ T6960] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 680.376373][T10221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.472346][T10238] siw: device registration error -23 [ 680.671288][T10239] siw: device registration error -23 [ 683.108037][T10240] loop4: detected capacity change from 0 to 512 [ 683.136629][T10241] loop5: detected capacity change from 0 to 512 [ 683.234142][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.279023][T10241] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 683.287498][T10241] EXT4-fs (loop5): orphan cleanup on readonly fs [ 683.289182][T10240] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 683.300744][T10241] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.837: corrupted inode contents [ 683.302566][T10240] EXT4-fs (loop4): orphan cleanup on readonly fs [ 683.315945][T10241] EXT4-fs (loop5): Remounting filesystem read-only [ 683.327845][T10241] EXT4-fs (loop5): 1 truncate cleaned up [ 683.365424][ T6957] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 683.366216][T10240] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.836: corrupted inode contents [ 683.418473][ T6957] Quota error (device loop5): write_blk: dquota write failed [ 683.426520][T10240] EXT4-fs (loop4): Remounting filesystem read-only [ 683.433658][T10240] EXT4-fs (loop4): 1 truncate cleaned up [ 683.439882][ T6957] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 683.452129][ T6957] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 683.462799][ T6957] Quota error (device loop5): write_blk: dquota write failed [ 683.470402][ T6957] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 683.480555][ T6957] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 683.517500][ T6957] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 683.533556][ T6957] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 683.576495][ T6957] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 683.612831][T10241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 683.612873][T10240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 683.942882][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.955529][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.104878][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.111302][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.444249][T10266] lo speed is unknown, defaulting to 1000 [ 690.454119][T10274] lo speed is unknown, defaulting to 1000 [ 690.551796][T10280] lo speed is unknown, defaulting to 1000 [ 691.183654][T10293] lo speed is unknown, defaulting to 1000 [ 692.479406][T10305] siw: device registration error -23 [ 693.162180][T10306] loop5: detected capacity change from 0 to 512 [ 694.218236][T10306] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 694.226539][T10306] EXT4-fs (loop5): orphan cleanup on readonly fs [ 694.259411][T10306] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #16: comm syz.5.846: corrupted inode contents [ 694.272855][T10306] EXT4-fs (loop5): Remounting filesystem read-only [ 694.280497][T10306] EXT4-fs (loop5): 1 truncate cleaned up [ 694.302206][ T49] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 694.335609][T10307] lo speed is unknown, defaulting to 1000 [ 694.378612][ T49] __quota_error: 8 callbacks suppressed [ 694.378625][ T49] Quota error (device loop5): write_blk: dquota write failed [ 694.457292][ T49] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 694.491118][ T49] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 694.519367][ T49] Quota error (device loop5): write_blk: dquota write failed [ 694.526814][ T49] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 694.605086][ T49] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 694.621031][ T49] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 694.632022][ T49] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 694.643856][T10306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.198672][ T6873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.248705][T10320] loop3: detected capacity change from 0 to 512 [ 695.273402][T10322] siw: device registration error -23 [ 695.283237][T10320] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 695.294312][T10320] EXT4-fs (loop3): orphan cleanup on readonly fs [ 695.346427][T10324] loop4: detected capacity change from 0 to 512 [ 695.350996][T10320] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.849: corrupted inode contents [ 695.372061][T10320] EXT4-fs (loop3): Remounting filesystem read-only [ 695.379948][T10320] EXT4-fs (loop3): 1 truncate cleaned up [ 695.389745][T10324] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 695.398185][T10324] EXT4-fs (loop4): orphan cleanup on readonly fs [ 695.405800][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 695.428217][T10324] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.848: corrupted inode contents [ 695.444528][T10324] EXT4-fs (loop4): Remounting filesystem read-only [ 695.451538][T10324] EXT4-fs (loop4): 1 truncate cleaned up [ 695.466736][ T3486] Quota error (device loop3): write_blk: dquota write failed [ 695.486794][ T3486] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 695.514773][ T3486] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 695.526091][ T3486] Quota error (device loop3): write_blk: dquota write failed [ 695.643001][ T3486] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 695.676101][ T3486] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 695.763622][ T3486] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 695.789249][ T3486] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 695.803520][ T3486] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 695.822045][T10320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.873611][T10330] lo speed is unknown, defaulting to 1000 [ 696.077037][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.133889][T10324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 696.887998][T10341] lo speed is unknown, defaulting to 1000 [ 697.987039][T10350] loop5: detected capacity change from 0 to 1024 [ 697.996313][T10349] loop2: detected capacity change from 0 to 1024 [ 698.774381][T10352] lo speed is unknown, defaulting to 1000 [ 698.997449][T10350] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 699.003869][T10350] hfsplus: xattr search failed [ 699.178891][T10358] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 699.185348][T10358] hfsplus: xattr search failed [ 699.327863][ T6957] hfsplus: b-tree write err: -5, ino 4 [ 699.615051][ T6957] hfsplus: b-tree write err: -5, ino 4 [ 700.580439][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.257269][T10374] siw: device registration error -23 [ 702.082860][T10374] loop4: detected capacity change from 0 to 512 [ 702.330194][T10374] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 702.338622][T10374] EXT4-fs (loop4): orphan cleanup on readonly fs [ 702.407734][T10374] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.859: corrupted inode contents [ 702.422808][T10374] EXT4-fs (loop4): Remounting filesystem read-only [ 702.429849][T10374] EXT4-fs (loop4): 1 truncate cleaned up [ 702.595256][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 702.607378][ T1082] __quota_error: 8 callbacks suppressed [ 702.607392][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 702.621395][ T1082] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 702.632643][ T1082] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 702.686781][ T1082] Quota error (device loop4): write_blk: dquota write failed [ 702.703763][ T1082] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 702.772616][ T1082] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 702.836452][ T1082] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 702.863633][ T1082] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 704.189178][T10374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 704.306783][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.377514][T10467] loop4: detected capacity change from 0 to 32768 [ 707.411491][T10467] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.898 (10467) [ 707.432766][T10467] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 707.443089][T10467] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 707.452657][T10467] BTRFS info (device loop4): using free space tree [ 707.652107][T10485] loop2: detected capacity change from 0 to 1024 [ 708.555676][T10467] BTRFS info (device loop4): enabling ssd optimizations [ 708.563258][T10467] BTRFS info (device loop4): auto enabling async discard [ 708.741703][T10485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.765955][T10485] ext4 filesystem being mounted at /253/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.839348][T10467] syz.4.898 (10467) used greatest stack depth: 20680 bytes left [ 708.938278][T10503] random: crng reseeded on system resumption [ 708.952328][ T7026] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 709.019408][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.256374][T10511] loop2: detected capacity change from 0 to 1024 [ 709.282961][T10511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.508124][T10514] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 710.796029][T10516] loop4: detected capacity change from 0 to 40427 [ 710.860855][T10524] syz.3.910 (10524) used greatest stack depth: 17960 bytes left [ 710.870912][T10516] F2FS-fs (loop4): invalid crc value [ 712.237356][T10516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 712.374179][T10516] F2FS-fs (loop4): Start checkpoint disabled! [ 714.914690][T10554] loop5: detected capacity change from 0 to 32768 [ 714.948577][T10554] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.917 (10554) [ 715.019389][T10554] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 715.036884][T10554] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 715.057559][T10554] BTRFS info (device loop5): enabling auto defrag [ 715.064050][T10554] BTRFS info (device loop5): force clearing of disk cache [ 715.073039][T10554] BTRFS info (device loop5): enabling disk space caching [ 715.082564][T10554] BTRFS info (device loop5): max_inline at 0 [ 715.089041][T10554] BTRFS info (device loop5): disk space caching is enabled [ 715.259590][T10554] BTRFS info (device loop5): enabling ssd optimizations [ 715.266614][T10554] BTRFS info (device loop5): auto enabling async discard [ 715.295460][T10554] BTRFS info (device loop5): rebuilding free space tree [ 715.330082][T10554] BTRFS info (device loop5): disabling free space tree [ 715.337057][T10554] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 715.348331][T10554] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 715.428656][ T28] audit: type=1804 audit(1768308593.293:549): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.917" name="/newroot/138/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 715.496595][ T28] audit: type=1804 audit(1768308593.303:550): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.917" name="/newroot/138/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 715.638968][ T6873] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 715.855531][T10594] xt_hashlimit: size too large, truncated to 1048576 [ 715.928368][T10596] : renamed from veth1_to_team (while UP) [ 718.751083][T10609] lo speed is unknown, defaulting to 1000 [ 722.472533][T10633] syzkaller0: entered promiscuous mode [ 722.482420][T10633] syzkaller0: entered allmulticast mode [ 724.802536][T10664] loop5: detected capacity change from 0 to 2048 [ 725.045745][T10665] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 725.182937][ T28] audit: type=1800 audit(1768308603.053:551): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.940" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 725.259720][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.276068][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.287516][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.296683][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.307400][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 725.316465][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 725.396881][T10666] lo speed is unknown, defaulting to 1000 [ 727.446371][ T51] Bluetooth: hci2: command tx timeout [ 727.551383][T10666] chnl_net:caif_netlink_parms(): no params data found [ 729.158902][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.164835][T10690] loop3: detected capacity change from 0 to 2048 [ 729.166503][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.224763][T10666] bridge_slave_0: entered allmulticast mode [ 729.233878][T10666] bridge_slave_0: entered promiscuous mode [ 729.266964][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.281123][T10690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.300279][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.307531][T10690] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.337495][T10666] bridge_slave_1: entered allmulticast mode [ 729.346724][T10666] bridge_slave_1: entered promiscuous mode [ 729.402668][T10690] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.944: bg 0: block 345: padding at end of block bitmap is not set [ 729.457642][ T51] Bluetooth: hci2: command tx timeout [ 729.469532][T10690] EXT4-fs (loop3): Remounting filesystem read-only [ 729.476221][T10690] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1606: inode #18: comm syz.3.944: cleanup dec ref error -117 [ 729.506787][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.541352][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.622809][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.706105][T10666] team0: Port device team_slave_0 added [ 729.765988][T10666] team0: Port device team_slave_1 added [ 729.850101][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.868622][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.913280][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.932731][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.940548][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.964416][T10692] loop4: detected capacity change from 0 to 40427 [ 729.990211][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.998147][T10692] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 730.017657][T10692] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 730.026981][T10692] F2FS-fs (loop4): invalid crc value [ 730.054402][T10692] F2FS-fs (loop4): Found nat_bits in checkpoint [ 730.100739][T10702] netlink: 'syz.5.945': attribute type 13 has an invalid length. [ 730.108835][T10702] netlink: 'syz.5.945': attribute type 27 has an invalid length. [ 730.163152][T10692] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 730.185654][T10692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 730.306624][T10666] hsr_slave_0: entered promiscuous mode [ 730.498373][T10666] hsr_slave_1: entered promiscuous mode [ 730.605221][T10666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.680566][T10666] Cannot create hsr debugfs directory [ 731.315468][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 731.544945][T10712] loop5: detected capacity change from 0 to 32768 [ 731.551770][ T51] Bluetooth: hci2: command tx timeout [ 731.597511][T10712] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.950 (10712) [ 731.682584][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 731.697735][T10712] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 731.716660][T10712] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 731.727463][T10712] BTRFS info (device loop5): setting nodatasum [ 731.751977][T10712] BTRFS info (device loop5): force clearing of disk cache [ 731.774254][T10712] BTRFS info (device loop5): enabling ssd optimizations [ 731.820868][T10712] BTRFS info (device loop5): using spread ssd allocation scheme [ 731.869479][T10712] BTRFS info (device loop5): not using ssd optimizations [ 731.877351][T10712] BTRFS info (device loop5): not using spread ssd allocation scheme [ 731.885382][T10712] BTRFS info (device loop5): using free space tree [ 732.038429][T10666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 732.066712][T10666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 732.111174][T10666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 732.144472][T10666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 732.245256][T10712] BTRFS info (device loop5): rebuilding free space tree [ 732.303850][ T28] audit: type=1800 audit(1768308610.173:552): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.950" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 732.466888][ T6873] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 732.513454][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.595129][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.728596][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.735791][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.846660][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.853828][ T6957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.179963][T10666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.628531][ T51] Bluetooth: hci2: command tx timeout [ 735.114792][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.292899][T10778] capability: warning: `syz.5.961' uses deprecated v2 capabilities in a way that may be insecure [ 735.991195][T10666] veth0_vlan: entered promiscuous mode [ 736.047398][ T5879] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 736.210904][T10666] veth1_vlan: entered promiscuous mode [ 736.297723][T10666] veth0_macvtap: entered promiscuous mode [ 736.330828][T10666] veth1_macvtap: entered promiscuous mode [ 736.342729][ T5879] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 736.373727][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.393704][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.402405][ T5879] usb 6-1: Product: syz [ 736.435832][ T5879] usb 6-1: Manufacturer: syz [ 736.443050][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.445972][ T5879] usb 6-1: SerialNumber: syz [ 736.462182][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.513610][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.528489][ T5879] usb 6-1: config 0 descriptor?? [ 736.608748][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.637289][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.703469][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.756773][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.782272][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.814459][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.060270][T10798] block device autoloading is deprecated and will be removed. [ 737.500657][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.604115][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.627320][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.650137][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.717444][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.727392][ T5879] usb 6-1: Firmware: major: 171, minor: 20, hardware type: UNKNOWN (107) [ 737.745480][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.766307][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.777887][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.806295][ T5879] usb 6-1: failed to fetch extended address, random address set [ 737.814701][ T5879] usb 6-1: atusb_probe: initialization failed, error = -524 [ 737.843231][ T5879] atusb: probe of 6-1:0.0 failed with error -524 [ 737.843713][T10666] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.880125][T10666] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.889252][T10666] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.919147][ T5879] usb 6-1: USB disconnect, device number 14 [ 737.926890][T10666] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.141461][ T6972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.173013][ T6972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.324234][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.377631][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.735850][T10812] loop6: detected capacity change from 0 to 764 [ 739.784218][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 739.828208][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.973'. [ 739.879193][T10821] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.888711][T10821] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.897449][T10821] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.906127][T10821] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.947029][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 739.959062][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.973'. [ 739.997527][ T5854] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 740.214933][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.077457][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.088654][ T5854] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 741.097781][ T5854] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.105792][ T5854] usb 6-1: Manufacturer: syz [ 741.113505][ T5854] usb 6-1: config 0 descriptor?? [ 742.489382][T10835] loop4: detected capacity change from 0 to 32768 [ 743.862684][T10834] v: renamed from dummy0 (while UP) [ 744.438060][T10835] read_mapping_page failed! [ 744.453568][T10835] jfs_mount: Failed to read AGGREGATE_I [ 744.462550][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 744.528280][T10835] Mount JFS Failure: -5 [ 744.532614][T10835] jfs_mount failed w/return code = -5 [ 744.562718][ T5854] usbhid: probe of 6-1:0.0 failed with error -71 [ 744.608405][ T5854] usb 6-1: USB disconnect, device number 15 [ 746.357313][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 746.541284][T10861] loop6: detected capacity change from 0 to 524287999 [ 746.688419][ T5879] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 746.709188][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.727536][ T5879] usb 4-1: Product: syz [ 746.739677][ T5879] usb 4-1: Manufacturer: syz [ 746.747686][ T5879] usb 4-1: SerialNumber: syz [ 746.769029][ T5879] usb 4-1: config 0 descriptor?? [ 746.802588][ T5879] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 747.257693][ T5879] (null): failure reading functionality [ 747.322498][ T5879] i2c i2c-1: failure reading functionality [ 747.478332][ T5879] i2c i2c-1: connected i2c-tiny-usb device [ 747.547675][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.554215][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.047343][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 749.249536][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 749.263552][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 749.285972][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.308552][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 749.329946][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.340271][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.355724][ T27] usb 4-1: USB disconnect, device number 14 [ 749.357571][ T9] usb 5-1: Product: syz [ 749.377872][ T9] usb 5-1: Manufacturer: syz [ 749.382541][ T9] usb 5-1: SerialNumber: syz [ 749.394297][T10878] loop5: detected capacity change from 0 to 32768 [ 749.491832][T10878] (syz.5.992,10878,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.496188][T10878] (syz.5.992,10878,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.711482][T10878] JBD2: Ignoring recovery information on journal [ 749.869341][ T9] usb 5-1: USB disconnect, device number 20 [ 749.892983][T10878] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 750.186078][ T6873] ocfs2: Unmounting device (7,5) on (node local) [ 750.274519][T10888] loop6: detected capacity change from 0 to 40427 [ 750.301259][T10888] F2FS-fs (loop6): heap/no_heap options were deprecated [ 750.310601][T10888] F2FS-fs (loop6): build fault injection attr: rate: 19, type: 0x7ffff [ 752.476440][T10915] loop5: detected capacity change from 0 to 32768 [ 752.585539][T10915] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 752.766457][T10915] XFS (loop5): Ending clean mount [ 752.911189][T10915] XFS (loop5): Quotacheck needed: Please wait. [ 753.095270][T10936] loop6: detected capacity change from 0 to 32768 [ 753.153380][T10936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1002 (10936) [ 753.272268][T10936] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 753.288480][T10936] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 753.307471][T10915] XFS (loop5): Quotacheck: Done. [ 753.311112][T10936] BTRFS info (device loop6): max_inline at 6 [ 753.357447][T10936] BTRFS info (device loop6): enabling disk space caching [ 753.392761][T10936] BTRFS info (device loop6): turning off barriers [ 753.417701][T10936] BTRFS info (device loop6): disabling tree log [ 753.424033][T10936] BTRFS info (device loop6): force clearing of disk cache [ 753.472383][T10936] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 753.493794][T10936] BTRFS info (device loop6): force lzo compression, level 0 [ 753.505721][T10936] BTRFS info (device loop6): turning on barriers [ 753.521687][ T6873] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 753.535443][T10936] BTRFS info (device loop6): max_inline at 1 [ 753.542821][T10936] BTRFS info (device loop6): disk space caching is enabled [ 754.298767][T10936] BTRFS info (device loop6): enabling ssd optimizations [ 754.548265][T10936] BTRFS info (device loop6): rebuilding free space tree [ 755.129881][T10936] BTRFS info (device loop6): disabling free space tree [ 755.176848][T10936] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 755.267355][T10936] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 755.637684][T10666] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 755.713389][T10996] siw: device registration error -23 [ 757.944237][T11002] loop5: detected capacity change from 0 to 32768 [ 757.981680][T11002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1011 (11002) [ 758.097458][T11002] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 758.107808][T11002] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 758.116470][T11002] BTRFS info (device loop5): using free space tree [ 758.384566][T11002] BTRFS info (device loop5): enabling ssd optimizations [ 758.391699][T11002] BTRFS info (device loop5): auto enabling async discard [ 758.725454][T11002] BTRFS info (device loop5): checking UUID tree [ 759.135188][T11002] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 762.176285][T11055] siw: device registration error -23 [ 762.191014][T11055] loop6: detected capacity change from 0 to 512 [ 763.421659][T11055] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 763.430894][T11055] EXT4-fs (loop6): orphan cleanup on readonly fs [ 763.474751][T11055] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #16: comm syz.6.1017: corrupted inode contents [ 763.487555][T11055] EXT4-fs (loop6): Remounting filesystem read-only [ 763.494388][T11055] EXT4-fs (loop6): 1 truncate cleaned up [ 763.503060][ T3453] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 763.549514][ T3453] Quota error (device loop6): write_blk: dquota write failed [ 763.556955][ T3453] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 763.661486][ T3453] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 763.688252][ T3453] Quota error (device loop6): write_blk: dquota write failed [ 763.726448][ T3453] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 763.765543][ T3453] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 763.837442][ T3453] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 763.914416][ T3453] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 763.959384][T11055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 764.147881][T10666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.725091][T11073] ax25_connect(): syz.4.1019 uses autobind, please contact jreuter@yaina.de [ 764.761373][T11074] ax25_connect(): syz.4.1019 uses autobind, please contact jreuter@yaina.de [ 764.834953][T11076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.974477][T11076] batadv0: entered promiscuous mode [ 765.002042][T11076] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.057928][T11076] bond1: (slave macvlan2): making interface the new active one [ 765.081909][T11076] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 765.384041][T11094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1022'. [ 765.394862][T11094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1022'. [ 770.507791][T11112] loop6: detected capacity change from 0 to 32768 [ 770.584475][T11112] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.780967][T11114] loop3: detected capacity change from 0 to 65536 [ 770.852214][T11114] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 770.891664][T11112] XFS (loop6): Ending clean mount [ 770.957617][T11112] XFS (loop6): Quotacheck needed: Please wait. [ 771.027547][T11114] XFS (loop3): Ending clean mount [ 771.048958][T11114] XFS (loop3): Quotacheck needed: Please wait. [ 771.141312][T11112] XFS (loop6): Quotacheck: Done. [ 771.315080][T11114] XFS (loop3): Quotacheck: Done. [ 771.653871][T10666] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.686437][ T5770] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 771.789262][T11121] loop5: detected capacity change from 0 to 65536 [ 771.967686][T11121] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 772.262945][T11121] XFS (loop5): Ending clean mount [ 772.318821][T11161] loop4: detected capacity change from 0 to 16 [ 772.379096][T11161] erofs: (device loop4): mounted with root inode @ nid 36. [ 772.399995][T11161] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 772.402199][ T6873] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 772.437123][T11161] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -20 in[63, 4033] out[1851] [ 772.505483][T11161] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 772.536717][T11161] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 772.566628][T11161] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -20 in[63, 4033] out[1851] [ 772.594885][T11161] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 774.347295][ T5879] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 774.619404][ T5879] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 774.637310][ T5879] usb 5-1: config 0 has no interface number 0 [ 774.749354][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 774.795510][ T5879] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 774.847481][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 774.898971][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 774.961313][ T5879] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 775.052941][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.421819][ T5879] usb 5-1: config 0 descriptor?? [ 775.434210][T11170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 775.457636][T11170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 775.508658][ T5879] ldusb 5-1:0.55: Interrupt in endpoint not found [ 775.798587][ T5879] usb 5-1: USB disconnect, device number 21 [ 776.705775][T11184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 776.727104][T11184] overlayfs: failed to set xattr on upper [ 776.751748][T11190] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 776.763979][T11184] overlayfs: ...falling back to redirect_dir=nofollow. [ 776.771389][T11184] overlayfs: ...falling back to index=off. [ 776.784864][T11190] overlayfs: failed to set xattr on upper [ 776.791272][T11184] overlayfs: ...falling back to uuid=null. [ 776.797671][T11190] overlayfs: ...falling back to redirect_dir=nofollow. [ 776.804987][T11184] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 776.829390][T11190] overlayfs: ...falling back to index=off. [ 776.835433][T11190] overlayfs: ...falling back to uuid=null. [ 776.849124][T11190] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 776.873775][T11190] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 777.044079][ T28] audit: type=1326 audit(1768308654.913:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.066888][ T28] audit: type=1326 audit(1768308654.943:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.091027][ T28] audit: type=1326 audit(1768308654.943:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.182110][ T28] audit: type=1326 audit(1768308654.943:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.523041][ T28] audit: type=1326 audit(1768308654.943:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.663269][ T28] audit: type=1326 audit(1768308654.943:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.707341][ T28] audit: type=1326 audit(1768308654.943:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.838392][ T28] audit: type=1326 audit(1768308654.943:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 777.929890][ T28] audit: type=1326 audit(1768308654.943:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f82fd98f749 code=0x7ffc0000 [ 779.595359][ T787] libceph: connect (1)[c::]:6789 error -101 [ 779.606186][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 779.851517][T11218] loop6: detected capacity change from 0 to 512 [ 779.875230][ T787] libceph: connect (1)[c::]:6789 error -101 [ 779.882104][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 781.324682][ T28] audit: type=1326 audit(1768308659.043:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7ffc0000 [ 781.865458][T11218] EXT4-fs (loop6): orphan cleanup on readonly fs [ 781.887447][ T5083] Bluetooth: hci2: command tx timeout [ 781.908220][T11218] EXT4-fs error (device loop6): ext4_orphan_get:1424: comm syz.6.1052: bad orphan inode 13 [ 781.932391][T11207] ceph: No mds server is up or the cluster is laggy [ 782.079238][T11218] ext4_test_bit(bit=12, block=18) = 1 [ 782.141145][T11218] is_bad_inode(inode)=0 [ 782.145378][T11218] NEXT_ORPHAN(inode)=2130706432 [ 782.188370][T11218] max_ino=32 [ 782.192229][T11218] i_nlink=1 [ 782.197649][T11218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 782.335896][T11218] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 782.415919][T11240] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 782.630827][T11218] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1052: bg 0: block 248: padding at end of block bitmap is not set [ 782.706164][T11218] __quota_error: 87 callbacks suppressed [ 782.706183][T11218] Quota error (device loop6): write_blk: dquota write failed [ 782.755727][T11243] loop5: detected capacity change from 0 to 40427 [ 782.768697][T11218] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 782.780914][T11243] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x7ffff [ 782.790087][T11218] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.1052: Failed to acquire dquot type 1 [ 782.848618][T11218] EXT4-fs warning (device loop6): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 783.233941][T10666] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 783.604365][T10666] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 784.660967][T11239] loop3: detected capacity change from 0 to 32768 [ 784.678617][T11239] gfs2: statfs_percent mount option requires a numeric argument between 0 and 100 [ 785.173417][ T3475] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.197237][ T3475] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.435379][ T3475] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.484986][T11261] loop4: detected capacity change from 0 to 32768 [ 785.486607][ T3475] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.535908][T11261] (syz.4.1065,11261,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 785.795215][T11261] (syz.4.1065,11261,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 786.432495][ T3475] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.461728][T11261] JBD2: Ignoring recovery information on journal [ 786.538105][ T3475] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.647635][T11278] random: crng reseeded on system resumption [ 787.948694][T11261] JBD2: journal reset failed [ 787.953465][T11261] (syz.4.1065,11261,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 787.975966][T11261] (syz.4.1065,11261,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 788.187469][ T787] IPVS: starting estimator thread 0... [ 788.226543][T11282] program syz.5.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.257959][ T3475] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.306912][ T3475] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.337618][T11285] IPVS: using max 21 ests per chain, 50400 per kthread [ 788.965715][T11297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 788.977074][T11297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.071451][T11298] lo speed is unknown, defaulting to 1000 [ 789.763604][T11297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.776287][T11300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.032500][T11300] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 790.062453][T11300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.345656][T11293] lo speed is unknown, defaulting to 1000 [ 792.197316][ T5083] Bluetooth: hci2: command tx timeout [ 792.707797][T11293] chnl_net:caif_netlink_parms(): no params data found [ 793.209275][T11333] loop4: detected capacity change from 0 to 256 [ 793.225017][T11333] exfat: Unknown parameter 'zero_size_dir' [ 793.497282][ T787] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 793.648552][ T3475] hsr_slave_0: left promiscuous mode [ 793.672399][ T3475] hsr_slave_1: left promiscuous mode [ 793.686773][T11351] loop3: detected capacity change from 0 to 256 [ 793.694271][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.709509][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.723068][T11351] FAT-fs (loop3): Unrecognized mount option "uid=u&-gU&Op((Yʜ"+" or missing value [ 793.726934][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 793.741628][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.760245][ T787] usb 6-1: config 0 has no interfaces? [ 793.765793][ T787] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 793.777332][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.789538][ T3475] bridge_slave_1: left allmulticast mode [ 793.841479][ T3475] bridge_slave_1: left promiscuous mode [ 793.869632][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.906384][ T3475] bridge_slave_0: left allmulticast mode [ 793.929976][ T3475] bridge_slave_0: left promiscuous mode [ 793.953172][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.976985][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.988609][ T787] usb 6-1: config 0 descriptor?? [ 794.267398][ T5083] Bluetooth: hci2: command tx timeout [ 794.627397][ T3475] batadv0: left promiscuous mode [ 794.658078][ T3475] veth1_macvtap: left promiscuous mode [ 794.686084][ T3475] veth0_macvtap: left promiscuous mode [ 794.706399][ T3475] veth1_vlan: left promiscuous mode [ 794.716839][T11360] binder: 11334:11360 unknown command 1074553619 [ 794.737248][T11360] binder: 11334:11360 ioctl c0306201 200000000540 returned -22 [ 794.751571][ T3475] veth0_vlan: left promiscuous mode [ 795.166036][T11362] loop3: detected capacity change from 0 to 32768 [ 795.210307][T11362] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 795.243075][T11362] XFS (loop3): Ending clean mount [ 795.465035][ T3475] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 796.288669][ T788] usb 6-1: USB disconnect, device number 16 [ 796.341856][ T5083] Bluetooth: hci2: command tx timeout [ 796.353043][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 796.753115][ T3475] bond1 (unregistering): Released all slaves [ 797.279018][T11376] loop5: detected capacity change from 0 to 32768 [ 797.317417][T11376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1088 (11376) [ 797.364656][T11376] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.385350][T11376] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 797.406627][T11376] BTRFS info (device loop5): using free space tree [ 797.637658][T11376] BTRFS info (device loop5): enabling ssd optimizations [ 797.655625][T11376] BTRFS info (device loop5): auto enabling async discard [ 797.973941][ T28] audit: type=1800 audit(1768308675.833:650): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1088" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 798.179930][ T6873] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 798.422099][ T5083] Bluetooth: hci2: command tx timeout [ 800.141303][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 800.324549][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 800.585917][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.757048][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.103401][T11414] loop5: detected capacity change from 0 to 256 [ 801.163322][T11414] FAT-fs (loop5): Unrecognized mount option "uid=u&-gU&Op((Yʜ"+" or missing value [ 802.392490][T11421] __vm_enough_memory: pid: 11421, comm: syz.5.1094, not enough memory for the allocation [ 803.403310][ T3475] bond0 (unregistering): Released all slaves [ 803.596567][T11293] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.610697][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.645729][T11293] bridge_slave_0: entered allmulticast mode [ 803.667422][T11293] bridge_slave_0: entered promiscuous mode [ 803.740476][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.773600][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.821912][T11293] bridge_slave_1: entered allmulticast mode [ 803.854798][T11293] bridge_slave_1: entered promiscuous mode [ 803.896634][T11428] sd 0:0:1:0: device reset [ 804.338602][T11293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.866476][T11437] syz.4.1100 uses obsolete (PF_INET,SOCK_PACKET) [ 804.920343][T11293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.021067][T11431] delete_channel: no stack [ 805.199609][T11293] team0: Port device team_slave_0 added [ 805.228805][T11437] syzkaller1: entered promiscuous mode [ 805.234342][T11437] syzkaller1: entered allmulticast mode [ 805.286637][T11293] team0: Port device team_slave_1 added [ 806.485287][T11293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.517394][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.611852][T11293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.655153][T11293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.697254][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.769430][T11293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.940483][T11293] hsr_slave_0: entered promiscuous mode [ 806.997904][T11293] hsr_slave_1: entered promiscuous mode [ 807.057465][T11293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.065090][T11293] Cannot create hsr debugfs directory [ 807.470763][T11471] loop5: detected capacity change from 0 to 32768 [ 808.843121][T11471] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 808.851894][T11471] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 808.987833][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.994199][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.023183][T11293] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 809.078681][T11293] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 809.151304][T11293] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 809.207526][T11471] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 809.233038][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 809.304338][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 809.807053][T11293] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 810.030733][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 726ms [ 810.055974][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 810.087407][T11471] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 810.138978][T11471] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 811.268512][T11293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.381239][T11293] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.479853][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.487045][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.543878][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.551098][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.718135][T11293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.629547][T11293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.164764][T11555] loop4: detected capacity change from 0 to 32768 [ 816.204633][T11555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1122 (11555) [ 816.249527][T11555] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 816.259744][T11555] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 816.268495][T11555] BTRFS info (device loop4): using free space tree [ 816.417456][T11555] BTRFS info (device loop4): enabling ssd optimizations [ 816.424526][T11555] BTRFS info (device loop4): auto enabling async discard [ 816.465864][T11555] BTRFS info (device loop4): checking UUID tree [ 816.480013][T11555] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 817.519167][T11555] hub 1-0:1.0: USB hub found [ 817.526166][T11555] hub 1-0:1.0: 1 port detected [ 817.730506][ T6513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (6513) [ 818.025056][T11293] veth0_vlan: entered promiscuous mode [ 818.095125][T11293] veth1_vlan: entered promiscuous mode [ 818.221319][T11293] veth0_macvtap: entered promiscuous mode [ 818.261281][T11293] veth1_macvtap: entered promiscuous mode [ 818.350205][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.393297][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.425044][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.466921][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.522849][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.554315][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.605280][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.642433][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.683656][T11293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.753694][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.784953][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.826738][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.865975][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.891618][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.944180][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.969298][T11293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.999820][T11293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.079480][T11293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.116057][T11585] loop5: detected capacity change from 0 to 40427 [ 819.156409][T11293] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.186085][T11585] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 819.196215][T11293] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.214904][T11585] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 819.234999][T11293] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.249819][T11585] F2FS-fs (loop5): invalid crc value [ 819.255734][T11293] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.307660][T11585] F2FS-fs (loop5): Found nat_bits in checkpoint [ 819.533800][T11585] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 819.576763][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.577373][T11585] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 819.634278][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.753308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.781811][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.498705][T11628] loop7: detected capacity change from 0 to 32768 [ 821.562983][T11628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1070 (11628) [ 821.649340][T11628] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 821.693942][T11628] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 821.743613][T11628] BTRFS info (device loop7): turning on sync discard [ 821.777917][T11628] BTRFS info (device loop7): turning off discard [ 821.814904][T11628] BTRFS info (device loop7): force clearing of disk cache [ 821.975382][T11628] BTRFS info (device loop7): enabling ssd optimizations [ 822.067571][T11628] BTRFS info (device loop7): using spread ssd allocation scheme [ 822.834046][T11628] BTRFS info (device loop7): turning off barriers [ 822.907347][T11628] BTRFS info (device loop7): disabling free space tree [ 822.922047][T11628] BTRFS info (device loop7): not using ssd optimizations [ 823.056822][T11628] BTRFS info (device loop7): not using spread ssd allocation scheme [ 824.100524][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 824.307402][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 824.316740][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 824.447990][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 824.557945][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 824.630774][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 824.720929][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 824.846960][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 824.857815][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 824.869959][T11628] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 825.244011][T11628] BTRFS error (device loop7): open_ctree failed: -12 [ 825.470932][ T6513] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (6513) [ 828.033949][T11708] loop7: detected capacity change from 0 to 512 [ 828.206015][T11708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 830.112637][T11708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.167325][T11708] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 831.438163][ T28] audit: type=1326 audit(1768308709.303:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 831.570195][ T28] audit: type=1326 audit(1768308709.303:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 831.691093][T11293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.725719][ T28] audit: type=1326 audit(1768308709.353:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 831.817226][ T28] audit: type=1326 audit(1768308709.353:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 831.927697][ T28] audit: type=1326 audit(1768308709.353:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 832.047267][ T28] audit: type=1326 audit(1768308709.353:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 832.161776][ T28] audit: type=1326 audit(1768308709.353:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ef8f749 code=0x7ffc0000 [ 832.172203][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1147'. [ 833.711505][T11767] loop7: detected capacity change from 0 to 32768 [ 833.742020][T11767] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 834.867284][T11772] hub 1-0:1.0: USB hub found [ 834.987270][T11772] hub 1-0:1.0: 1 port detected [ 835.222029][T11767] loop7: detected capacity change from 0 to 512 [ 835.228781][T11767] EXT4-fs: Ignoring removed oldalloc option [ 835.245197][ T27] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 835.297754][T11767] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 835.655600][ T27] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.691243][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.730708][ T27] usb 6-1: Product: syz [ 835.750322][ T27] usb 6-1: Manufacturer: syz [ 835.784010][ T27] usb 6-1: SerialNumber: syz [ 835.820306][ T27] usb 6-1: config 0 descriptor?? [ 836.055388][ T27] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 837.062952][ T27] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 837.088593][ T27] usb 6-1: USB disconnect, device number 17 [ 837.512921][T11796] loop7: detected capacity change from 0 to 4096 [ 838.408380][ T28] audit: type=1800 audit(1768308716.283:658): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1155" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 840.963636][T11824] loop7: detected capacity change from 0 to 256 [ 841.252815][T11824] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 842.820762][T11841] loop7: detected capacity change from 0 to 4096 [ 844.020399][T11841] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 847.378848][T11877] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 847.378992][T11877] CIFS: Unable to determine destination address [ 847.979350][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.377391][ T28] audit: type=1326 audit(1768308726.243:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 849.847299][ T28] audit: type=1326 audit(1768308727.703:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 849.968353][ T28] audit: type=1326 audit(1768308727.703:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 849.990713][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.004629][ T28] audit: type=1326 audit(1768308727.703:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.027240][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.038469][ T28] audit: type=1326 audit(1768308727.703:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.087360][ T28] audit: type=1326 audit(1768308727.703:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.109714][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.148520][ T28] audit: type=1326 audit(1768308727.703:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.217381][ T28] audit: type=1326 audit(1768308727.703:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.239737][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.297235][ T28] audit: type=1326 audit(1768308727.703:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.387442][ T28] audit: type=1326 audit(1768308727.703:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8f749 code=0x7fc00000 [ 850.409891][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.132805][T11905] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1180'. [ 854.835245][T11939] loop4: detected capacity change from 0 to 1024 [ 854.999510][T11939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 855.071618][T11945] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 855.080591][T11945] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 855.092321][T11945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.913540][T11939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.026525][T11939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1190: bg 0: block 88: padding at end of block bitmap is not set [ 857.285942][ T7026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.847439][T12036] pim6reg1: entered promiscuous mode [ 860.852818][T12036] pim6reg1: entered allmulticast mode [ 862.065489][T12082] syz.3.1236[12082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 862.065624][T12082] syz.3.1236[12082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 862.318124][T12090] pim6reg1: entered promiscuous mode [ 862.386415][T12090] pim6reg1: entered allmulticast mode [ 863.529975][T12112] [ 863.533011][T12112] ============================= [ 863.538459][T12112] WARNING: suspicious RCU usage [ 863.543439][T12112] syzkaller #0 Not tainted [ 863.549100][T12112] ----------------------------- [ 863.553984][T12112] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 863.562916][T12112] [ 863.562916][T12112] other info that might help us debug this: [ 863.562916][T12112] [ 863.573258][T12112] [ 863.573258][T12112] rcu_scheduler_active = 2, debug_locks = 1 [ 863.581403][T12112] 1 lock held by syz.5.1245/12112: [ 863.586737][T12112] #0: ffffffff8cd30180 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 863.597317][T12112] [ 863.597317][T12112] stack backtrace: [ 863.603252][T12112] CPU: 1 PID: 12112 Comm: syz.5.1245 Not tainted syzkaller #0 [ 863.610822][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.620952][T12112] Call Trace: [ 863.624257][T12112] [ 863.627209][T12112] dump_stack_lvl+0x16c/0x230 [ 863.631906][T12112] ? show_regs_print_info+0x20/0x20 [ 863.637130][T12112] ? load_image+0x3b0/0x3b0 [ 863.641683][T12112] ? __lock_acquire+0x1260/0x7c80 [ 863.646711][T12112] lockdep_rcu_suspicious+0x1e1/0x300 [ 863.652096][T12112] get_callchain_entry+0x2a9/0x3c0 [ 863.657224][T12112] get_perf_callchain+0xbc/0x4d0 [ 863.662261][T12112] ? verify_lock_unused+0x140/0x140 [ 863.667503][T12112] ? put_callchain_entry+0xb0/0xb0 [ 863.672612][T12112] ? preempt_schedule_common+0x82/0xc0 [ 863.678072][T12112] ? preempt_schedule+0xab/0xc0 [ 863.682927][T12112] ? schedule_preempt_disabled+0x20/0x20 [ 863.688558][T12112] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 863.694465][T12112] __bpf_get_stack+0x2d7/0x510 [ 863.699316][T12112] ? stack_map_get_build_id_offset+0x720/0x720 [ 863.705580][T12112] ? __cant_sleep+0x210/0x210 [ 863.710271][T12112] ? bpf_prog_d43750871481577d+0x45/0x49 [ 863.715920][T12112] bpf_get_stack_raw_tp+0x1a9/0x210 [ 863.721128][T12112] bpf_prog_d43750871481577d+0x45/0x49 [ 863.726594][T12112] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 863.731978][T12112] bpf_prog_test_run_syscall+0x311/0x490 [ 863.737625][T12112] ? sock_gen_cookie+0x60/0x60 [ 863.742422][T12112] ? sock_gen_cookie+0x60/0x60 [ 863.747201][T12112] bpf_prog_test_run+0x321/0x390 [ 863.752157][T12112] __sys_bpf+0x440/0x800 [ 863.756403][T12112] ? bpf_link_show_fdinfo+0x350/0x350 [ 863.761784][T12112] ? lock_chain_count+0x20/0x20 [ 863.766645][T12112] __x64_sys_bpf+0x7c/0x90 [ 863.771061][T12112] do_syscall_64+0x55/0xb0 [ 863.775476][T12112] ? clear_bhb_loop+0x40/0x90 [ 863.780153][T12112] ? clear_bhb_loop+0x40/0x90 [ 863.784842][T12112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.790757][T12112] RIP: 0033:0x7f7f6ef8f749 [ 863.795168][T12112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.814792][T12112] RSP: 002b:00007f7f6fe8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.823227][T12112] RAX: ffffffffffffffda RBX: 00007f7f6f1e5fa0 RCX: 00007f7f6ef8f749 [ 863.831214][T12112] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 863.839224][T12112] RBP: 00007f7f6f013f91 R08: 0000000000000000 R09: 0000000000000000 [ 863.847205][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.855191][T12112] R13: 00007f7f6f1e6038 R14: 00007f7f6f1e5fa0 R15: 00007ffddde09068 [ 863.863170][T12112] [ 870.423472][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.429882][ T1286] ieee802154 phy1 wpan1: encryption failed: -22