last executing test programs: 3m6.027199825s ago: executing program 4 (id=490): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) dup2(r3, 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$incfs(r8, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x22004804}, 0x4014) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") socket$packet(0x11, 0x0, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 3m4.689214474s ago: executing program 4 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000340)=@keyring) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) rseq(0x0, 0x0, 0x1, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x46f, &(0x7f0000000480)="$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") 3m3.975292614s ago: executing program 4 (id=494): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private0, @in6=@remote}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000a80)=0xe8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@textreal={0x8, 0x0}], 0xaaaa8ce, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x8, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m2.009071712s ago: executing program 4 (id=502): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) dup2(r3, 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$incfs(r8, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x22004804}, 0x4014) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") socket$packet(0x11, 0x0, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 3m0.886297888s ago: executing program 4 (id=507): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0xe, 0x1, 0x4, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x29, &(0x7f0000000500)=""/41, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001440)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0xa3c, 0x0, "1395ab0c9bfb28ec8363181ee2997c5f103c3fa273d4920eb247380efb35d1e1733c730192fb031b4784f677e659afbcc10d98cf3bfa9a93c14a74131830517cb54eddbdf7d4eca87323059c2027e054"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m55.373124216s ago: executing program 4 (id=525): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x201, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0x0, 0x20004101, 0x3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m40.074405512s ago: executing program 32 (id=525): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x201, &(0x7f0000000d00)="$eJzsmbGLE0EUxr+Z3eydhyg2CjYWHniit9ndqFxzxQmWgnCKWgazHqd7F9lb4e5ASEhjY2kh2NpYWljYaOFfYKuFCoKFKe2UkZmd3Z0km5hIMMW9H2T229037828DV9gA4IgDixfv/z8/OTyyvXzAA5jEXP6+ncrPYqjvfGfnj0893T1yvNXH1+83z7y6E1/PibniPHrOwDerVlIwGxdsWf2YpE207gBjrNa3wSDm8pfQiFlCyEYbuuYe4ZuHtIiCt07zahxdzMKPTn4cgjkUDPry0V12wwNAPNqdUIw4/7O3v79ehSFcb+oiKzOwK1Jxaj+qfWtcawi654QHMCtx522PNe9gQee988Hh691DQzrWq9gDq7rFi0x9n/SLvJb4+x/tuKlEseW/1dR8LQdYwWz6XwtJhLx2xONWT8UU/wWQkw+qzKV6qz/inwg+ZXj3cwDzZhvM+/YvwtlXAAGbn1YiKKr5bP43zLLjjkljcpF4U/S2c8Y/mTDzv2jmmw9qO7s7S9vbtU3wo1wOwhql7wLnncxqCojSscR/jev/GnByF8ZEuswB7v1JIn9XSCJ/fw8SEfDcddfN3+oOVz5H8fS6TQH079ZnSE1mP5wdZRqySqPbA3dE0EQBEEQBEEQBEEQBEEQRDmnwJD+EyaYfiFaRnBNvaH8EwAA///zPWcb") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0x0, 0x20004101, 0x3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m6.901664293s ago: executing program 1 (id=632): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, 0x0, 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0xe, 0x1, 0x4, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x29, &(0x7f0000000500)=""/41, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001440)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0xa3c, 0x0, "1395ab0c9bfb28ec8363181ee2997c5f103c3fa273d4920eb247380efb35d1e1733c730192fb031b4784f677e659afbcc10d98cf3bfa9a93c14a74131830517cb54eddbdf7d4eca87323059c2027e054"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m5.63999371s ago: executing program 1 (id=635): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff) 2m3.437835122s ago: executing program 1 (id=641): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) dup2(r3, 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$incfs(r8, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x22004804}, 0x4014) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 2m1.101810635s ago: executing program 1 (id=644): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002024702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) 1m59.143019732s ago: executing program 1 (id=648): socket$igmp(0x2, 0x3, 0x2) unshare(0x20040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x3, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0x2, 0x0, [{0x0, 0x79, &(0x7f0000000680)=""/121}, {0x2000, 0x66, &(0x7f0000000600)=""/102}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m56.893012874s ago: executing program 1 (id=657): syz_io_uring_setup(0x3f0c, &(0x7f00000000c0)={0x0, 0x100000, 0x1}, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m41.564416421s ago: executing program 33 (id=657): syz_io_uring_setup(0x3f0c, &(0x7f00000000c0)={0x0, 0x100000, 0x1}, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 20.631311698s ago: executing program 6 (id=875): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) dup2(r3, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x22004804}, 0x4014) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") socket$packet(0x11, 0x0, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 19.03261304s ago: executing program 6 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@gettaction={0xc8, 0x32, 0x301, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xc8}}, 0x40044) 18.237895882s ago: executing program 6 (id=884): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r1, &(0x7f0000000340)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) 18.113026583s ago: executing program 6 (id=886): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@fat=@debug}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@numtail}, {@shortname_winnt}, {@fat=@discard}, {@uni_xlate}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0xe}}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x10118c0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 17.781753518s ago: executing program 6 (id=889): syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) 17.247530386s ago: executing program 6 (id=891): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) flock(0xffffffffffffffff, 0x8) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) 16.23084717s ago: executing program 34 (id=891): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) flock(0xffffffffffffffff, 0x8) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) 12.092053678s ago: executing program 0 (id=907): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000001840)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000002400000000000000290000003200"], 0x40}}], 0x1, 0x0) 11.809712433s ago: executing program 0 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x90, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16}}], 0x1, 0x2000c800) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000480)={@mcast2, 0x5c}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c00ed8f973780c92b710b99134a5d254cb6e2111fcb445812a51c112c686976a40e96bfac097346760e451a0d99a9063b4236772ef15df342a4cd2be32235778ceda966ad98ebfa34f47c4988241b238eaf640fcc61f6909e86fca6c6ebf0c986f15396865962acd07c96a9d0d770d6e07ddcd22f3f6d64872c091ee3cead297429723ed522992c93374226d24b8d4d62755bfc1ab5203375658fd168d464496bec1fb23cff963c9c836ba959ac0b9d7571055f8f29b28f164735e29cf677c627c4d6952cf97d8e"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) 9.92156943s ago: executing program 0 (id=918): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x34002, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0x36, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000780)="7abe4edb49d1b82188b01588d041cd204a9ac8f45c11d4c476811c72cfedb458e8216da5cfb0444be9bf2c8ab6caa28599c2e90244fa4370b0cb8b84bb15ddfb407ba800d8d6af1534355c9394a96089976e1a7a30a92fab2f39d404e10416a35ac8738e6e6030969a7e8b4d6999a612e9cc42a10857f3113902d68ffdf3b94046e9be0a993dfaacc198f5d55a49c62d317a64e0930c0dbda2adff25aa875cf219d88347d121e05e73c78515e90c", 0xae, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '*\xd4\xd9,\x110\x86\xcc$\xb7\x84;\'J\x8f\x15~:\x13\xf6nuy\x8f\xc1\xe9\x7ftz.L\xe9\xed\x93\xc3$\xbe\x9a\xc7\x87\x0f\x82\xcdTl \xba7\xc2\x9b\xd5\xfb+6\xc5Tg\x9e{\xb9\x9c\xc1\x10\xafP[WtT\xbe', 0x20, 0x7f, 0x20, [0x33, 0x34, 0x36]}, 0x76, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = accept4$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x80800) bind$bt_l2cap(r4, &(0x7f0000000480)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESHEX=r8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) recvmsg$unix(r7, 0x0, 0x1124) sendto$unix(r6, 0x0, 0x0, 0x48005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000e200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.151632839s ago: executing program 2 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) 6.905790282s ago: executing program 2 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) 6.606993497s ago: executing program 2 (id=924): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000180), 0x83, 0x5e8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xac8, &(0x7f0000000c00)={0x0, 0xfb93, 0x8, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x80000d89, 0x47d5, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x374c, 0x97d9, 0x9, 0x0, 0x0) 4.626052644s ago: executing program 5 (id=926): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80341, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv2(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x2) 4.625478024s ago: executing program 3 (id=927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x90, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16}}], 0x1, 0x2000c800) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000480)={@mcast2, 0x5c}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c00ed8f973780c92b710b99134a5d254cb6e2111fcb445812a51c112c686976a40e96bfac097346760e451a0d99a9063b4236772ef15df342a4cd2be32235778ceda966ad98ebfa34f47c4988241b238eaf640fcc61f6909e86fca6c6ebf0c986f15396865962acd07c96a9d0d770d6e07ddcd22f3f6d64872c091ee3cead297429723ed522992c93374226d24b8d4d62755bfc1ab5203375658fd168d464496bec1fb23cff963c9c836ba959ac0b9d7571055f8f29b28f164735e29cf677c627c4d6952cf97d8e"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) 4.479916867s ago: executing program 2 (id=928): syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setuid(0xee01) 4.047346393s ago: executing program 3 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = semget$private(0x0, 0x4000000009, 0x208) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) 3.607374589s ago: executing program 3 (id=930): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, 0x0, 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0xe, 0x1, 0x4, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x29, &(0x7f0000000500)=""/41, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001440)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0xa3c, 0x0, "1395ab0c9bfb28ec8363181ee2997c5f103c3fa273d4920eb247380efb35d1e1733c730192fb031b4784f677e659afbcc10d98cf3bfa9a93c14a74131830517cb54eddbdf7d4eca87323059c2027e054"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.53726282s ago: executing program 5 (id=931): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x4, 0x29}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 3.121508836s ago: executing program 5 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) 3.034087517s ago: executing program 0 (id=933): setuid(0xee00) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x45, &(0x7f0000000080)=0x101, 0x4) 2.936770569s ago: executing program 0 (id=934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000177bea6fedb30e906ef7870c000000e89000b067fb2294d3839124ab9f1313b9"], 0x0}, 0x0) 2.79362649s ago: executing program 5 (id=935): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00;']) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1ff, 0x5, 0x5, 0x1514, r5, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x8, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0xe, 0x1, 0x4, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x29, &(0x7f0000000500)=""/41, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) mmap(&(0x7f0000983000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r6, 0x5ab91000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001440)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0xa3c, 0x0, "1395ab0c9bfb28ec8363181ee2997c5f103c3fa273d4920eb247380efb35d1e1733c730192fb031b4784f677e659afbcc10d98cf3bfa9a93c14a74131830517cb54eddbdf7d4eca87323059c2027e054"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.631888993s ago: executing program 3 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x76}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) 2.612564013s ago: executing program 2 (id=937): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000200)={[{@noauto_da_alloc}, {@noblock_validity}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x44e}}]}, 0x1e, 0x528, &(0x7f0000000a80)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.570172668s ago: executing program 5 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x90, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16}}], 0x1, 0x2000c800) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000480)={@mcast2, 0x5c}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c00ed8f973780c92b710b99134a5d254cb6e2111fcb445812a51c112c686976a40e96bfac097346760e451a0d99a9063b4236772ef15df342a4cd2be32235778ceda966ad98ebfa34f47c4988241b238eaf640fcc61f6909e86fca6c6ebf0c986f15396865962acd07c96a9d0d770d6e07ddcd22f3f6d64872c091ee3cead297429723ed522992c93374226d24b8d4d62755bfc1ab5203375658fd168d464496bec1fb23cff963c9c836ba959ac0b9d7571055f8f29b28f164735e29cf677c627c4d6952cf97d8e"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) 429.270374ms ago: executing program 3 (id=939): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/ipc\x00') lseek(0xffffffffffffffff, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) close(r1) getdents(0xffffffffffffffff, 0x0, 0x48) setns(r0, 0x0) 332.329945ms ago: executing program 5 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7a2, &(0x7f0000000f80)="$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") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSS_ADDR(r1, 0xaea2, 0xd000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 128.573578ms ago: executing program 3 (id=941): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef000000000000000000000000060003000000000008000100000000002400"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 41.46442ms ago: executing program 2 (id=942): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x34002, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0x36, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000780)="7abe4edb49d1b82188b01588d041cd204a9ac8f45c11d4c476811c72cfedb458e8216da5cfb0444be9bf2c8ab6caa28599c2e90244fa4370b0cb8b84bb15ddfb407ba800d8d6af1534355c9394a96089976e1a7a30a92fab2f39d404e10416a35ac8738e6e6030969a7e8b4d6999a612e9cc42a10857f3113902d68ffdf3b94046e9be0a993dfaacc198f5d55a49c62d317a64e0930c0dbda2adff25aa875cf219d88347d121e05e73c78515e90c", 0xae, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '*\xd4\xd9,\x110\x86\xcc$\xb7\x84;\'J\x8f\x15~:\x13\xf6nuy\x8f\xc1\xe9\x7ftz.L\xe9\xed\x93\xc3$\xbe\x9a\xc7\x87\x0f\x82\xcdTl \xba7\xc2\x9b\xd5\xfb+6\xc5Tg\x9e{\xb9\x9c\xc1\x10\xafP[WtT\xbe', 0x20, 0x7f, 0x20, [0x33, 0x34, 0x36]}, 0x76, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = accept4$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x80800) bind$bt_l2cap(r4, &(0x7f0000000480)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESHEX=r8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) recvmsg$unix(r7, 0x0, 0x1124) sendto$unix(r6, 0x0, 0x0, 0x48005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000e200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x4, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) kernel console output (not intermixed with test programs): ice loop4): z_erofs_readahead: readahead error at page 248 @ nid 36 [ 259.582971][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1015807 of nid 36 [ 259.593086][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 247 @ nid 36 [ 259.602204][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1011711 of nid 36 [ 259.612720][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 246 @ nid 36 [ 259.621853][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1007615 of nid 36 [ 259.631981][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 245 @ nid 36 [ 259.633699][ T6198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 259.641160][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1003519 of nid 36 [ 259.673932][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 244 @ nid 36 [ 259.680308][ T6198] System zones: [ 259.683359][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 999423 of nid 36 [ 259.687778][ T6198] 1-12 [ 259.697024][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 243 @ nid 36 [ 259.709184][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 995327 of nid 36 [ 259.719489][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 242 @ nid 36 [ 259.720142][ T6198] [ 259.728785][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 991231 of nid 36 [ 259.741348][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 241 @ nid 36 [ 259.742251][ T6197] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 259.751586][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 987135 of nid 36 [ 259.777142][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 240 @ nid 36 [ 259.788250][ T6198] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.548: corrupted in-inode xattr [ 259.792721][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 983039 of nid 36 [ 259.812101][ T6198] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.548: couldn't read orphan inode 15 (err -117) [ 259.820499][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 239 @ nid 36 [ 259.833308][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 978943 of nid 36 [ 259.843683][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 238 @ nid 36 [ 259.855357][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 974847 of nid 36 [ 259.871865][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 237 @ nid 36 [ 259.871859][ T6198] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 259.933919][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 970751 of nid 36 [ 259.944086][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 236 @ nid 36 [ 259.953301][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 966655 of nid 36 [ 259.985940][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 235 @ nid 36 [ 260.022073][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 962559 of nid 36 [ 260.046263][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 234 @ nid 36 [ 260.082639][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 958463 of nid 36 [ 260.092790][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 233 @ nid 36 [ 260.101928][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 954367 of nid 36 [ 260.112047][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 232 @ nid 36 [ 260.121288][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 950271 of nid 36 [ 260.131385][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 231 @ nid 36 [ 260.140598][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 946175 of nid 36 [ 260.150723][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 230 @ nid 36 [ 260.204997][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 942079 of nid 36 [ 260.281452][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 229 @ nid 36 [ 260.322610][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 937983 of nid 36 [ 260.404282][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 228 @ nid 36 [ 260.447768][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 933887 of nid 36 [ 260.492015][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 227 @ nid 36 [ 260.547314][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 929791 of nid 36 [ 260.693564][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 226 @ nid 36 [ 261.860555][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 925695 of nid 36 [ 261.879899][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 225 @ nid 36 [ 261.905998][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 921599 of nid 36 [ 261.964672][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 224 @ nid 36 [ 261.997938][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 917503 of nid 36 [ 262.035731][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 223 @ nid 36 [ 262.068370][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 913407 of nid 36 [ 262.101031][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 222 @ nid 36 [ 262.147739][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 909311 of nid 36 [ 262.222713][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 221 @ nid 36 [ 262.281013][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 905215 of nid 36 [ 262.328245][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 220 @ nid 36 [ 262.397359][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 901119 of nid 36 [ 262.451534][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 219 @ nid 36 [ 262.511217][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 897023 of nid 36 [ 262.569003][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 218 @ nid 36 [ 262.617664][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 892927 of nid 36 [ 262.659037][ T6226] loop1: detected capacity change from 0 to 4096 [ 262.736091][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 217 @ nid 36 [ 262.791322][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 888831 of nid 36 [ 262.869189][ T6226] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 263.051194][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 216 @ nid 36 [ 263.051596][ T6226] UDF-fs: Scanning with blocksize 512 failed [ 263.091646][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 884735 of nid 36 [ 263.112999][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 215 @ nid 36 [ 263.122509][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 880639 of nid 36 [ 263.148261][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 214 @ nid 36 [ 263.284328][ T6226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.820973][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 876543 of nid 36 [ 263.821005][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 213 @ nid 36 [ 263.821024][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 872447 of nid 36 [ 263.821044][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 212 @ nid 36 [ 263.821063][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 868351 of nid 36 [ 263.821084][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 211 @ nid 36 [ 263.821101][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 864255 of nid 36 [ 263.821119][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 210 @ nid 36 [ 263.821136][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 860159 of nid 36 [ 263.821155][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 209 @ nid 36 [ 263.821173][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 856063 of nid 36 [ 263.821193][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 208 @ nid 36 [ 263.821211][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 851967 of nid 36 [ 263.821231][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 207 @ nid 36 [ 263.821249][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 847871 of nid 36 [ 263.821268][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 206 @ nid 36 [ 263.821286][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 843775 of nid 36 [ 263.821306][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 263.821324][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 839679 of nid 36 [ 263.821343][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 263.821950][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 819199 of nid 36 [ 263.821977][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 199 @ nid 36 [ 263.821997][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 815103 of nid 36 [ 263.822017][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 198 @ nid 36 [ 263.822037][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 811007 of nid 36 [ 263.822058][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 263.822076][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 806911 of nid 36 [ 263.822097][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 263.822119][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 195 @ nid 36 [ 263.822140][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 194 @ nid 36 [ 263.822161][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 193 @ nid 36 [ 263.822182][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 263.822315][ T6118] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 93 of nid 36 [ 263.822336][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 188 @ nid 36 [ 263.822355][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 770047 of nid 36 [ 263.822376][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 187 @ nid 36 [ 263.822394][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 765951 of nid 36 [ 263.822414][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 263.822534][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 761855 of nid 36 [ 263.822557][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 263.822577][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 757759 of nid 36 [ 263.822598][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 263.822617][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 753663 of nid 36 [ 263.822634][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 263.822651][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 749567 of nid 36 [ 263.822670][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 263.823064][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 263.823089][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 171 @ nid 36 [ 263.823111][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 170 @ nid 36 [ 263.823134][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 169 @ nid 36 [ 263.823156][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 263.823263][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 263.823285][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 159 @ nid 36 [ 263.823305][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 158 @ nid 36 [ 263.823326][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 157 @ nid 36 [ 263.823345][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 156 @ nid 36 [ 263.823368][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 263.823390][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 263.823412][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 263.823432][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 263.823450][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 622591 of nid 36 [ 263.823472][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 263.823490][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 618495 of nid 36 [ 263.823510][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 263.823528][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 614399 of nid 36 [ 263.823548][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 263.823567][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 610303 of nid 36 [ 263.823597][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 263.823618][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 263.823638][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 263.823659][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 263.823679][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 263.823894][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 263.823918][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 263.823939][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 263.824035][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 135 @ nid 36 [ 263.824057][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 134 @ nid 36 [ 263.824088][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 131 @ nid 36 [ 263.824110][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 130 @ nid 36 [ 263.824135][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 524287 of nid 36 [ 263.824155][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 127 @ nid 36 [ 263.824174][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 520191 of nid 36 [ 263.824194][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 126 @ nid 36 [ 263.824212][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 516095 of nid 36 [ 263.824231][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 125 @ nid 36 [ 263.824249][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 263.824268][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 124 @ nid 36 [ 263.824286][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 507903 of nid 36 [ 263.824306][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 123 @ nid 36 [ 263.824324][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 503807 of nid 36 [ 263.824344][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 122 @ nid 36 [ 263.824362][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 499711 of nid 36 [ 263.824382][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 121 @ nid 36 [ 263.824400][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 495615 of nid 36 [ 263.824420][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 263.824438][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 491519 of nid 36 [ 263.824458][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 119 @ nid 36 [ 263.824476][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 487423 of nid 36 [ 263.824495][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 118 @ nid 36 [ 263.824514][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 483327 of nid 36 [ 263.824533][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 117 @ nid 36 [ 263.824552][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 479231 of nid 36 [ 263.824571][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 116 @ nid 36 [ 263.824589][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 475135 of nid 36 [ 263.824609][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 263.824627][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 471039 of nid 36 [ 263.824647][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 263.824665][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 466943 of nid 36 [ 263.824685][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 263.824701][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 462847 of nid 36 [ 263.824721][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 263.824739][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 458751 of nid 36 [ 263.824759][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 263.824776][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 454655 of nid 36 [ 263.824796][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 263.824814][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 450559 of nid 36 [ 263.824834][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 263.824853][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 446463 of nid 36 [ 263.824880][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 263.824898][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 442367 of nid 36 [ 263.824918][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 263.824936][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 438271 of nid 36 [ 263.824956][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 263.824974][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 434175 of nid 36 [ 263.824994][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 105 @ nid 36 [ 263.825012][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 430079 of nid 36 [ 263.825032][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 104 @ nid 36 [ 263.825050][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 425983 of nid 36 [ 263.825069][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 103 @ nid 36 [ 263.825087][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 421887 of nid 36 [ 263.825106][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 102 @ nid 36 [ 263.825124][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 417791 of nid 36 [ 263.825144][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 101 @ nid 36 [ 263.825162][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 413695 of nid 36 [ 263.825182][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 100 @ nid 36 [ 263.825201][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 409599 of nid 36 [ 263.825220][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 263.825238][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 405503 of nid 36 [ 263.825258][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 263.825276][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 401407 of nid 36 [ 263.825296][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 97 @ nid 36 [ 263.825314][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 397311 of nid 36 [ 263.825334][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 263.825352][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 393215 of nid 36 [ 263.825371][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 95 @ nid 36 [ 263.825389][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 389119 of nid 36 [ 263.825409][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 94 @ nid 36 [ 263.825427][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 385023 of nid 36 [ 263.825447][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 93 @ nid 36 [ 263.825464][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 380927 of nid 36 [ 263.825484][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 263.825507][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 263.825528][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 263.825551][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 263.825572][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 263.825589][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 263.825610][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 263.825628][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 356351 of nid 36 [ 263.825648][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 263.825665][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 263.825685][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 263.825703][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 263.825723][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 263.825740][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 263.825760][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 263.825778][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 263.825797][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 263.825814][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 335871 of nid 36 [ 263.825832][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 263.825849][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 263.825877][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 263.825895][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 327679 of nid 36 [ 263.825914][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 263.825932][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 323583 of nid 36 [ 263.825952][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 263.825969][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 319487 of nid 36 [ 263.825989][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 263.826007][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 263.826026][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 263.826050][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 263.826071][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 263.826097][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 294911 of nid 36 [ 263.826117][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 263.826135][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 263.826155][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 263.826173][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 263.826207][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 263.826224][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 282623 of nid 36 [ 263.826243][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 263.826328][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 263.826349][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 263.826369][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 263.826395][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 263.826412][ T6118] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 26 of nid 36 [ 263.826431][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 263.826447][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 263.826466][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 263.826483][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 263.826499][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 263.826516][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 263.826534][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 263.826550][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 263.826568][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 263.826639][ T6118] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 23 of nid 36 [ 263.826658][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 263.826675][ T6118] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 23 of nid 36 [ 263.826693][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 263.826710][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 263.826728][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 263.826745][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 192511 of nid 36 [ 263.826764][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 263.826780][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 188415 of nid 36 [ 263.826798][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 263.826815][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 184319 of nid 36 [ 263.826833][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 263.826899][ T6118] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 20 of nid 36 [ 263.826918][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 263.826935][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 263.826971][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 263.826988][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 263.827008][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 263.827031][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 263.827053][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 263.827075][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 263.827097][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 263.827120][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 263.827141][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 263.827164][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 263.827186][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 263.827356][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 90111 of nid 36 [ 263.827378][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 263.827396][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 86015 of nid 36 [ 263.827416][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 263.827434][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 81919 of nid 36 [ 263.827452][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 263.827470][ T6118] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 77823 of nid 36 [ 263.827490][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 263.827574][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 263.827596][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 263.827618][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 263.827640][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 263.827662][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 263.827745][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 36 [ 263.827768][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 36 [ 263.827790][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 263.827812][ T6118] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 263.827882][ T6118] attempt to access beyond end of device [ 263.827882][ T6118] loop4: rw=524288, want=1049280, limit=16 [ 263.827949][ T6118] attempt to access beyond end of device [ 263.827949][ T6118] loop4: rw=524288, want=1049288, limit=16 [ 263.828528][ T6118] attempt to access beyond end of device [ 263.828528][ T6118] loop4: rw=524288, want=392, limit=16 [ 263.828596][ T6118] attempt to access beyond end of device [ 263.828596][ T6118] loop4: rw=524288, want=400, limit=16 [ 263.828736][ T6118] attempt to access beyond end of device [ 263.828736][ T6118] loop4: rw=524288, want=67108896, limit=16 [ 263.828811][ T6118] attempt to access beyond end of device [ 263.828811][ T6118] loop4: rw=524288, want=736, limit=16 [ 263.828882][ T6118] attempt to access beyond end of device [ 263.828882][ T6118] loop4: rw=524288, want=744, limit=16 [ 263.828942][ T6118] attempt to access beyond end of device [ 263.828942][ T6118] loop4: rw=524288, want=525160, limit=16 [ 263.829014][ T6118] attempt to access beyond end of device [ 263.829014][ T6118] loop4: rw=524288, want=525168, limit=16 [ 263.829082][ T6118] attempt to access beyond end of device [ 263.829082][ T6118] loop4: rw=524288, want=13478624056, limit=16 [ 264.422283][ T26] audit: type=1800 audit(1749103360.152:187): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.554" name="bus" dev="loop1" ino=1347 res=0 errno=0 [ 266.258553][ T6241] loop3: detected capacity change from 0 to 512 [ 266.291567][ T6241] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 266.485779][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 267.546627][ T6249] loop2: detected capacity change from 0 to 256 [ 268.659183][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 268.668014][ T6241] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 268.676224][ T6241] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 268.693689][ T6241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 268.701822][ T6241] System zones: 1-12 [ 268.798786][ T6259] loop1: detected capacity change from 0 to 512 [ 268.816301][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.825484][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.836292][ T6237] device bridge_slave_0 entered promiscuous mode [ 268.845063][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.852203][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.860735][ T6237] device bridge_slave_1 entered promiscuous mode [ 268.905861][ T6241] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.556: corrupted in-inode xattr [ 268.932832][ T6241] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.556: couldn't read orphan inode 15 (err -117) [ 268.933912][ T6259] EXT4-fs (loop1): Ignoring removed bh option [ 268.947551][ T6241] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 268.993815][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 269.004291][ T6259] EXT4-fs (loop1): 1 truncate cleaned up [ 269.009944][ T6259] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,bh,noquota,auto_da_alloc=0x0000000000000002,noinit_itable,noblock_validity,jqfmt=vfsv1,debug,,errors=continue. Quota mode: none. [ 269.043745][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.111270][ T6249] loop2: detected capacity change from 0 to 512 [ 269.145223][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.267294][ T6249] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 269.306478][ T6265] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.556: Unrecognised inode hash code 4 [ 269.318532][ T6265] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.556: Corrupt directory, running e2fsck is recommended [ 269.443632][ T6237] team0: Port device team_slave_0 added [ 269.680733][ T6237] team0: Port device team_slave_1 added [ 270.499329][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.731201][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.757676][ T3511] Bluetooth: hci5: command 0x041b tx timeout [ 270.772132][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.792808][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.800041][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.834134][ T6288] fuse: Bad value for 'fd' [ 271.573595][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.030281][ T4185] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 273.041212][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 273.506490][ T6237] device hsr_slave_0 entered promiscuous mode [ 273.547766][ T6237] device hsr_slave_1 entered promiscuous mode [ 273.657410][ T6308] loop3: detected capacity change from 0 to 512 [ 273.670653][ T6237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.680974][ T6237] Cannot create hsr debugfs directory [ 273.699271][ T6308] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 273.730221][ T6308] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 273.804881][ T6308] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 273.817799][ T6308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 273.826665][ T6308] System zones: 1-12 [ 274.298436][ T6308] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.576: corrupted in-inode xattr [ 274.324994][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.576: couldn't read orphan inode 15 (err -117) [ 274.363793][ T6308] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 275.062952][ T3511] Bluetooth: hci5: command 0x0419 tx timeout [ 275.763667][ T6237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.044271][ T6237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.323638][ T6237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.370899][ T6237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.660387][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.581'. [ 277.064389][ T7] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 277.083481][ T7] Bluetooth: hci3: Injecting HCI hardware error event [ 277.091725][ T4185] Bluetooth: hci3: hardware error 0x00 [ 277.106352][ T6338] loop0: detected capacity change from 0 to 512 [ 277.246494][ T6338] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 277.302764][ T6338] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 277.312573][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.341183][ T6338] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 277.343749][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.391859][ T6338] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 277.414256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.422799][ T6338] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 277.461464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.474096][ T6338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 277.492267][ T6338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.571: bg 0: block 34: padding at end of block bitmap is not set [ 277.552324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.573827][ T6338] Quota error (device loop0): write_blk: dquota write failed [ 277.587805][ T6338] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 277.609751][ T6338] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.571: Failed to acquire dquot type 1 [ 277.632948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.756965][ T6338] EXT4-fs (loop0): 1 truncate cleaned up [ 277.831777][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.838878][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.982644][ T6338] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,bsdgroups,max_batch_time=0x000000000000044e,,errors=continue. Quota mode: writeback. [ 278.059071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.067900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.078420][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.085505][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.094232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.111654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.120721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.156677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.180158][ T6344] loop1: detected capacity change from 0 to 512 [ 278.196314][ T6338] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 278.207248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.215828][ T6338] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 278.237483][ T6237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.280852][ T6344] EXT4-fs (loop1): Ignoring removed nobh option [ 278.288842][ T6237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.311212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.319975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.341150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.360220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.412963][ T6344] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 278.428199][ T6348] loop3: detected capacity change from 0 to 512 [ 278.483931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.515122][ T6344] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 278.523677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.552552][ T6344] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.583: Corrupt directory, running e2fsck is recommended [ 278.592736][ T6348] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.593979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.643393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.664612][ T6344] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 278.673140][ T6348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 278.681114][ T6348] System zones: 1-12 [ 278.729980][ T6344] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.583: corrupted in-inode xattr [ 278.749462][ T6344] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.583: couldn't read orphan inode 15 (err -117) [ 278.773045][ T6348] EXT4-fs (loop3): 1 truncate cleaned up [ 278.782259][ T6348] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 278.862550][ T6344] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 278.940284][ T6354] loop0: detected capacity change from 0 to 1024 [ 279.065433][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.095361][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.153316][ T6344] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.174225][ T6354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.192945][ T6354] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.208370][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.282551][ T6344] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 279.293032][ T6344] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.583: Corrupt directory, running e2fsck is recommended [ 280.539190][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.759836][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.106075][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.163118][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.245164][ T6237] device veth0_vlan entered promiscuous mode [ 281.268772][ T6237] device veth1_vlan entered promiscuous mode [ 281.650408][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 281.757525][ T6387] loop3: detected capacity change from 0 to 2048 [ 281.834435][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.901968][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.937383][ T6387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.283238][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.357365][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.378431][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.388166][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.398860][ T6237] device veth0_macvtap entered promiscuous mode [ 282.410578][ T6237] device veth1_macvtap entered promiscuous mode [ 282.498156][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.540596][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.550646][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.571225][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.599970][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.682543][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.880781][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.191149][ T6400] loop3: detected capacity change from 0 to 1024 [ 283.202487][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.241487][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.287546][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.298940][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.316097][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.362876][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.160714][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.170409][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.181292][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.190704][ T6400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.203115][ T6400] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.272548][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.322519][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.379436][ T6408] loop0: detected capacity change from 0 to 2048 [ 284.419505][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.668361][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.708304][ T6408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.881162][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.053561][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.188667][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.218645][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.253781][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.298049][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.343293][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.378194][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.521569][ T6237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.542608][ T6409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 285.566628][ T6237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.575479][ T6237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.585174][ T6237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.426481][ T4769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.472291][ T4769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.541052][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.549213][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.569883][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.573850][ T6427] loop3: detected capacity change from 0 to 512 [ 286.587755][ T6427] EXT4-fs (loop3): Ignoring removed bh option [ 286.606123][ T6427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 286.616132][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.632185][ T6427] EXT4-fs (loop3): 1 truncate cleaned up [ 286.637948][ T6427] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,bh,noquota,auto_da_alloc=0x0000000000000002,noinit_itable,noblock_validity,jqfmt=vfsv1,debug,,errors=continue. Quota mode: none. [ 289.687944][ T6458] loop0: detected capacity change from 0 to 128 [ 289.714761][ T6460] loop3: detected capacity change from 0 to 1024 [ 289.824687][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.843855][ T6460] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.817901][ T6530] loop5: detected capacity change from 0 to 164 [ 296.049872][ T6530] loop5: detected capacity change from 0 to 2048 [ 296.164737][ T6530] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 296.440868][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.626'. [ 296.538751][ T6539] loop3: detected capacity change from 0 to 2048 [ 297.792714][ T6539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.211671][ T6542] loop5: detected capacity change from 0 to 2048 [ 298.316213][ T6542] loop5: p1 < > p3 [ 298.323072][ T6542] loop5: p3 size 134217728 extends beyond EOD, truncated [ 298.530224][ T6546] kvm: emulating exchange as write [ 302.503238][ T6578] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.436727][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 303.543172][ T6580] loop1: detected capacity change from 0 to 2048 [ 304.212360][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.189585][ T6588] 9pnet: Insufficient options for proto=fd [ 305.368126][ T6590] loop5: detected capacity change from 0 to 512 [ 305.671552][ T6590] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 305.700354][ T6590] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 306.013431][ T6590] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 306.560911][ T6590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 306.919698][ T6590] System zones: 1-12 [ 307.029909][ T6590] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.646: corrupted in-inode xattr [ 307.135186][ T6590] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.646: couldn't read orphan inode 15 (err -117) [ 307.204251][ T6590] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 307.512964][ T6590] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.646: Unrecognised inode hash code 4 [ 307.524256][ T6590] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.646: Corrupt directory, running e2fsck is recommended [ 307.686599][ T6620] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 308.561239][ T6624] loop5: detected capacity change from 0 to 2048 [ 308.642631][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 308.919265][ T6624] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=4096, location=4096 [ 309.297786][ T6624] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 309.395204][ T6624] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 309.408164][ T6624] UDF-fs: Scanning with blocksize 512 failed [ 309.534684][ T6624] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 309.572957][ T6624] UDF-fs: Scanning with blocksize 1024 failed [ 309.633135][ T6624] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 310.255525][ T6624] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 310.442722][ T6624] UDF-fs: Scanning with blocksize 2048 failed [ 310.642978][ T6624] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 310.714247][ T6624] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 310.864105][ T6624] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 310.885523][ T6624] UDF-fs: Scanning with blocksize 4096 failed [ 310.891687][ T6624] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 312.631344][ T6667] loop5: detected capacity change from 0 to 16 [ 313.291098][ T6666] loop3: detected capacity change from 0 to 512 [ 313.352670][ T6667] erofs: (device loop5): mounted with root inode @ nid 36. [ 313.419366][ T6666] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 313.552724][ T6666] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 313.559893][ T6666] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 313.634030][ T6666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 313.672819][ T6666] System zones: 1-12 [ 313.814430][ T6666] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.664: corrupted in-inode xattr [ 313.869802][ T6666] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.664: couldn't read orphan inode 15 (err -117) [ 313.928129][ T6666] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 314.180350][ T6664] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.664: Unrecognised inode hash code 4 [ 314.191648][ T6664] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.664: Corrupt directory, running e2fsck is recommended [ 317.080469][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.086820][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.189652][ T6709] loop0: detected capacity change from 0 to 1024 [ 317.308579][ T6709] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.320268][ T6709] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.482658][ T4268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 317.842975][ T4268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.920453][ T4268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.036274][ T4268] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.049728][ T4268] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.059034][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.212081][ T4268] usb 6-1: config 0 descriptor?? [ 319.214347][ T6724] loop0: detected capacity change from 0 to 512 [ 319.227161][ T6726] loop2: detected capacity change from 0 to 512 [ 319.241527][ T6724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.362834][ T6726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.397466][ T4268] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 319.414003][ T6724] EXT4-fs (loop0): 1 truncate cleaned up [ 319.419677][ T6724] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 319.429617][ T4268] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 319.499714][ T6726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 319.683577][ T6726] System zones: 1-12 [ 319.689087][ T6726] EXT4-fs (loop2): 1 truncate cleaned up [ 319.764745][ T26] audit: type=1800 audit(1749103415.482:188): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.678" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 319.973408][ T6726] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 320.166828][ T4268] usb 6-1: USB disconnect, device number 2 [ 321.217645][ T6739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.229558][ T6739] IPv6: NLM_F_CREATE should be set when creating new route [ 321.566537][ T6744] loop3: detected capacity change from 0 to 512 [ 321.623537][ T6744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.699458][ T6744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 321.714260][ T6744] System zones: 1-12 [ 321.757643][ T6744] EXT4-fs (loop3): 1 truncate cleaned up [ 321.802820][ T6744] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 323.295252][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.303111][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.022601][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.265536][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.607206][ T4268] Bluetooth: hci6: command 0x0409 tx timeout [ 327.001824][ T6785] loop2: detected capacity change from 0 to 512 [ 327.082658][ T6785] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 327.168240][ T6785] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 327.182604][ T6785] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 327.226901][ T6785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 327.265898][ T6785] System zones: 1-12 [ 327.279880][ T6739] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.332589][ T6739] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.342465][ T6739] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.344213][ T6785] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.694: corrupted in-inode xattr [ 327.352390][ T6739] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.422631][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.694: couldn't read orphan inode 15 (err -117) [ 327.462967][ T6785] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 327.572921][ T6785] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.694: Unrecognised inode hash code 4 [ 327.584287][ T6785] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.694: Corrupt directory, running e2fsck is recommended [ 328.027627][ T6797] loop0: detected capacity change from 0 to 512 [ 328.117818][ T6797] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 328.201517][ T6797] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 328.212558][ T6797] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 328.250089][ T6797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 328.302156][ T6797] System zones: 1-12 [ 328.320727][ T6797] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.698: corrupted in-inode xattr [ 328.366890][ T6797] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.698: couldn't read orphan inode 15 (err -117) [ 328.437424][ T6797] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 328.481104][ T5680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.663260][ T13] Bluetooth: hci6: command 0x041b tx timeout [ 328.963330][ T5680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.608072][ T5680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.875370][ T5680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.969007][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 330.743009][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 331.272838][ T6825] loop2: detected capacity change from 0 to 512 [ 331.320714][ T6825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.382292][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 331.554465][ T6825] System zones: 1-12 [ 331.574791][ T6825] EXT4-fs (loop2): 1 truncate cleaned up [ 331.580455][ T6825] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 332.324236][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.338107][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.394919][ T6843] loop0: detected capacity change from 0 to 512 [ 332.413782][ T6761] device bridge_slave_0 entered promiscuous mode [ 332.455269][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.479281][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.542880][ T6761] device bridge_slave_1 entered promiscuous mode [ 332.636573][ T6843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 332.707669][ T6843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 332.722599][ T6843] System zones: 1-12 [ 332.734978][ T6843] EXT4-fs (loop0): 1 truncate cleaned up [ 332.740834][ T6843] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 332.795802][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.822104][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.831678][ T3511] Bluetooth: hci6: command 0x0419 tx timeout [ 333.349293][ T6761] team0: Port device team_slave_0 added [ 333.460253][ T6761] team0: Port device team_slave_1 added [ 333.794055][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.801028][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.922977][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.004184][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.022886][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.066490][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.177388][ T6761] device hsr_slave_0 entered promiscuous mode [ 334.211398][ T6761] device hsr_slave_1 entered promiscuous mode [ 334.236688][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.271585][ T6761] Cannot create hsr debugfs directory [ 334.794238][ T5680] device hsr_slave_0 left promiscuous mode [ 334.832874][ T5680] device hsr_slave_1 left promiscuous mode [ 334.840541][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.894880][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.033650][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.041111][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.099919][ T5680] device bridge_slave_1 left promiscuous mode [ 335.121072][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.323354][ T5680] device bridge_slave_0 left promiscuous mode [ 335.358311][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.503115][ T5680] device veth1_macvtap left promiscuous mode [ 335.522794][ T5680] device veth0_macvtap left promiscuous mode [ 335.551946][ T5680] device veth1_vlan left promiscuous mode [ 335.558201][ T5680] device veth0_vlan left promiscuous mode [ 336.014764][ T5680] team0 (unregistering): Port device team_slave_1 removed [ 336.063808][ T5680] team0 (unregistering): Port device team_slave_0 removed [ 336.790731][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.412948][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.222675][ T6908] loop0: detected capacity change from 0 to 1024 [ 338.298469][ T6908] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.317368][ T5680] bond0 (unregistering): Released all slaves [ 338.333073][ T6908] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.475291][ T6761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.561715][ T6761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.610653][ T6761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.661684][ T6761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.967056][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.060914][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.086916][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.089701][ T6932] loop3: detected capacity change from 0 to 512 [ 340.108472][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.138833][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.158630][ T6932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 340.199713][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.226968][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.234154][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.255820][ T6932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 340.271423][ T6932] System zones: 1-12 [ 340.282033][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.306239][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.314729][ T6932] EXT4-fs (loop3): 1 truncate cleaned up [ 340.317053][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.330056][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.337171][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.351627][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.352843][ T6932] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 340.462608][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.516407][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.577235][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.782883][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.300333][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.314583][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.323517][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.348320][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.493315][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.662616][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.351750][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.369722][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.446458][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.654997][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.687467][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.760452][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.779700][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.826160][ T6761] device veth0_vlan entered promiscuous mode [ 344.849317][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.863290][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.882039][ T7001] loop5: detected capacity change from 0 to 1024 [ 344.896260][ T6761] device veth1_vlan entered promiscuous mode [ 344.938707][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.986085][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.007999][ T7001] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.019351][ T7001] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.041704][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.099841][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.162377][ T6761] device veth0_macvtap entered promiscuous mode [ 345.221241][ T6761] device veth1_macvtap entered promiscuous mode [ 345.667697][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.756971][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.044290][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.107417][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.120304][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.121244][ T7010] loop0: detected capacity change from 0 to 16 [ 346.130777][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.153986][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.170795][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.193041][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.212444][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.235826][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.282114][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.304845][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.342680][ T7010] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 346.632908][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.646786][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.656955][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.667710][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.682460][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.108213][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.119604][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.148827][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.226167][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.245482][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.274083][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.376428][ T6761] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.432791][ T6761] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.499087][ T6761] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.533794][ T6761] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.941982][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.992620][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.140593][ T7044] loop3: detected capacity change from 0 to 2048 [ 349.241609][ T7044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.268672][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.292156][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.379656][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.447193][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.096919][ T7063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.696728][ T7068] loop2: detected capacity change from 0 to 1024 [ 352.783645][ T7068] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.873119][ T7068] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.238148][ T7088] loop3: detected capacity change from 0 to 512 [ 353.703522][ T7088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.803838][ T7095] loop2: detected capacity change from 0 to 512 [ 354.545127][ T7095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.628690][ T7088] EXT4-fs (loop3): 1 truncate cleaned up [ 354.636575][ T7088] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 354.715565][ T7095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 354.741700][ T7095] System zones: 1-12 [ 354.874354][ T7095] EXT4-fs (loop2): 1 truncate cleaned up [ 354.892189][ T7095] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 355.033067][ T26] audit: type=1800 audit(1749103450.752:189): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.748" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 355.510078][ T3511] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 356.002860][ T3511] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 356.032057][ T3511] usb 1-1: config 0 has no interface number 0 [ 356.242917][ T3511] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 356.267323][ T3511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.417294][ T3511] usb 1-1: Product: syz [ 356.438194][ T3511] usb 1-1: Manufacturer: syz [ 356.457059][ T3511] usb 1-1: SerialNumber: syz [ 356.464918][ T7123] loop6: detected capacity change from 0 to 164 [ 356.514166][ T3511] usb 1-1: config 0 descriptor?? [ 356.574636][ T3511] usb 1-1: Found UVC 0.00 device syz (06f8:300c) [ 356.618426][ T7123] ISOFS: unable to read i-node block [ 356.624577][ T7123] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 356.635678][ T3511] usb 1-1: No valid video chain found. [ 356.848293][ T4211] usb 1-1: USB disconnect, device number 2 [ 358.062293][ T7141] loop5: detected capacity change from 0 to 2048 [ 358.719047][ T7141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.701747][ T7152] loop6: detected capacity change from 0 to 16 [ 359.894773][ T7161] loop0: detected capacity change from 0 to 512 [ 359.909218][ T7152] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 360.016688][ T7161] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 360.036351][ T7161] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 360.060319][ T7161] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 360.202920][ T7161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 360.222672][ T7161] System zones: 1-12 [ 360.283430][ T7161] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.760: corrupted in-inode xattr [ 360.349653][ T7161] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.760: couldn't read orphan inode 15 (err -117) [ 360.416007][ T7161] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 361.673599][ T7182] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.760: Unrecognised inode hash code 4 [ 361.684900][ T7182] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.760: Corrupt directory, running e2fsck is recommended [ 363.050569][ T7196] loop3: detected capacity change from 0 to 164 [ 363.107723][ T7196] ISOFS: unable to read i-node block [ 363.113347][ T7196] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 363.646814][ T7211] 9pnet: Could not find request transport: fd0x0000000000000003 [ 364.881705][ T7222] loop5: detected capacity change from 0 to 512 [ 365.520078][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.768'. [ 365.638914][ T7231] loop3: detected capacity change from 0 to 2048 [ 366.165181][ T7231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.227832][ T7222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.260874][ T7222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 366.284580][ T7222] System zones: 1-12 [ 366.331668][ T7222] EXT4-fs (loop5): 1 truncate cleaned up [ 366.369358][ T7222] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 367.854484][ T7252] loop0: detected capacity change from 0 to 16 [ 367.980671][ T7252] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 369.683407][ T7280] loop2: detected capacity change from 0 to 512 [ 369.758440][ T7280] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 369.787098][ T7280] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 369.821741][ T7280] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 369.868519][ T7269] loop6: detected capacity change from 0 to 1024 [ 369.903948][ T7280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 369.911977][ T7280] System zones: 1-12 [ 370.038347][ T7280] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.777: corrupted in-inode xattr [ 370.061186][ T7286] loop5: detected capacity change from 0 to 164 [ 370.106096][ T7280] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.777: couldn't read orphan inode 15 (err -117) [ 370.132927][ T7280] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 370.214324][ T7286] ISOFS: unable to read i-node block [ 370.219679][ T7286] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 370.459642][ T7290] 9pnet: Could not find request transport: fd0x0000000000000003 [ 370.558017][ T7292] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.777: Unrecognised inode hash code 4 [ 370.569590][ T7292] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.777: Corrupt directory, running e2fsck is recommended [ 372.652577][ T1108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 372.915061][ T1108] usb 7-1: Using ep0 maxpacket: 32 [ 373.194962][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.206032][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.217091][ T1108] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.266933][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.429451][ T1108] usb 7-1: config 0 descriptor?? [ 373.474605][ T1108] hub 7-1:0.0: USB hub found [ 373.692569][ T1108] hub 7-1:0.0: 1 port detected [ 373.920011][ T7339] loop0: detected capacity change from 0 to 1024 [ 373.978688][ T7339] EXT4-fs (loop0): Ignoring removed nobh option [ 373.992072][ T7339] EXT4-fs (loop0): Ignoring removed bh option [ 374.009056][ T7339] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.084487][ T7342] 9pnet: Could not find request transport: fd0x0000000000000003 [ 374.124601][ T7339] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 374.315734][ T7339] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.789: Allocating blocks 385-513 which overlap fs metadata [ 374.382813][ T1108] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 374.490536][ T7352] loop2: detected capacity change from 0 to 16 [ 374.509093][ T7352] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 374.543186][ T7338] EXT4-fs (loop0): pa ffff888074fa0380: logic 16, phys. 129, len 24 [ 374.551412][ T7338] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 374.575863][ T7349] loop5: detected capacity change from 0 to 2048 [ 374.690152][ T7349] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.714151][ T1108] usb 7-1: USB disconnect, device number 2 [ 374.875884][ T26] audit: type=1800 audit(1749103470.612:190): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.792" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 374.899346][ T7349] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 374.929360][ T7349] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 374.950583][ T7359] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 374.952831][ T7349] EXT4-fs (loop5): This should not happen!! Data will be lost [ 374.952831][ T7349] [ 375.032645][ T7359] EXT4-fs (loop5): This should not happen!! Data will be lost [ 375.032645][ T7359] [ 375.072243][ T7349] EXT4-fs (loop5): Total free blocks count 0 [ 375.095737][ T7359] EXT4-fs (loop5): Total free blocks count 0 [ 375.160739][ T7349] EXT4-fs (loop5): Free/Dirty block details [ 375.255211][ T7359] EXT4-fs (loop5): Free/Dirty block details [ 375.265258][ T7359] EXT4-fs (loop5): free_blocks=2415919504 [ 375.273164][ T7359] EXT4-fs (loop5): dirty_blocks=48 [ 375.827050][ T7374] loop0: detected capacity change from 0 to 512 [ 376.794692][ T7374] EXT4-fs (loop0): Ignoring removed orlov option [ 377.156572][ T7374] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,nodelalloc,auto_da_alloc=0x0000000000000004,orlov,,errors=continue. Quota mode: writeback. [ 377.509428][ T7374] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.636686][ T7399] 9pnet: Insufficient options for proto=fd [ 377.877268][ T7407] loop5: detected capacity change from 0 to 512 [ 377.929243][ T7409] loop6: detected capacity change from 0 to 512 [ 378.013396][ T7407] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 378.037339][ T7409] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 378.102608][ T7407] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 378.113249][ T7407] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 378.163630][ T7409] EXT4-fs (loop6): 1 truncate cleaned up [ 378.169318][ T7409] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 378.191521][ T7407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 378.282599][ T7407] System zones: 1-12 [ 378.435470][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.441852][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.450291][ T7407] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.805: corrupted in-inode xattr [ 378.468550][ T26] audit: type=1800 audit(1749103474.202:191): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.806" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 378.632986][ T7407] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.805: couldn't read orphan inode 15 (err -117) [ 378.659211][ T7407] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 379.495609][ T7434] loop6: detected capacity change from 0 to 512 [ 379.559979][ T7434] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.621763][ T7434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 379.673333][ T7434] System zones: 1-12 [ 379.691702][ T7434] EXT4-fs (loop6): 1 truncate cleaned up [ 379.912453][ T7434] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 380.910122][ T7451] loop0: detected capacity change from 0 to 16 [ 380.975325][ T7451] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 381.746208][ T7469] loop6: detected capacity change from 0 to 512 [ 381.998296][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 382.104975][ T7471] loop2: detected capacity change from 0 to 2048 [ 382.679566][ T7469] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 382.746123][ T7471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.761937][ T7469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803e11c, mo2=0002] [ 382.797197][ T7469] EXT4-fs (loop6): orphan cleanup on readonly fs [ 382.840612][ T7469] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.819: attempt to clear invalid blocks 1024 len 1 [ 382.999123][ T7469] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.819: bg 0: block 361: padding at end of block bitmap is not set [ 383.050522][ T7469] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 383.107247][ T7469] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.819: invalid indirect mapped block 1811939328 (level 0) [ 383.220842][ T7469] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.819: invalid indirect mapped block 2185560079 (level 1) [ 383.247912][ T7476] loop2: detected capacity change from 0 to 512 [ 383.583589][ T7469] EXT4-fs (loop6): 1 truncate cleaned up [ 383.589366][ T7469] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,noblock_validity,mb_optimize_scan=0x0000000000000000,noauto_da_alloc,abort,errors=continue. Quota mode: none. [ 383.936822][ T7476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 384.335014][ T7495] loop0: detected capacity change from 0 to 512 [ 384.392571][ T7476] EXT4-fs (loop2): 1 truncate cleaned up [ 384.398220][ T7476] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 384.439480][ T7495] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 384.502922][ T7495] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 384.510147][ T7495] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 384.720674][ T7495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 384.730174][ T26] audit: type=1800 audit(1749103480.472:192): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.820" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 384.758644][ T7495] System zones: 1-12 [ 384.769164][ T7495] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.822: corrupted in-inode xattr [ 384.810446][ T7495] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.822: couldn't read orphan inode 15 (err -117) [ 384.862989][ T7495] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 384.953981][ T7502] loop6: detected capacity change from 0 to 1024 [ 385.517325][ T7502] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 385.596625][ T7502] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.503212][ T7525] loop2: detected capacity change from 0 to 512 [ 386.949825][ T7525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 387.102481][ T7525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 387.239731][ T7525] System zones: 1-12 [ 387.461646][ T3511] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 387.473903][ T7525] EXT4-fs (loop2): 1 truncate cleaned up [ 387.479588][ T7525] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 388.582838][ T4259] Bluetooth: hci6: command 0x0411 tx timeout [ 390.311784][ T7560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.319102][ T7560] IPv6: NLM_F_CREATE should be set when creating new route [ 390.383368][ T7563] loop2: detected capacity change from 0 to 512 [ 390.470703][ T7563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.625217][ T7563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 390.772691][ T7563] System zones: 1-12 [ 390.795573][ T7563] EXT4-fs (loop2): 1 truncate cleaned up [ 390.853109][ T7563] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 390.891158][ T7575] loop0: detected capacity change from 0 to 1024 [ 391.004009][ T7575] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.070440][ T7575] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.782621][ T7540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 391.994935][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 392.241767][ T7591] loop0: detected capacity change from 0 to 1024 [ 392.319331][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 392.457479][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 392.968366][ T26] audit: type=1326 audit(1749103488.702:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.030791][ T7607] loop3: detected capacity change from 0 to 256 [ 393.105024][ T7607] FAT-fs (loop3): Unrecognized mount option "shor†name=mixed" or missing value [ 393.116188][ T26] audit: type=1326 audit(1749103488.732:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.217833][ T7611] loop2: detected capacity change from 0 to 512 [ 393.287248][ T7611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.331770][ T26] audit: type=1326 audit(1749103488.742:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.378642][ T7611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 393.400497][ T7611] System zones: 1-12 [ 393.501167][ T26] audit: type=1326 audit(1749103488.742:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.552015][ T7611] EXT4-fs (loop2): 1 truncate cleaned up [ 393.558313][ T26] audit: type=1326 audit(1749103488.742:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.580863][ T26] audit: type=1326 audit(1749103488.742:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a1afdf929 code=0x7ffc0000 [ 393.594150][ T7611] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 393.636135][ T26] audit: type=1326 audit(1749103488.742:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a1afdf963 code=0x7ffc0000 [ 393.692331][ T26] audit: type=1326 audit(1749103488.742:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a1afde3df code=0x7ffc0000 [ 393.772937][ T26] audit: type=1326 audit(1749103488.762:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0a1afdf9b7 code=0x7ffc0000 [ 393.957124][ T7621] loop0: detected capacity change from 0 to 512 [ 396.131918][ T26] audit: type=1326 audit(1749103488.762:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a1afde290 code=0x7ffc0000 [ 396.162691][ T7621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.227890][ T7621] EXT4-fs (loop0): 1 truncate cleaned up [ 396.323894][ T7621] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 398.256513][ T7660] loop3: detected capacity change from 0 to 1024 [ 398.373367][ T7660] EXT4-fs (loop3): Test dummy encryption mode enabled [ 398.392737][ T7660] EXT4-fs (loop3): Test dummy encryption mode enabled [ 398.460964][ T7660] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 398.575079][ T7670] loop6: detected capacity change from 0 to 1024 [ 398.811044][ T7670] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 398.855746][ T7670] EXT4-fs (loop6): Ignoring removed nobh option [ 398.994453][ T7670] EXT4-fs (loop6): Ignoring removed bh option [ 399.000587][ T7670] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 399.088722][ T7681] loop0: detected capacity change from 0 to 512 [ 399.151860][ T7670] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,data_err=abort,barrier=0x0000000000000002,noquota,data_err=ignore,max_dir_size_kb=0x00000000004007ad,barrier=0x0000000000000003,grpquota,nobh,resuid=0x0000000000000000,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 399.195995][ T7681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 399.243271][ T7681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 399.262661][ T7681] System zones: 1-12 [ 399.278410][ T7681] EXT4-fs (loop0): 1 truncate cleaned up [ 399.286184][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 399.286197][ T26] audit: type=1800 audit(1749103495.022:238): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.858" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 399.309835][ T7681] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 402.857735][ T7708] loop3: detected capacity change from 0 to 1024 [ 403.495533][ T7708] EXT4-fs (loop3): Ignoring removed nobh option [ 403.501824][ T7708] EXT4-fs (loop3): Ignoring removed bh option [ 403.586310][ T7708] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,grpid,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000006,data_err=ignore,grpquota,nobh,noblock_validity,bh,noinit_itable,,errors=continue. Quota mode: writeback. [ 405.319970][ T7748] loop5: detected capacity change from 0 to 512 [ 405.773783][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.6.875'. [ 405.899504][ T7753] loop6: detected capacity change from 0 to 2048 [ 405.938499][ T7748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.439616][ T7753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.474566][ T7756] loop3: detected capacity change from 0 to 1024 [ 406.484496][ T7748] EXT4-fs (loop5): 1 truncate cleaned up [ 406.533703][ T7748] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 406.628292][ T7756] EXT4-fs (loop3): Ignoring removed nobh option [ 406.803803][ T7756] EXT4-fs (loop3): Ignoring removed bh option [ 406.864239][ T7767] netlink: 112 bytes leftover after parsing attributes in process `syz.6.880'. [ 406.893867][ T26] audit: type=1800 audit(1749103502.622:239): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.877" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 407.082858][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.880'. [ 407.213825][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 407.235141][ T7756] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,grpid,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000006,data_err=ignore,grpquota,nobh,noblock_validity,bh,noinit_itable,,errors=continue. Quota mode: writeback. [ 407.320422][ T7767] tc_dump_action: action bad kind [ 407.380476][ T7775] loop5: detected capacity change from 0 to 512 [ 407.435951][ T7775] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 407.528867][ T7775] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 407.556122][ T7775] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 407.621535][ T7787] loop6: detected capacity change from 0 to 128 [ 407.638725][ T7775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 407.654641][ T7775] System zones: 1-12 [ 407.661094][ T7775] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.882: corrupted in-inode xattr [ 407.674155][ T7775] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.882: couldn't read orphan inode 15 (err -117) [ 407.711625][ T7775] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 407.920888][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 408.003226][ T7794] loop3: detected capacity change from 0 to 1024 [ 408.111102][ T7794] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 408.146150][ T7794] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 408.209362][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 408.244137][ T7794] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.304346][ T7794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 408.316664][ T7794] System zones: 0-1, 3-36 [ 408.328344][ T7794] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 408.353936][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.452761][ T7] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.652791][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 409.280255][ T7] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 409.337073][ T7] usb 1-1: Product: syz [ 409.363906][ T7] usb 1-1: Manufacturer: syz [ 409.407551][ T5680] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.450286][ T7] hub 1-1:4.0: USB hub found [ 409.545699][ T5680] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.614358][ T7807] loop5: detected capacity change from 0 to 1024 [ 409.656809][ T5680] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.667912][ T7] hub 1-1:4.0: 2 ports detected [ 409.736974][ T7807] EXT4-fs (loop5): Ignoring removed nobh option [ 409.752349][ T5680] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.771245][ T7807] EXT4-fs (loop5): Ignoring removed bh option [ 409.840240][ T7807] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,grpid,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000006,data_err=ignore,grpquota,nobh,noblock_validity,bh,noinit_itable,,errors=continue. Quota mode: writeback. [ 410.102617][ T7] hub 1-1:4.0: set hub depth failed [ 410.144401][ T7] usb 1-1: USB disconnect, device number 3 [ 410.200325][ T7816] loop5: detected capacity change from 0 to 1024 [ 410.695942][ T7827] loop5: detected capacity change from 0 to 256 [ 410.790626][ T7812] chnl_net:caif_netlink_parms(): no params data found [ 410.829693][ T7827] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 411.290469][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.318606][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.744065][ T7848] loop0: detected capacity change from 0 to 128 [ 411.802717][ T7812] device bridge_slave_0 entered promiscuous mode [ 411.857133][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.873984][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.893310][ T7812] device bridge_slave_1 entered promiscuous mode [ 411.983565][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.020808][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.129376][ T7812] team0: Port device team_slave_0 added [ 412.181955][ T7812] team0: Port device team_slave_1 added [ 412.293839][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.300831][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.441624][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.500599][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.519202][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.640506][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.763815][ T7812] device hsr_slave_0 entered promiscuous mode [ 412.792944][ T7812] device hsr_slave_1 entered promiscuous mode [ 412.810250][ T7812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.828169][ T7812] Cannot create hsr debugfs directory [ 413.064073][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 413.064267][ T7867] loop3: detected capacity change from 0 to 8 [ 413.463198][ T5680] device hsr_slave_0 left promiscuous mode [ 413.493372][ T5680] device hsr_slave_1 left promiscuous mode [ 413.522943][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.565463][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.585233][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.603603][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.653488][ T5680] device bridge_slave_1 left promiscuous mode [ 413.661203][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.708852][ T7876] loop3: detected capacity change from 0 to 512 [ 413.777000][ T5680] device bridge_slave_0 left promiscuous mode [ 413.793546][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.810599][ T7876] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 413.839568][ T5680] device veth1_macvtap left promiscuous mode [ 413.854874][ T5680] device veth0_macvtap left promiscuous mode [ 413.860965][ T5680] device veth1_vlan left promiscuous mode [ 413.889190][ T7876] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 413.893293][ T5680] device veth0_vlan left promiscuous mode [ 414.070805][ T7876] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 414.095974][ T7876] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 414.142728][ T7876] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 414.438714][ T7876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 414.483959][ T7876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.905: bg 0: block 34: padding at end of block bitmap is not set [ 414.525444][ T7876] Quota error (device loop3): write_blk: dquota write failed [ 414.552553][ T7876] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 414.590066][ T7876] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.905: Failed to acquire dquot type 1 [ 414.659727][ T7876] EXT4-fs (loop3): 1 truncate cleaned up [ 414.683014][ T7876] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,bsdgroups,max_batch_time=0x000000000000044e,,errors=continue. Quota mode: writeback. [ 414.723138][ T7900] loop2: detected capacity change from 0 to 2048 [ 414.803816][ T7900] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 414.819086][ T7900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.945198][ T5680] team0 (unregistering): Port device team_slave_1 removed [ 414.961112][ T5680] team0 (unregistering): Port device team_slave_0 removed [ 415.000529][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.016203][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.156295][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 415.321240][ T5680] bond0 (unregistering): Released all slaves [ 415.516271][ T7922] loop3: detected capacity change from 0 to 512 [ 415.627936][ T7922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 415.715192][ T7922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 415.752556][ T7922] System zones: 1-12 [ 415.820622][ T7922] EXT4-fs (loop3): 1 truncate cleaned up [ 415.882510][ T7922] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 415.899688][ T7812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 415.958347][ T7812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.063108][ T7812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.230095][ T7812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 416.535945][ T7940] loop5: detected capacity change from 0 to 512 [ 416.669822][ T7940] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 416.761307][ T7940] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 416.798883][ T7940] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 416.819798][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.857168][ T7940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 416.896986][ T7940] System zones: 1-12 [ 416.906079][ T7940] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.920: corrupted in-inode xattr [ 416.943662][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.951743][ T7940] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.920: couldn't read orphan inode 15 (err -117) [ 416.976428][ T7940] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 417.023641][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.077653][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.220985][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.229288][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 417.244244][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.294329][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.301545][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.390705][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.446274][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.479882][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.565000][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.572237][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.671777][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.888188][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.223933][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.245094][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.339418][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.389468][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.520262][ T7812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.585937][ T7812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.605808][ T7962] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.920: Unrecognised inode hash code 4 [ 418.617118][ T7962] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.920: Corrupt directory, running e2fsck is recommended [ 418.697061][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.713176][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.818826][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.866001][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.913210][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.936987][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.167041][ T7971] loop2: detected capacity change from 0 to 1024 [ 419.229430][ T7971] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 419.297054][ T7971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 419.303912][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 419.358710][ T7971] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 419.395284][ T7971] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 419.483406][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.492722][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.588826][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.637493][ T7971] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 419.746502][ T7971] EXT4-fs (loop2): 1 truncate cleaned up [ 419.802875][ T7971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 422.416308][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.453493][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.561331][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.576958][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.670604][ T7812] device veth0_vlan entered promiscuous mode [ 422.699236][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.744665][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.786521][ T7812] device veth1_vlan entered promiscuous mode [ 422.863849][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 422.882291][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 422.920075][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 422.959590][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.981679][ T7812] device veth0_macvtap entered promiscuous mode [ 423.009940][ T7812] device veth1_macvtap entered promiscuous mode [ 423.033621][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 423.118624][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.235959][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.292695][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.308159][ T8042] loop2: detected capacity change from 0 to 512 [ 423.345358][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.472964][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 423.662946][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.782307][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.800835][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.992478][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.006720][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.042624][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.068537][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.101983][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.112454][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.147727][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.163317][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.171700][ T1108] usb 1-1: config 0 descriptor?? [ 424.177836][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.213926][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.222967][ T8042] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 424.252037][ T8042] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 424.268087][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.317113][ T8042] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 424.387152][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.594159][ T8042] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 424.623302][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.672642][ T8042] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 424.711315][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.871420][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.887126][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.905474][ T8042] EXT4-fs (loop2): orphan cleanup on readonly fs [ 424.911989][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.962938][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.974772][ T8042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.937: bg 0: block 34: padding at end of block bitmap is not set [ 425.022446][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.054940][ T8042] Quota error (device loop2): write_blk: dquota write failed [ 425.080655][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.099938][ T8042] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 425.130554][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.155853][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.175180][ T1108] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 425.182574][ T1108] microsoft 0003:045E:07DA.0003: unknown main item tag 0x1 [ 425.190530][ T1108] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 425.198536][ T8042] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.937: Failed to acquire dquot type 1 [ 425.210724][ T1108] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 425.244028][ T7812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.273649][ T8042] EXT4-fs (loop2): 1 truncate cleaned up [ 425.279452][ T7812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.293057][ T8042] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,bsdgroups,max_batch_time=0x000000000000044e,,errors=continue. Quota mode: writeback. [ 425.324342][ T7812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.332478][ T1108] microsoft 0003:045E:07DA.0003: no inputs found [ 425.339399][ T1108] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 425.350971][ T1108] usb 1-1: USB disconnect, device number 4 [ 425.389776][ T7812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.426929][ T8041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 425.474758][ T8041] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 425.542160][ T8071] fido_id[8071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 425.586348][ T8068] loop5: detected capacity change from 0 to 2048 [ 425.627865][ T8073] loop3: detected capacity change from 0 to 128 [ 425.755115][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.782627][ T27] INFO: task syz.4.525:6118 blocked for more than 143 seconds. [ 425.810009][ T27] Not tainted 5.15.185-syzkaller #0 [ 425.844038][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.863739][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.887175][ T8068] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 425.912615][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.920917][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.936572][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.960615][ T27] task:syz.4.525 state:D stack:26240 pid: 6118 ppid: 4169 flags:0x00004006 [ 425.988161][ T27] Call Trace: [ 425.991481][ T27] [ 425.994540][ T27] __schedule+0x11b8/0x43b0 [ 425.999121][ T27] ? release_firmware_map_entry+0x190/0x190 [ 426.005337][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 426.011345][ T27] ? blk_check_plugged+0x250/0x250 [ 426.016835][ T27] ? lock_chain_count+0x20/0x20 [ 426.021711][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 426.021817][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 426.091453][ T27] schedule+0x11b/0x1e0 [ 426.096787][ T27] io_schedule+0x7c/0xd0 [ 426.122459][ T27] wait_on_page_bit_common+0x815/0xe00 [ 426.128001][ T27] ? wait_on_page_bit+0x50/0x50 [ 426.185436][ T27] ? rcu_lock_release+0x20/0x20 [ 426.190354][ T27] ? bio_add_page+0x2d6/0x460 [ 426.208198][ T27] z_erofs_runqueue+0x6bf/0x1890 [ 426.219264][ T27] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 426.232431][ T27] ? send_mds_reconnect+0x18b0/0x18b0 [ 426.243361][ T27] z_erofs_readahead+0xb81/0x10c0 [ 426.255353][ T27] ? z_erofs_readpage+0x6c0/0x6c0 [ 426.273184][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 426.279243][ T27] ? local_lock_release+0x97/0x170 [ 426.293286][ T27] read_pages+0x165/0x920 [ 426.297654][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 426.312445][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 426.317955][ T27] page_cache_ra_unbounded+0x830/0x930 [ 426.332450][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 426.339015][ T27] force_page_cache_ra+0x3e5/0x440 [ 426.354650][ T27] generic_fadvise+0x520/0x7d0 [ 426.359494][ T27] ? dump_task+0x600/0x600 [ 426.378386][ T27] ? __fdget+0x18b/0x210 [ 426.382887][ T27] __x64_sys_fadvise64+0x139/0x180 [ 426.388036][ T27] do_syscall_64+0x4c/0xa0 [ 426.426849][ T27] ? clear_bhb_loop+0x30/0x80 [ 426.431670][ T27] ? clear_bhb_loop+0x30/0x80 [ 426.447640][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 426.478931][ T27] RIP: 0033:0x7fd14133b929 [ 426.483663][ T27] RSP: 002b:00007fd13f1a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 426.492104][ T27] RAX: ffffffffffffffda RBX: 00007fd141562fa0 RCX: 00007fd14133b929 [ 426.548965][ T27] RDX: 0000000020004101 RSI: 0000000000000000 RDI: 0000000000000005 [ 426.561922][ T27] RBP: 00007fd1413bdb39 R08: 0000000000000000 R09: 0000000000000000 [ 426.587715][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 426.619181][ T27] R13: 0000000000000000 R14: 00007fd141562fa0 R15: 00007fffa857bd18 [ 426.649553][ T27] [ 426.657973][ T27] [ 426.657973][ T27] Showing all locks held in the system: [ 426.753150][ T27] 2 locks held by kworker/1:0/21: [ 426.758210][ T27] 3 locks held by kworker/1:1/23: [ 426.797243][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 426.835102][ T27] #1: ffffc90000ddfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 426.868342][ T27] #2: ffff8880607e6240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x271/0x3240 [ 426.900942][ T27] 1 lock held by khungtaskd/27: [ 426.916091][ T27] #0: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 426.950652][ T27] 2 locks held by kworker/1:2/1108: [ 426.969439][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 427.000477][ T27] #1: ffffc90004677d00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 427.040303][ T27] 1 lock held by dhcpcd/3841: [ 427.052590][ T27] 2 locks held by getty/3937: [ 427.062833][ T27] #0: ffff88814c30f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 427.099734][ T27] #1: ffffc90002ce62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 427.141002][ T27] 2 locks held by kworker/0:5/4213: [ 427.152453][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 427.192228][ T27] #1: ffffc9000313fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 427.225863][ T27] 3 locks held by kworker/1:7/4259: [ 427.231179][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 427.256522][ T27] #1: ffffc900031afd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 427.299693][ T27] #2: ffffffff8c120a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 427.328909][ T27] 3 locks held by kworker/u4:11/4532: [ 427.342455][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 427.369058][ T27] #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 427.402453][ T27] #2: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: rcu_lock_acquire+0x5/0x30 [ 427.429624][ T27] 1 lock held by syz.4.525/6118: [ 427.438485][ T27] #0: ffff88805ee61820 (mapping.invalidate_lock#6){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x190/0x930 [ 427.486973][ T27] 3 locks held by syz.2.942/8082: [ 427.507790][ T27] 1 lock held by dhcpcd/8100: [ 427.522241][ T27] #0: ffff8880548d8120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 [ 427.567698][ T27] 1 lock held by sed/8110: [ 427.588330][ T27] [ 427.596884][ T27] ============================================= [ 427.596884][ T27] [ 427.623585][ T27] NMI backtrace for cpu 1 [ 427.627959][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.185-syzkaller #0 [ 427.635951][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.646013][ T27] Call Trace: [ 427.649302][ T27] [ 427.652250][ T27] dump_stack_lvl+0x168/0x230 [ 427.656942][ T27] ? show_regs_print_info+0x20/0x20 [ 427.662151][ T27] ? load_image+0x3b0/0x3b0 [ 427.666672][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 427.672055][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 427.677187][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 427.682142][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 427.688309][ T27] ? _printk+0xcc/0x110 [ 427.692499][ T27] ? load_image+0x3b0/0x3b0 [ 427.697017][ T27] ? load_image+0x3b0/0x3b0 [ 427.701531][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 427.707614][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 427.713614][ T27] watchdog+0xe0f/0xe50 [ 427.717809][ T27] kthread+0x436/0x520 [ 427.721886][ T27] ? hungtask_pm_notify+0x40/0x40 [ 427.726917][ T27] ? kthread_blkcg+0xd0/0xd0 [ 427.731516][ T27] ret_from_fork+0x1f/0x30 [ 427.735952][ T27] [ 427.739730][ T27] Sending NMI from CPU 1 to CPUs 0: [ 427.745096][ C0] NMI backtrace for cpu 0 [ 427.745108][ C0] CPU: 0 PID: 4532 Comm: kworker/u4:11 Not tainted 5.15.185-syzkaller #0 [ 427.745124][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.745133][ C0] Workqueue: phy10 ieee80211_iface_work [ 427.745153][ C0] RIP: 0010:mark_lock+0xfa/0x320 [ 427.745173][ C0] Code: 31 ff 49 83 c7 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 24 9d 60 00 b8 01 00 00 00 45 85 27 74 50 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 bd 7b 02 85 c0 74 c1 48 c7 [ 427.745185][ C0] RSP: 0018:ffffc9000326f7a8 EFLAGS: 00000082 [ 427.745197][ C0] RAX: 0000000000000001 RBX: ffff88801d4f5940 RCX: ffffffff815c9cb4 [ 427.745207][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff9b1d0 [ 427.745216][ C0] RBP: 0000000000000006 R08: dffffc0000000000 R09: fffffbfff1ff363b [ 427.745226][ C0] R10: fffffbfff1ff363b R11: 1ffffffff1ff363a R12: 0000000000000040 [ 427.745237][ C0] R13: dffffc0000000000 R14: ffff88801d4f6430 R15: ffffffff8f98a290 [ 427.745248][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 427.745260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.745270][ C0] CR2: 00005603bb058950 CR3: 00000000787b6000 CR4: 00000000003506f0 [ 427.745283][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.745291][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.745300][ C0] Call Trace: [ 427.745304][ C0] [ 427.745312][ C0] lockdep_hardirqs_on_prepare+0x365/0x760 [ 427.745331][ C0] ? lock_chain_count+0x20/0x20 [ 427.745348][ C0] ? kasan_quarantine_put+0x39/0x220 [ 427.745372][ C0] trace_hardirqs_on+0x67/0x80 [ 427.745388][ C0] kasan_quarantine_put+0xd4/0x220 [ 427.745403][ C0] slab_free_freelist_hook+0xea/0x170 [ 427.745420][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1888/0x29c0 [ 427.745438][ C0] kfree+0xef/0x2a0 [ 427.745454][ C0] ieee80211_ibss_rx_queued_mgmt+0x1888/0x29c0 [ 427.745480][ C0] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 427.745495][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 427.745514][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 427.745531][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 427.745547][ C0] ? _raw_spin_unlock+0x40/0x40 [ 427.745561][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 427.745582][ C0] ? kcov_remote_start+0xea/0x4a0 [ 427.745598][ C0] ieee80211_iface_work+0x70e/0xc60 [ 427.745619][ C0] process_one_work+0x863/0x1000 [ 427.745640][ C0] ? worker_detach_from_pool+0x240/0x240 [ 427.745655][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 427.745672][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 427.745688][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 427.745706][ C0] ? wq_worker_running+0x97/0x170 [ 427.745720][ C0] worker_thread+0xaa8/0x12a0 [ 427.745746][ C0] kthread+0x436/0x520 [ 427.745759][ C0] ? rcu_lock_release+0x20/0x20 [ 427.745773][ C0] ? kthread_blkcg+0xd0/0xd0 [ 427.745786][ C0] ret_from_fork+0x1f/0x30 [ 427.745807][ C0] [ 427.859546][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 428.106632][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.185-syzkaller #0 [ 428.114617][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.124665][ T27] Call Trace: [ 428.127938][ T27] [ 428.130866][ T27] dump_stack_lvl+0x168/0x230 [ 428.135546][ T27] ? show_regs_print_info+0x20/0x20 [ 428.140739][ T27] ? load_image+0x3b0/0x3b0 [ 428.145242][ T27] panic+0x2c9/0x7f0 [ 428.149128][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 428.154757][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 428.159252][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 428.164815][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 428.170967][ T27] watchdog+0xe4e/0xe50 [ 428.175122][ T27] kthread+0x436/0x520 [ 428.179181][ T27] ? hungtask_pm_notify+0x40/0x40 [ 428.184196][ T27] ? kthread_blkcg+0xd0/0xd0 [ 428.188780][ T27] ret_from_fork+0x1f/0x30 [ 428.193195][ T27] [ 428.196478][ T27] Kernel Offset: disabled [ 428.200812][ T27] Rebooting in 86400 seconds..