last executing test programs: 5m4.202105374s ago: executing program 4 (id=28): syz_clone3(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001440)={0x0, r2, 0x0, 0xf, &(0x7f0000001400)='/dev/vhost-net\x00'}, 0x30) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x1d) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8041) 5m3.807932955s ago: executing program 4 (id=30): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f00000013c0)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 5m3.543839397s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x4081480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x0, 0xff}]}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001880)=ANY=[], 0xfdef) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 4m57.946461466s ago: executing program 4 (id=42): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002140)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) fallocate(0xffffffffffffffff, 0x10, 0x800, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) 4m52.239762025s ago: executing program 4 (id=52): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 4m38.59184501s ago: executing program 4 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 4m22.586975345s ago: executing program 32 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 2m27.188829501s ago: executing program 1 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2m21.269719987s ago: executing program 1 (id=325): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0xfefffff7, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 2m14.367963921s ago: executing program 1 (id=336): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r3 = timerfd_create(0x8, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x90000004}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m12.233910502s ago: executing program 1 (id=338): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getgid() statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000680)) 2m11.126625991s ago: executing program 1 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb7020000422708000000b70300000300000085000000060000009500000079e5321e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 2m10.159307589s ago: executing program 1 (id=345): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) geteuid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0x1f, @private0}}}, 0x3a) io_setup(0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 1m54.486534027s ago: executing program 33 (id=345): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) geteuid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0x1f, @private0}}}, 0x3a) io_setup(0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 1m29.345203786s ago: executing program 3 (id=415): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 1m29.093747226s ago: executing program 3 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x1000000000002, 0x8de, 0x6, 0x5, 0x2000000000000003, 0x400009, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x7, 0xfffffffffffffffd, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x6, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x9, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0x2, 0x1000, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r7, 0x5, 0x8, 0x4000000000d7, 0x7e, 0x2000000c, 0x438, @usage=0x200, 0x800, 0x3d, [0xf42b, 0x4, 0x8, 0xd, 0x54fb, 0x40000000000003fc]}, {0x2, @struct={0xffffffff, 0xd}, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @usage=0x10000, 0x6, 0x9, [0x4, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2) read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2038) keyctl$unlink(0x9, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) 1m26.595569127s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) 1m24.238095716s ago: executing program 3 (id=423): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = timerfd_create(0x8, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x90000004}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m23.105361007s ago: executing program 3 (id=425): creat(&(0x7f00000000c0)='./file0\x00', 0x80) clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) pipe2$9p(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) unlink(&(0x7f0000000000)='./file0\x00') 1m21.267784624s ago: executing program 3 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0) 1m6.004089191s ago: executing program 34 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0) 18.903949362s ago: executing program 5 (id=558): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x38, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 16.955008308s ago: executing program 5 (id=564): r0 = socket$netlink(0x10, 0x3, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@noauto_da_alloc}, {@noblock_validity}, {@commit}, {@abort}]}, 0x1e, 0x528, &(0x7f0000000a80)="$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") r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r1, 0xc00, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x38}}, 0x40840) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0xfd, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0xfffc}}}}}}, 0x0) 13.213280649s ago: executing program 7 (id=573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 13.062102641s ago: executing program 7 (id=574): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@grpid}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpid}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0xf62}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000}}, {@dax_always}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 12.903931684s ago: executing program 2 (id=575): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f000025f000/0x3000)=nil, 0x3000, 0x200001e, 0x10, 0xffffffffffffffff, 0x94659000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x4008884) 11.70350841s ago: executing program 2 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 11.529398114s ago: executing program 2 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x2, 0x2}, {0x6, 0x2}]}]}}}], 0x20}}], 0x1, 0x4040880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0x40080) 11.226699998s ago: executing program 7 (id=579): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x38, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@var, @enum={0x7}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile={0xd}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x66}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 10.046684173s ago: executing program 7 (id=581): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x0, 0x800, 0x7, 0x0}) 9.863803228s ago: executing program 7 (id=582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x23}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') 9.013166156s ago: executing program 6 (id=583): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) 8.686420042s ago: executing program 0 (id=585): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000014c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x20640, 0x131) 8.447834892s ago: executing program 0 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x1, 0x1, 0xd0224dea9e460a0a}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x1000000000002, 0x8de, 0x6, 0x5, 0x2000000000000003, 0x400009, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x7, 0xfffffffffffffffd, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x6, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x9, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0x2, 0x1000, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r7, 0x5, 0x8, 0x4000000000d7, 0x7e, 0x2000000c, 0x438, @usage=0x200, 0x800, 0x3d, [0xf42b, 0x4, 0x8, 0xd, 0x54fb, 0x40000000000003fc]}, {0x2, @struct={0xffffffff, 0xd}, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @usage=0x10000, 0x6, 0x9, [0x4, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2) read$FUSE(r8, &(0x7f00000027c0)={0x2020}, 0x2038) keyctl$unlink(0x9, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) 5.549645304s ago: executing program 0 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESOCT]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000100)) 5.270699957s ago: executing program 5 (id=588): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x8001) 5.219878041s ago: executing program 6 (id=589): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@grpid}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpid}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0xf62}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000}}, {@dax_always}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4.424136705s ago: executing program 0 (id=590): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.549345515s ago: executing program 0 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x51f303, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) pipe2$9p(&(0x7f0000000240), 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x34, 0x65, 0x32, 0x33, 0x33, 0x65, 0x33, 0x39, 0x35, 0x63, 0x0, 0x32, 0x64, 0x39, 0x34]}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 3.530487406s ago: executing program 6 (id=592): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) setrlimit(0xe, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ptrace$getsig(0x4202, r1, 0x4, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") syz_open_dev$usbmon(&(0x7f0000000200), 0x9, 0x20000) 3.35939062s ago: executing program 5 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.332788162s ago: executing program 2 (id=594): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d61736369692c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c616c6c6f775f7574696d653d30303030303030303030303030303030303030353633302c6e66732c756e695f786c6174653d312c00603ce4ce66f6c6a507e7a8757be1fd"], 0x1, 0x271, &(0x7f0000000980)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 2.418053766s ago: executing program 6 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.138964158s ago: executing program 2 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) 2.132543688s ago: executing program 7 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.131922108s ago: executing program 5 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.079235513s ago: executing program 0 (id=599): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) 2.078151613s ago: executing program 6 (id=600): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x38, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@var, @enum={0x7}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile={0xd}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x66}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 1.903798067s ago: executing program 5 (id=601): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde3, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r8, 0x2000, 0x0) pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000003d93000000000000b58d0000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$inet6(0x10, 0x3, 0x0) 698.231784ms ago: executing program 6 (id=602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000115, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 0s ago: executing program 2 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x26, 0x20, 0x67, 0x0, 0x9, 0x2, 0x0, @remote, @broadcast, {[@noop, @ssrr={0x89, 0x3, 0x38}]}}, {0x11, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$key(0xf, 0x3, 0x2) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/sockstat\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 101.238770][ T4401] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.25: error while reading EA inode 1 err=-117 [ 101.259882][ T4401] EXT4-fs (loop4): 1 orphan inode deleted [ 101.266957][ T4401] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 101.540437][ T4410] xt_bpf: check failed: parse error [ 101.574130][ T4410] loop0: detected capacity change from 0 to 1024 [ 101.613380][ T4410] ======================================================= [ 101.613380][ T4410] WARNING: The mand mount option has been deprecated and [ 101.613380][ T4410] and is ignored by this kernel. Remove the mand [ 101.613380][ T4410] option from the mount to silence this warning. [ 101.613380][ T4410] ======================================================= [ 102.524790][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.558679][ T4410] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.643772][ T4414] loop2: detected capacity change from 0 to 1024 [ 102.671547][ T4414] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 102.711524][ T4417] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.27: lblock 3 mapped to illegal pblock 3 (length 3) [ 102.758038][ T4417] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 102.780015][ T4417] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.780015][ T4417] [ 102.801537][ T4414] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 102.878405][ T2302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.897036][ T2302] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.907619][ T2302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.926092][ T2302] usb 2-1: config 0 descriptor?? [ 102.931070][ T4414] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 102.971718][ T4352] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.000254][ T4352] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 103.026439][ T4352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.026439][ T4352] [ 103.144667][ T4426] loop3: detected capacity change from 0 to 128 [ 103.240493][ T4428] Illegal XDP return value 4294967274, expect packet loss! [ 103.504805][ T4435] loop2: detected capacity change from 0 to 1024 [ 103.529442][ T2302] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 103.546513][ T2302] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 103.664245][ T4436] loop0: detected capacity change from 0 to 16 [ 104.616745][ T4435] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 104.667646][ T4436] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.755675][ T4436] attempt to access beyond end of device [ 104.755675][ T4436] loop0: rw=0, want=24, limit=16 [ 104.838597][ T26] audit: type=1326 audit(1754543286.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 105.621747][ T26] audit: type=1326 audit(1754543286.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4430 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 105.693146][ T2302] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 105.736799][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 105.833677][ T2302] usb 2-1: USB disconnect, device number 3 [ 106.967275][ T4447] fido_id[4447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.003442][ T4458] loop1: detected capacity change from 0 to 512 [ 108.400236][ T4458] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.578328][ T4465] loop2: detected capacity change from 0 to 1024 [ 108.651242][ T4465] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.679874][ T4458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.39: inode #1: comm syz.1.39: iget: illegal inode # [ 108.710288][ T4458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.39: error while reading EA inode 1 err=-117 [ 108.859866][ T4458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.39: inode #1: comm syz.1.39: iget: illegal inode # [ 109.051371][ T4458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.39: error while reading EA inode 1 err=-117 [ 109.114880][ T4458] EXT4-fs (loop1): 1 orphan inode deleted [ 109.123305][ T4458] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 109.623398][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 109.668537][ T4478] xt_bpf: check failed: parse error [ 109.777868][ T4478] loop4: detected capacity change from 0 to 1024 [ 109.863531][ T4475] loop0: detected capacity change from 0 to 512 [ 110.720324][ T4488] bridge0: port 3(gretap0) entered blocking state [ 110.728904][ T4488] bridge0: port 3(gretap0) entered disabled state [ 110.779633][ T4488] device gretap0 entered promiscuous mode [ 110.798895][ T4488] bridge0: port 3(gretap0) entered blocking state [ 110.807949][ T4488] bridge0: port 3(gretap0) entered forwarding state [ 111.581298][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.872364][ T4478] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.006058][ T4497] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.42: lblock 0 mapped to illegal pblock 0 (length 1) [ 112.070532][ T4497] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 112.093907][ T4497] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.093907][ T4497] [ 113.388271][ T4500] loop3: detected capacity change from 0 to 512 [ 114.381985][ T4352] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 3) [ 114.573269][ T4352] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 114.599935][ T4352] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.599935][ T4352] [ 114.624120][ T4504] loop1: detected capacity change from 0 to 1024 [ 115.073866][ T4508] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 115.228911][ T4511] loop2: detected capacity change from 0 to 512 [ 115.922240][ T4504] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 115.999388][ T26] audit: type=1326 audit(1754543298.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.056299][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 116.103266][ T26] audit: type=1326 audit(1754543298.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.146046][ T26] audit: type=1326 audit(1754543298.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.186568][ T26] audit: type=1326 audit(1754543298.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.221609][ T26] audit: type=1326 audit(1754543298.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.259413][ T26] audit: type=1326 audit(1754543298.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.302674][ T26] audit: type=1326 audit(1754543298.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 116.382854][ T26] audit: type=1326 audit(1754543298.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 118.398818][ T26] audit: type=1326 audit(1754543298.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 118.427752][ T26] audit: type=1326 audit(1754543298.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4512 comm="syz.0.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b0f0be9 code=0x7ffc0000 [ 118.545880][ T4511] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.561145][ T4511] EXT4-fs: failed to create workqueue [ 118.567825][ T4511] EXT4-fs (loop2): mount failed [ 119.054952][ T4526] loop3: detected capacity change from 0 to 40427 [ 119.200511][ T4526] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.235310][ T4531] loop2: detected capacity change from 0 to 1024 [ 119.262542][ T4526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.324226][ T4531] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 119.477657][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 124.615024][ T4553] xt_bpf: check failed: parse error [ 124.635084][ T4553] loop1: detected capacity change from 0 to 1024 [ 124.748906][ T4553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.763841][ T4553] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.837858][ T4560] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.62: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.901301][ T4560] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.940691][ T4560] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.940691][ T4560] [ 125.101027][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.112887][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.465939][ T4468] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 3) [ 125.488934][ T4468] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 125.504906][ T4468] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.504906][ T4468] [ 125.825787][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.868510][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.207688][ T4578] loop3: detected capacity change from 0 to 512 [ 126.492003][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.506115][ T4578] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.520455][ T4524] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.535365][ T4524] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.554727][ T4524] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.565672][ T4524] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.039599][ T4524] syz.4.52 (4524) used greatest stack depth: 20928 bytes left [ 128.606870][ T4586] loop4: detected capacity change from 0 to 512 [ 128.651186][ T4586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 128.696503][ T4270] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 128.721644][ T4592] loop2: detected capacity change from 0 to 1024 [ 128.805425][ T4592] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 129.045106][ T4586] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.69: inode #1: comm syz.4.69: iget: illegal inode # [ 129.108027][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.118920][ T4586] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.69: error while reading EA inode 1 err=-117 [ 129.123865][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.143299][ T4592] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 129.193791][ T4270] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 129.193826][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.098966][ T4270] usb 1-1: config 0 descriptor?? [ 130.108588][ T4586] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.69: inode #1: comm syz.4.69: iget: illegal inode # [ 130.157574][ T4586] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.69: error while reading EA inode 1 err=-117 [ 130.281811][ T4586] EXT4-fs (loop4): 1 orphan inode deleted [ 130.311836][ T4586] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 131.153144][ T4270] wacom 0003:056A:0317.0002: unknown main item tag 0x0 [ 131.163414][ T4270] wacom 0003:056A:0317.0002: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 131.182083][ T4270] wacom 0003:056A:0317.0002: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.0-1/input0 [ 131.208859][ T4270] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0317.0002/input/input6 [ 131.421318][ T4270] usb 1-1: USB disconnect, device number 2 [ 132.824324][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953796][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.548191][ T4618] loop0: detected capacity change from 0 to 40427 [ 133.582424][ T4613] fido_id[4613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.643605][ T4624] loop1: detected capacity change from 0 to 1024 [ 134.683121][ T4618] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.740617][ T4618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.001325][ T4633] loop2: detected capacity change from 0 to 256 [ 136.142691][ T4624] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 136.169541][ T4188] attempt to access beyond end of device [ 136.169541][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 136.434282][ T4624] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 137.301296][ T4642] bridge0: port 3(gretap0) entered blocking state [ 137.311144][ T4642] bridge0: port 3(gretap0) entered disabled state [ 137.322139][ T4642] device gretap0 entered promiscuous mode [ 137.329297][ T4642] bridge0: port 3(gretap0) entered blocking state [ 137.336931][ T4642] bridge0: port 3(gretap0) entered forwarding state [ 137.744357][ T4647] loop3: detected capacity change from 0 to 256 [ 138.082793][ T4647] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.095609][ T4647] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 138.139065][ T4647] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.173606][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.325438][ T4650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.365164][ T4662] loop1: detected capacity change from 0 to 1024 [ 140.556761][ T4662] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 141.367734][ T4662] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 142.281338][ T4683] loop0: detected capacity change from 0 to 512 [ 143.265117][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.277308][ T4683] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.294270][ T4687] loop3: detected capacity change from 0 to 40427 [ 144.768487][ T4687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.844445][ T4687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.678688][ T4701] loop1: detected capacity change from 0 to 256 [ 146.191426][ T4191] attempt to access beyond end of device [ 146.191426][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 147.345637][ T4709] loop1: detected capacity change from 0 to 1024 [ 147.544726][ T4709] EXT4-fs (loop1): Ignoring removed nobh option [ 147.592034][ T4709] EXT4-fs (loop1): Ignoring removed bh option [ 147.825215][ T4709] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 148.956679][ T4722] xt_bpf: check failed: parse error [ 149.097660][ T4722] loop0: detected capacity change from 0 to 1024 [ 149.283392][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 149.448563][ T2236] Bluetooth: hci5: command 0x0409 tx timeout [ 149.750351][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.147247][ T4722] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.454330][ T4722] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.98: lblock 3 mapped to illegal pblock 3 (length 3) [ 150.511138][ T4737] fuse: Bad value for 'fd' [ 150.527714][ T4722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 150.637929][ T4740] process 'syz.1.100' launched './file0' with NULL argv: empty string added [ 151.267732][ T4722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.267732][ T4722] [ 152.114892][ T4749] loop1: detected capacity change from 0 to 512 [ 152.158246][ T4276] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 152.294054][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.311195][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.331136][ T4749] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.411900][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.631691][ T4707] device bridge_slave_0 entered promiscuous mode [ 152.640967][ T4276] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 152.740931][ T4276] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.740931][ T4276] [ 153.053377][ T4551] Bluetooth: hci5: command 0x041b tx timeout [ 153.784788][ T4756] loop3: detected capacity change from 0 to 512 [ 155.021743][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.031183][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.042731][ T4707] device bridge_slave_1 entered promiscuous mode [ 156.564560][ T4756] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 157.232564][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 157.273226][ T4767] loop3: detected capacity change from 0 to 128 [ 157.365503][ T4767] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.381908][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.456546][ T4767] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.463593][ T4767] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 157.478547][ T4767] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 157.512838][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.278475][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 158.290799][ T4776] loop0: detected capacity change from 0 to 1024 [ 158.306679][ T4767] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.336079][ T4707] team0: Port device team_slave_0 added [ 158.382260][ T4707] team0: Port device team_slave_1 added [ 158.671626][ T4776] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 159.014667][ T4776] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 159.286799][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 159.446179][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.453347][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.521398][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.565315][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.667202][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.702887][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.103458][ T4793] netlink: 68 bytes leftover after parsing attributes in process `syz.3.114'. [ 160.109759][ T4707] device hsr_slave_0 entered promiscuous mode [ 160.152789][ T4707] device hsr_slave_1 entered promiscuous mode [ 160.182055][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.206385][ T4707] Cannot create hsr debugfs directory [ 161.020807][ T4801] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 162.045738][ T4707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.084266][ T4707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.199239][ T4707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.220038][ T4707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.678271][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.751958][ T4830] loop1: detected capacity change from 0 to 40427 [ 162.789117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.843642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.878263][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.900021][ T4830] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.961454][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.970456][ T4830] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.993196][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.016620][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.023822][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.064018][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.229686][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.257623][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.447186][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.454383][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.709738][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.959633][ T4201] attempt to access beyond end of device [ 163.959633][ T4201] loop1: rw=2049, want=45104, limit=40427 [ 164.008066][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.464586][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.510502][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.545865][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.605238][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.637549][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.753833][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.822190][ T4847] loop2: detected capacity change from 0 to 128 [ 164.853124][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.883937][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.913107][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.929680][ T4847] EXT4-fs (loop2): Test dummy encryption mode enabled [ 164.941142][ T4847] EXT4-fs (loop2): Test dummy encryption mode enabled [ 164.951095][ T4847] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 164.964041][ T4847] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 164.973180][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.017072][ T4847] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 165.027190][ T4850] loop0: detected capacity change from 0 to 1024 [ 165.036919][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.042064][ T4847] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.053840][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.182353][ T4850] EXT4-fs (loop0): Ignoring removed nobh option [ 165.230116][ T4850] EXT4-fs (loop0): Ignoring removed bh option [ 165.826975][ T4850] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 167.660310][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.684543][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.958782][ T1273] device hsr_slave_0 left promiscuous mode [ 167.976699][ T1273] device hsr_slave_1 left promiscuous mode [ 167.989517][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.339897][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.372426][ T1273] device bridge_slave_1 left promiscuous mode [ 168.412302][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.519317][ T1273] device bridge_slave_0 left promiscuous mode [ 168.556750][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.103543][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 169.160502][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 169.225150][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.284352][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.304830][ T4904] loop2: detected capacity change from 0 to 40427 [ 169.398973][ T4904] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.447069][ T4904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.518215][ T1273] bond0 (unregistering): Released all slaves [ 169.674920][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.690443][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.703218][ T4887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.274873][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.283363][ T4189] attempt to access beyond end of device [ 171.283363][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 171.480517][ T4920] loop0: detected capacity change from 0 to 1024 [ 171.595460][ T4920] EXT4-fs (loop0): Ignoring removed nobh option [ 171.637296][ T4920] EXT4-fs (loop0): Ignoring removed bh option [ 171.793505][ T4920] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 174.903538][ T4959] loop0: detected capacity change from 0 to 128 [ 175.056111][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.074800][ T4959] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.092605][ T4959] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.099541][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.176460][ T4959] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 175.184952][ T4959] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 175.193834][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.220724][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.252006][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 175.262198][ T4707] device veth0_vlan entered promiscuous mode [ 175.307458][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.317448][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.374263][ T4707] device veth1_vlan entered promiscuous mode [ 175.389560][ T4959] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.704449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.805037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.078557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.175074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.261219][ T4707] device veth0_macvtap entered promiscuous mode [ 176.272364][ T4707] device veth1_macvtap entered promiscuous mode [ 176.302733][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.323709][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.360909][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.426608][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.453754][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.495591][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.527539][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.567486][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.597905][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.637166][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.645672][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.662275][ T4990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.679001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.698715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.764588][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.813822][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.012152][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.073136][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.148274][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.212697][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.276352][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.330085][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.376809][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.416655][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.437626][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.480596][ T4707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.512730][ T4707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.536372][ T4707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.627538][ T4707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.685022][ T4986] loop1: detected capacity change from 0 to 40427 [ 178.902822][ T4986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.082270][ T5017] loop0: detected capacity change from 0 to 1024 [ 179.153070][ T5017] EXT4-fs (loop0): Ignoring removed nobh option [ 179.193267][ T5017] EXT4-fs (loop0): Ignoring removed bh option [ 179.211316][ T4986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.257748][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.277100][ T5017] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 179.304746][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.332134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.328881][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.355182][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.407117][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.812612][ T5042] loop5: detected capacity change from 0 to 1024 [ 180.952255][ T5042] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 181.134565][ T5042] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 181.172396][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.202838][ T5056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.918569][ T5060] bridge0: port 3(gretap0) entered blocking state [ 181.925190][ T5060] bridge0: port 3(gretap0) entered disabled state [ 181.934746][ T5060] device gretap0 entered promiscuous mode [ 181.941712][ T5060] bridge0: port 3(gretap0) entered blocking state [ 181.948405][ T5060] bridge0: port 3(gretap0) entered forwarding state [ 182.597687][ T5065] loop3: detected capacity change from 0 to 128 [ 182.772054][ T5065] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.245845][ T5065] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.294253][ T5065] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 183.375350][ T5065] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 183.468925][ T5065] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 183.659861][ T5065] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.364982][ T5082] loop5: detected capacity change from 0 to 40427 [ 184.922194][ T5092] loop1: detected capacity change from 0 to 1024 [ 185.064398][ T5092] EXT4-fs (loop1): Ignoring removed nobh option [ 185.100180][ T5092] EXT4-fs (loop1): Ignoring removed bh option [ 185.276861][ T5092] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 185.301645][ T5082] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.436711][ T5082] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.906747][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.914485][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.788488][ T5125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.840266][ T4707] attempt to access beyond end of device [ 188.840266][ T4707] loop5: rw=2049, want=45104, limit=40427 [ 190.085199][ T5147] loop1: detected capacity change from 0 to 128 [ 190.312233][ T5147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.358178][ T5147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.393373][ T5156] loop0: detected capacity change from 0 to 1024 [ 190.411148][ T5147] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 190.475086][ T5147] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 190.492099][ T5156] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 190.838134][ T5156] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 190.870425][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 190.896973][ T5147] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.047515][ T5175] bridge0: port 3(gretap0) entered blocking state [ 192.054335][ T5175] bridge0: port 3(gretap0) entered disabled state [ 192.068872][ T5175] device gretap0 entered promiscuous mode [ 192.076743][ T5175] bridge0: port 3(gretap0) entered blocking state [ 192.083580][ T5175] bridge0: port 3(gretap0) entered forwarding state [ 192.993294][ T5182] loop2: detected capacity change from 0 to 40427 [ 193.178232][ T5182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.246453][ T5182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.270994][ T5192] loop0: detected capacity change from 0 to 1024 [ 193.465905][ T5192] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 193.538477][ T5192] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 194.266591][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273153][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.584455][ T4189] attempt to access beyond end of device [ 194.584455][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 197.118023][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.126537][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.148313][ T5232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.197178][ T5241] loop3: detected capacity change from 0 to 1024 [ 197.255292][ T5241] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 197.324221][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 197.624754][ T5249] loop0: detected capacity change from 0 to 128 [ 197.670270][ T5249] EXT4-fs (loop0): Test dummy encryption mode enabled [ 197.694157][ T5249] EXT4-fs (loop0): Test dummy encryption mode enabled [ 197.701998][ T5249] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 197.716403][ T5249] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 199.211221][ T5256] bridge0: port 3(gretap0) entered blocking state [ 199.218437][ T5256] bridge0: port 3(gretap0) entered disabled state [ 199.249612][ T5256] device gretap0 entered promiscuous mode [ 199.261436][ T5256] bridge0: port 3(gretap0) entered blocking state [ 199.267972][ T5256] bridge0: port 3(gretap0) entered forwarding state [ 199.814090][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 200.010692][ T5249] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.066481][ T5267] loop5: detected capacity change from 0 to 40427 [ 201.160056][ T5267] F2FS-fs (loop5): Found nat_bits in checkpoint [ 201.219817][ T5267] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 202.162121][ T4707] attempt to access beyond end of device [ 202.162121][ T4707] loop5: rw=2049, want=45104, limit=40427 [ 202.189247][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 202.195543][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 202.202758][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 202.210180][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 202.361935][ T5304] loop0: detected capacity change from 0 to 1024 [ 202.559207][ T5304] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 202.576582][ T5304] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 202.760869][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.776535][ T5316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.274610][ T5349] loop1: detected capacity change from 0 to 128 [ 207.180496][ T5349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.218309][ T5349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.246607][ T5349] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 207.253965][ T5349] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 207.384806][ T5349] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 207.506657][ T5349] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.901834][ T5379] loop1: detected capacity change from 0 to 40427 [ 209.059465][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.067100][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.095913][ T5389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.665641][ T5379] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.789445][ T5379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.029932][ T4201] attempt to access beyond end of device [ 211.029932][ T4201] loop1: rw=2049, want=45104, limit=40427 [ 212.885928][ T5421] loop3: detected capacity change from 0 to 128 [ 213.086643][ T5421] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.133645][ T5421] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.186120][ T5421] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 213.283249][ T5421] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 213.398035][ T5421] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 213.479161][ T5421] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.807508][ T5434] Zero length message leads to an empty skb [ 216.300827][ T5476] loop0: detected capacity change from 0 to 1024 [ 216.568769][ T5476] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 216.852394][ T5476] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 217.514252][ T5486] loop3: detected capacity change from 0 to 40427 [ 217.906074][ T5486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.035315][ T5486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 219.722885][ T5513] loop5: detected capacity change from 0 to 128 [ 219.854132][ T5513] EXT4-fs (loop5): Test dummy encryption mode enabled [ 219.896253][ T5513] EXT4-fs (loop5): Test dummy encryption mode enabled [ 219.952163][ T5513] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 219.966986][ T5513] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 220.511366][ T5513] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 220.890303][ T5513] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.110000][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.120501][ T5533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.695259][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.720518][ T5593] loop1: detected capacity change from 0 to 128 [ 227.721982][ T5594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.756558][ T5593] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.756622][ T5593] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.756642][ T5593] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 227.756662][ T5593] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 228.023670][ T5595] loop0: detected capacity change from 0 to 40427 [ 228.065503][ T5593] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 228.065639][ T5593] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.411713][ T5595] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.469588][ T5614] loop5: detected capacity change from 0 to 1024 [ 229.469945][ T5595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.648364][ T5614] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 229.805655][ T5614] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 231.271741][ T4188] attempt to access beyond end of device [ 231.271741][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 231.561176][ T5642] loop1: detected capacity change from 0 to 1024 [ 232.572954][ T5642] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 232.606533][ T5642] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 234.585173][ T5676] loop0: detected capacity change from 0 to 256 [ 235.751300][ T5688] loop1: detected capacity change from 0 to 128 [ 235.825014][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.836913][ T5691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.954376][ T5688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 235.966512][ T5688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 235.978217][ T5688] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 235.995461][ T5688] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 236.050049][ T5697] loop0: detected capacity change from 0 to 1024 [ 236.139003][ T5697] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 236.253936][ T5694] loop5: detected capacity change from 0 to 40427 [ 236.270338][ T5688] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 236.277545][ T5697] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 236.290037][ T5688] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.353425][ T5694] F2FS-fs (loop5): Found nat_bits in checkpoint [ 236.399431][ T5694] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 238.671459][ T4707] attempt to access beyond end of device [ 238.671459][ T4707] loop5: rw=2049, want=45104, limit=40427 [ 239.032376][ T5750] loop3: detected capacity change from 0 to 1024 [ 239.082364][ T5750] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 239.156601][ T5750] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 240.789697][ T5770] loop2: detected capacity change from 0 to 256 [ 241.755387][ T5781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.806737][ T5784] loop2: detected capacity change from 0 to 128 [ 241.821320][ T5781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.852891][ T5784] EXT4-fs (loop2): Test dummy encryption mode enabled [ 241.891812][ T5784] EXT4-fs (loop2): Test dummy encryption mode enabled [ 241.933677][ T5784] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 241.976809][ T5784] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 242.063155][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 242.097674][ T5784] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.084482][ T5823] loop2: detected capacity change from 0 to 40427 [ 249.116134][ T5823] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 249.151575][ T5873] loop1: detected capacity change from 0 to 128 [ 249.207055][ T5875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.219487][ T5875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.244000][ T5873] EXT4-fs (loop1): Test dummy encryption mode enabled [ 249.264153][ T5873] EXT4-fs (loop1): Test dummy encryption mode enabled [ 249.276534][ T5873] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 249.316466][ T5873] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 249.368548][ T5873] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 249.396741][ T5873] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.420539][ T5878] loop3: detected capacity change from 0 to 1024 [ 249.445736][ T5878] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 250.921943][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 251.064514][ T5908] loop2: detected capacity change from 0 to 1024 [ 251.583231][ T5908] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 251.708561][ T5908] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 254.733383][ T5940] loop1: detected capacity change from 0 to 512 [ 255.134362][ T5940] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.146157][ T5940] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.683515][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690813][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.038365][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.058504][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.274656][ T5958] loop1: detected capacity change from 0 to 128 [ 257.301284][ T5958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.324458][ T5958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.346441][ T5958] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 257.382846][ T5958] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 257.434813][ T5958] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 257.456410][ T5958] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.682605][ T5950] loop2: detected capacity change from 0 to 40427 [ 258.128990][ T5950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.196031][ T5979] loop3: detected capacity change from 0 to 1024 [ 258.610335][ T5979] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 258.668263][ T5950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 259.103282][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 259.523835][ T5993] loop5: detected capacity change from 0 to 1024 [ 259.636825][ T5993] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 260.893486][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 262.315241][ T6011] loop3: detected capacity change from 0 to 512 [ 263.169383][ T6016] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.290775][ T6011] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 266.045723][ T6027] loop0: detected capacity change from 0 to 128 [ 266.216818][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.061586][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.110060][ T6027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 267.122618][ T6027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 267.131053][ T6027] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 267.166678][ T6027] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 267.335288][ T6027] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 267.549976][ T6027] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.858810][ T6059] loop2: detected capacity change from 0 to 4096 [ 269.893100][ T6062] loop0: detected capacity change from 0 to 1024 [ 270.077194][ T6062] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 270.112668][ T6037] loop5: detected capacity change from 0 to 40427 [ 270.158721][ T6059] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.585413][ T6062] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 270.713123][ T6055] overlayfs: missing 'lowerdir' [ 273.805831][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.100655][ T4271] Bluetooth: hci5: command 0x0406 tx timeout [ 274.332727][ T6090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.828598][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 275.828614][ T26] audit: type=1326 audit(1754543457.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 276.041752][ T26] audit: type=1326 audit(1754543457.950:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 276.137159][ T6114] loop3: detected capacity change from 0 to 1024 [ 276.173755][ T26] audit: type=1326 audit(1754543458.000:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 276.240095][ T26] audit: type=1326 audit(1754543458.000:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 276.321099][ T26] audit: type=1326 audit(1754543458.000:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 276.331106][ T6114] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 276.531071][ T6114] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 278.287502][ T6134] loop2: detected capacity change from 0 to 4096 [ 278.723672][ T6134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.611064][ T6152] loop3: detected capacity change from 0 to 512 [ 280.718300][ T6152] EXT4-fs (loop3): Ignoring removed bh option [ 280.725176][ T6152] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 280.848202][ T6152] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.882634][ T6152] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 280.947015][ T6152] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 280.969958][ T6152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 281.029007][ T6152] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 281.262046][ T6167] loop0: detected capacity change from 0 to 128 [ 281.631488][ T6172] loop2: detected capacity change from 0 to 1024 [ 281.638185][ T26] audit: type=1800 audit(1754543463.660:21): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.357" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 281.742720][ T6172] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 281.841664][ T6172] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 283.421141][ T6187] loop3: detected capacity change from 0 to 512 [ 283.683400][ T6187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.695075][ T6187] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.070625][ T6207] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.501561][ T6211] loop5: detected capacity change from 0 to 256 [ 289.714389][ T6216] loop2: detected capacity change from 0 to 128 [ 290.430718][ T6224] loop5: detected capacity change from 0 to 128 [ 290.519497][ T6224] EXT4-fs (loop5): Test dummy encryption mode enabled [ 290.574196][ T6224] EXT4-fs (loop5): Test dummy encryption mode enabled [ 290.594235][ T6224] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 290.666589][ T6224] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 290.782355][ T6224] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 290.806844][ T6224] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.578703][ T6263] loop5: detected capacity change from 0 to 512 [ 293.030350][ T6263] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.042029][ T6263] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.591255][ T6283] loop0: detected capacity change from 0 to 512 [ 296.042788][ T6283] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.379: missing EA_INODE flag [ 296.056400][ T6283] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.379: error while reading EA inode 11 err=-117 [ 296.072023][ T6283] EXT4-fs (loop0): 1 orphan inode deleted [ 296.077939][ T6283] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 297.090034][ T6290] loop5: detected capacity change from 0 to 256 [ 299.018685][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 299.499749][ T6280] chnl_net:caif_netlink_parms(): no params data found [ 300.133071][ T6316] loop3: detected capacity change from 0 to 128 [ 300.277071][ T6316] EXT4-fs (loop3): Test dummy encryption mode enabled [ 300.284023][ T6316] EXT4-fs (loop3): Test dummy encryption mode enabled [ 300.292443][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.346790][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.357903][ T6316] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 300.365457][ T6316] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 300.387254][ T6316] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 300.396803][ T6280] device bridge_slave_0 entered promiscuous mode [ 300.572703][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.742909][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.813187][ T6316] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.136908][ T6280] device bridge_slave_1 entered promiscuous mode [ 301.230752][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 301.372244][ T6324] loop0: detected capacity change from 0 to 512 [ 301.916320][ T6324] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.387: corrupted inode contents [ 301.938520][ T6324] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.387: mark_inode_dirty error [ 301.962346][ T6324] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.387: corrupted inode contents [ 301.978733][ T6324] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.387: mark_inode_dirty error [ 301.999717][ T6324] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.387: corrupted inode contents [ 302.019328][ T6324] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 302.038035][ T6324] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.387: corrupted inode contents [ 302.056120][ T6324] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.387: mark_inode_dirty error [ 302.068014][ T6324] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 302.083214][ T6324] EXT4-fs (loop0): 1 truncate cleaned up [ 302.094009][ T6324] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.121215][ T6324] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.211077][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.224063][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.283769][ T6280] team0: Port device team_slave_0 added [ 302.300135][ T6280] team0: Port device team_slave_1 added [ 302.456909][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.464068][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.553033][ T6339] loop3: detected capacity change from 0 to 512 [ 302.770689][ T6339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.782312][ T6339] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.214469][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.276383][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 303.554374][ T4276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.934979][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.971498][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.356431][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 305.401959][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.479624][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.498897][ T6352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.580277][ T6280] device hsr_slave_0 entered promiscuous mode [ 305.587258][ T6280] device hsr_slave_1 entered promiscuous mode [ 305.593967][ T6280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.601636][ T6280] Cannot create hsr debugfs directory [ 305.675214][ T4276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.831102][ T6357] loop5: detected capacity change from 0 to 256 [ 305.912441][ T4276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.945085][ T4276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.029720][ T6372] loop3: detected capacity change from 0 to 128 [ 307.432339][ T6372] EXT4-fs (loop3): Test dummy encryption mode enabled [ 307.481875][ T6372] EXT4-fs (loop3): Test dummy encryption mode enabled [ 307.512480][ T6372] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 307.556336][ T6372] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 307.675153][ T6372] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 307.845226][ T6372] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.922016][ T6385] device vlan2 entered promiscuous mode [ 308.927784][ T6385] device bridge0 entered promiscuous mode [ 309.304490][ T6280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.387703][ T6280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.942796][ T6280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.015787][ T6280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.118590][ T6413] loop3: detected capacity change from 0 to 256 [ 310.152382][ T4276] bridge0: port 3(gretap0) entered disabled state [ 310.210311][ T4276] device gretap0 left promiscuous mode [ 310.233992][ T4276] bridge0: port 3(gretap0) entered disabled state [ 310.524698][ T6280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.433770][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.452307][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.615561][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.660953][ T6424] loop3: detected capacity change from 0 to 16 [ 311.879499][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.897098][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.936760][ T5545] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.943877][ T5545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.028895][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.037805][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.056506][ T5545] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.063681][ T5545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.086821][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.368807][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.391152][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.447249][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.535802][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.565410][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.875983][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.927105][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.982259][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.009884][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.022115][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.034459][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.071644][ T6455] loop0: detected capacity change from 0 to 128 [ 314.088362][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.105127][ T26] audit: type=1326 audit(1754543496.220:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 314.133292][ T26] audit: type=1326 audit(1754543496.250:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 314.157249][ T26] audit: type=1326 audit(1754543496.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 314.201164][ T26] audit: type=1326 audit(1754543496.250:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 315.313459][ T6455] EXT4-fs (loop0): Test dummy encryption mode enabled [ 315.337229][ T6455] EXT4-fs (loop0): Test dummy encryption mode enabled [ 315.366435][ T6455] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 315.398518][ T6455] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 315.422586][ T26] audit: type=1326 audit(1754543496.250:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 315.444702][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.482231][ T6455] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 315.523258][ T6455] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.536506][ T26] audit: type=1326 audit(1754543496.250:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 315.802109][ T26] audit: type=1326 audit(1754543496.250:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 316.025433][ T4276] device hsr_slave_0 left promiscuous mode [ 316.032098][ T26] audit: type=1326 audit(1754543496.250:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 316.341853][ T4321] Bluetooth: hci3: command 0x1003 tx timeout [ 316.356714][ T4194] Bluetooth: hci3: sending frame failed (-49) [ 316.363956][ T4276] device hsr_slave_1 left promiscuous mode [ 316.374669][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.394324][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.402013][ T26] audit: type=1326 audit(1754543496.250:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 316.432391][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.441605][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.459830][ T4276] device bridge_slave_1 left promiscuous mode [ 316.466173][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.483458][ T26] audit: type=1326 audit(1754543496.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e01c1be9 code=0x7ffc0000 [ 316.514287][ T4276] device bridge_slave_0 left promiscuous mode [ 316.521598][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.546120][ T4276] device veth1_macvtap left promiscuous mode [ 316.560834][ T4276] device veth0_macvtap left promiscuous mode [ 316.572439][ T4276] device veth1_vlan left promiscuous mode [ 316.582456][ T4276] device veth0_vlan left promiscuous mode [ 316.913602][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 316.931551][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 316.945502][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.962268][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.040988][ T4276] bond0 (unregistering): Released all slaves [ 317.103290][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.113549][ T6461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.121018][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233293][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.243925][ T6465] device vlan2 entered promiscuous mode [ 317.249786][ T6465] device bridge0 entered promiscuous mode [ 317.963777][ T6481] loop5: detected capacity change from 0 to 1024 [ 318.155223][ T6482] loop3: detected capacity change from 0 to 256 [ 319.056797][ T4257] Bluetooth: hci3: command 0x1001 tx timeout [ 319.359694][ T6480] No such timeout policy "syz0" [ 320.010133][ T6481] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.036368][ T4194] Bluetooth: hci3: sending frame failed (-49) [ 320.937924][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.945564][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.061855][ T6280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.371981][ T4321] Bluetooth: hci3: command 0x1009 tx timeout [ 322.599029][ T6515] loop0: detected capacity change from 0 to 1024 [ 322.709753][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.761891][ T6519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.319995][ T6515] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 323.574725][ T6526] loop3: detected capacity change from 0 to 128 [ 323.606103][ T6515] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 323.869467][ T6526] EXT4-fs (loop3): Test dummy encryption mode enabled [ 323.881422][ T6526] EXT4-fs (loop3): Test dummy encryption mode enabled [ 323.926439][ T6526] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 324.226480][ T6526] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 324.371575][ T6526] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 324.491539][ T6526] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.715912][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.750312][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.224378][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.245067][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.406318][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.490564][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.057874][ T6280] device veth0_vlan entered promiscuous mode [ 328.431914][ T6280] device veth1_vlan entered promiscuous mode [ 328.714318][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.728177][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.773627][ T6280] device veth0_macvtap entered promiscuous mode [ 328.821819][ T6280] device veth1_macvtap entered promiscuous mode [ 328.953492][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.976858][ T6577] loop0: detected capacity change from 0 to 40427 [ 329.026316][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.036176][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.086357][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.121368][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.166283][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.176158][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.271716][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.328518][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.337330][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.353048][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.404030][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.438974][ T6577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.454457][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.514828][ T6577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 329.554915][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.628229][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.726304][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.778428][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.795837][ T6593] loop2: detected capacity change from 0 to 512 [ 329.852942][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.196306][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.246292][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.325563][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.439398][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.499566][ T6593] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 330.512846][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.522494][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.526631][ T6593] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.560720][ T6280] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.639935][ T6280] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.676085][ T6280] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.691776][ T6593] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.434: invalid size [ 330.726302][ T6280] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.744421][ T6593] EXT4-fs (loop2): Remounting filesystem read-only [ 330.963868][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.036165][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.102636][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.123178][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.219440][ T6611] loop2: detected capacity change from 0 to 512 [ 331.475701][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.514498][ T6611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.526305][ T6611] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.607524][ T6611] virtiofs: Unknown parameter 'always 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 18 nlmon0 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 20 batadv0 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 21 vxcan0 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 22 vxcan1 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 23 veth0 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 24 veth1 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 25 wg0 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 331.607524][ T6611] 26 wg1 : 1 V3 [ 331.607524][ T6611] 010000E0 1 0:00000000 0 [ 332.071282][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.471174][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 333.471190][ T26] audit: type=1326 audit(1754543515.590:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 333.685883][ T26] audit: type=1326 audit(1754543515.630:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 333.820198][ T26] audit: type=1326 audit(1754543515.630:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.006341][ T26] audit: type=1326 audit(1754543515.630:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.008490][ T6631] loop6: detected capacity change from 0 to 128 [ 334.040297][ T6634] loop2: detected capacity change from 0 to 256 [ 334.129499][ T6634] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.152113][ T26] audit: type=1326 audit(1754543515.630:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.189856][ T6634] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 334.230957][ T6631] EXT4-fs (loop6): Test dummy encryption mode enabled [ 334.253580][ T6634] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 334.288117][ T6631] EXT4-fs (loop6): Test dummy encryption mode enabled [ 334.294955][ T6631] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 334.296565][ T26] audit: type=1326 audit(1754543515.630:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.407799][ T6631] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 334.420975][ T26] audit: type=1326 audit(1754543515.630:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.483808][ T6631] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 334.522758][ T6631] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.657939][ T26] audit: type=1326 audit(1754543515.630:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.848463][ T26] audit: type=1326 audit(1754543515.630:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 334.872244][ T26] audit: type=1326 audit(1754543515.630:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.6.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9737ebe9 code=0x7ffc0000 [ 335.487176][ T6654] device vlan2 entered promiscuous mode [ 335.492802][ T6654] device bridge0 entered promiscuous mode [ 335.631847][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 335.676142][ T6652] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 335.688327][ T6658] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 336.016672][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.037622][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.136807][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.193324][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.584133][ T13] usb 3-1: SerialNumber: syz [ 337.203059][ T13] usb 3-1: 0:2 : does not exist [ 337.223550][ T13] usb 3-1: unit 48 not found! [ 337.664401][ T13] usb 3-1: USB disconnect, device number 2 [ 338.098312][ T4456] udevd[4456]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.673843][ T6705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.700607][ T6705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.120007][ T6713] loop2: detected capacity change from 0 to 512 [ 339.266063][ T6713] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 339.287224][ T6713] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.274727][ T6735] loop6: detected capacity change from 0 to 1024 [ 340.352066][ T6735] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.763042][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.452'. [ 341.126116][ T6741] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 341.135840][ T6741] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 341.145807][ T6741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 341.146597][ T26] audit: type=1800 audit(1754543523.240:59): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.452" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 341.253265][ T6741] syz.6.452 (6741) used greatest stack depth: 18592 bytes left [ 344.760603][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 344.807425][ T6778] 9pnet: Insufficient options for proto=fd [ 345.159886][ T6785] loop6: detected capacity change from 0 to 1024 [ 345.221074][ T6785] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 345.744970][ T6750] chnl_net:caif_netlink_parms(): no params data found [ 345.783205][ T6785] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 346.316204][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.367778][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.401841][ T6750] device bridge_slave_0 entered promiscuous mode [ 346.511544][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.524354][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.549114][ T6750] device bridge_slave_1 entered promiscuous mode [ 346.659702][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.713428][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.796490][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 346.833720][ T6750] team0: Port device team_slave_0 added [ 346.862503][ T6750] team0: Port device team_slave_1 added [ 347.982182][ T4276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.009722][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.023028][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.212237][ T6826] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 349.075428][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.453530][ T4276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.710902][ T4193] Bluetooth: hci2: command 0x040f tx timeout [ 349.844108][ T6837] 9pnet: Insufficient options for proto=fd [ 349.890289][ T6840] loop5: detected capacity change from 0 to 128 [ 349.978594][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.987812][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.015085][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.493993][ T4276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.756346][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 351.870605][ T4276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.053028][ T6857] loop2: detected capacity change from 0 to 512 [ 352.349578][ T6857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.361967][ T6857] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.913382][ T6868] loop0: detected capacity change from 0 to 128 [ 354.040292][ T6867] loop5: detected capacity change from 0 to 1024 [ 354.058594][ T6750] device hsr_slave_0 entered promiscuous mode [ 355.799097][ T6867] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 355.843456][ T6750] device hsr_slave_1 entered promiscuous mode [ 355.867916][ T6867] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 355.892016][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.929593][ T6750] Cannot create hsr debugfs directory [ 356.030535][ T6868] EXT4-fs: failed to create workqueue [ 356.035974][ T6868] EXT4-fs (loop0): mount failed [ 356.334807][ T6871] fuse: Bad value for 'user_id' [ 356.499197][ T6871] loop0: detected capacity change from 0 to 1024 [ 356.670470][ T6871] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 356.716520][ T6871] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 356.769527][ T6886] loop5: detected capacity change from 0 to 256 [ 357.562629][ T6896] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 358.104654][ T6750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 358.150427][ T6750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 358.190207][ T6750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 358.229919][ T6750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 358.854238][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.899986][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.937183][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.995857][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.014927][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.045280][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.055272][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.062569][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.081403][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.153433][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.173775][ T6936] loop5: detected capacity change from 0 to 1024 [ 359.184936][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.221370][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.228536][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.240395][ T6936] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 359.276551][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.285382][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.520086][ T6936] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 359.587046][ T4276] bridge0: port 3(gretap0) entered disabled state [ 360.988532][ T4276] device gretap0 left promiscuous mode [ 361.021790][ T4276] bridge0: port 3(gretap0) entered disabled state [ 361.106910][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.148567][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.195238][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.224903][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.245321][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.282855][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.317995][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.367513][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.394648][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.541363][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.346328][ T6972] loop0: detected capacity change from 0 to 16 [ 362.641300][ T6972] erofs: (device loop0): mounted with root inode @ nid 36. [ 362.678314][ T6972] attempt to access beyond end of device [ 362.678314][ T6972] loop0: rw=0, want=34359738368, limit=16 [ 363.590491][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.045988][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.075394][ T26] audit: type=1326 audit(1754543546.150:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 364.097133][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 364.216363][ T26] audit: type=1326 audit(1754543546.220:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 364.244614][ T4276] device hsr_slave_0 left promiscuous mode [ 364.270396][ T4276] device hsr_slave_1 left promiscuous mode [ 364.360185][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.385461][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.420537][ T26] audit: type=1326 audit(1754543546.220:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 364.443932][ T26] audit: type=1326 audit(1754543546.220:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 364.467798][ T26] audit: type=1326 audit(1754543546.220:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 364.492078][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.622669][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.025266][ T4276] device bridge_slave_1 left promiscuous mode [ 365.136340][ T26] audit: type=1326 audit(1754543546.230:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 365.164285][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.192041][ T4276] device bridge_slave_0 left promiscuous mode [ 365.228568][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.272884][ T26] audit: type=1326 audit(1754543546.230:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 365.328051][ T4276] device veth1_macvtap left promiscuous mode [ 365.334173][ T4276] device veth0_macvtap left promiscuous mode [ 365.335313][ T26] audit: type=1326 audit(1754543546.230:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 365.358665][ T4276] device veth1_vlan left promiscuous mode [ 365.387543][ T4276] device veth0_vlan left promiscuous mode [ 365.455443][ T26] audit: type=1326 audit(1754543546.230:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 365.536427][ T26] audit: type=1326 audit(1754543546.230:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25eaf92be9 code=0x7ffc0000 [ 366.766696][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 366.782782][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 366.797921][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.831132][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.069251][ T4276] bond0 (unregistering): Released all slaves [ 367.871459][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.902741][ T7020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.939701][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.981817][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.877997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.076878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.113690][ T7042] loop6: detected capacity change from 0 to 512 [ 369.127249][ T7041] loop0: detected capacity change from 0 to 512 [ 369.163103][ T6750] device veth0_vlan entered promiscuous mode [ 369.172032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.181323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.197130][ T6750] device veth1_vlan entered promiscuous mode [ 369.321253][ T7046] loop5: detected capacity change from 0 to 256 [ 369.389520][ T7041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 369.418048][ T7042] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #3: comm syz.6.510: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 369.422636][ T6750] device veth0_macvtap entered promiscuous mode [ 369.445930][ T7041] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.658639][ T7042] EXT4-fs error (device loop6): ext4_quota_enable:6418: comm syz.6.510: Bad quota inode: 3, type: 0 [ 369.778783][ T7042] EXT4-fs warning (device loop6): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 370.097203][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.116513][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.132923][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.158762][ T7042] EXT4-fs (loop6): mount failed [ 370.193070][ T6750] device veth1_macvtap entered promiscuous mode [ 370.253051][ T7046] FAT-fs (loop5): Directory bread(block 64) failed [ 370.253574][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.281079][ T7046] FAT-fs (loop5): Directory bread(block 65) failed [ 370.287897][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.303703][ T7046] FAT-fs (loop5): Directory bread(block 66) failed [ 370.314875][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.339855][ T7057] loop2: detected capacity change from 0 to 1024 [ 370.346297][ T7046] FAT-fs (loop5): Directory bread(block 67) failed [ 370.352932][ T7046] FAT-fs (loop5): Directory bread(block 68) failed [ 370.379565][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.386122][ T7057] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 370.396803][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.396828][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.396848][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.396862][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.399040][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.425294][ T7046] FAT-fs (loop5): Directory bread(block 69) failed [ 370.475100][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 370.505442][ T7046] FAT-fs (loop5): Directory bread(block 70) failed [ 370.539190][ T7046] FAT-fs (loop5): Directory bread(block 71) failed [ 370.551334][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.581682][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.581992][ T7046] FAT-fs (loop5): Directory bread(block 72) failed [ 370.597743][ T7046] FAT-fs (loop5): Directory bread(block 73) failed [ 370.613976][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.642575][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.668325][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.685169][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.733017][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.752430][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.765229][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.784835][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.804609][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.833019][ T6750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.883967][ T6750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.986422][ T6750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.010897][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 371.010912][ T26] audit: type=1107 audit(1754543553.130:72): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 371.046418][ T6750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.148405][ T7069] loop6: detected capacity change from 0 to 512 [ 372.056400][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.067404][ T7069] EXT4-fs (loop6): Test dummy encryption mode enabled [ 372.126081][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.266847][ T7069] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.516: inode #1: comm syz.6.516: iget: illegal inode # [ 372.283799][ T7069] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.516: error while reading EA inode 1 err=-117 [ 372.298869][ T7069] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.516: inode #1: comm syz.6.516: iget: illegal inode # [ 372.315030][ T7069] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.516: error while reading EA inode 1 err=-117 [ 372.336166][ T7069] EXT4-fs (loop6): 1 orphan inode deleted [ 372.342119][ T7069] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 372.463633][ T7069] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.516: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 373.948641][ T7083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.971523][ T7083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.554401][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.613514][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.730567][ T7091] loop0: detected capacity change from 0 to 1024 [ 374.827849][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.843062][ T5260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.857086][ T5260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.946917][ T7101] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 375.242450][ T5260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.311596][ T7091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.567006][ T7091] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.783651][ T7111] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.520: lblock 0 mapped to illegal pblock 0 (length 1) [ 375.951220][ T7111] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 375.982114][ T7111] EXT4-fs (loop0): This should not happen!! Data will be lost [ 375.982114][ T7111] [ 376.956980][ T7120] loop7: detected capacity change from 0 to 128 [ 377.004449][ T4312] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 377.066730][ T4312] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 377.187252][ T7120] EXT4-fs (loop7): Ignoring removed nobh option [ 377.625788][ T7120] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 377.846152][ T4312] EXT4-fs (loop0): This should not happen!! Data will be lost [ 377.846152][ T4312] [ 377.898328][ T7120] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.163196][ T7131] option changes via remount are deprecated (pid=7128 comm=syz.6.528) [ 378.559261][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566013][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.891878][ T7134] capability: warning: `syz.0.527' uses deprecated v2 capabilities in a way that may be insecure [ 378.940916][ T7138] loop5: detected capacity change from 0 to 1024 [ 379.079475][ T7138] EXT4-fs (loop5): Ignoring removed orlov option [ 379.163352][ T7134] loop0: detected capacity change from 0 to 4096 [ 379.210291][ T7138] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 379.373781][ T7134] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 381.565555][ T7172] 9pnet: Insufficient options for proto=fd [ 383.343921][ T7205] xt_hashlimit: max too large, truncated to 1048576 [ 383.830021][ T7204] loop0: detected capacity change from 0 to 1024 [ 383.979529][ T7204] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 384.279406][ T7204] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 384.474066][ T7222] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 385.473607][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.550'. [ 386.658279][ T7248] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 386.894479][ T7253] loop2: detected capacity change from 0 to 16 [ 386.943081][ T7254] fuse: Bad value for 'fd' [ 387.189516][ T7253] erofs: (device loop2): mounted with root inode @ nid 36. [ 387.213610][ T7253] attempt to access beyond end of device [ 387.213610][ T7253] loop2: rw=0, want=34359739352, limit=16 [ 387.252195][ T7253] attempt to access beyond end of device [ 387.252195][ T7253] loop2: rw=524288, want=34359739344, limit=16 [ 387.279974][ T7253] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 387.291104][ T7253] attempt to access beyond end of device [ 387.291104][ T7253] loop2: rw=524288, want=34359740336, limit=16 [ 388.593230][ T7275] loop6: detected capacity change from 0 to 1024 [ 388.737910][ T7275] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 388.806788][ T7275] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 390.464380][ T7302] loop5: detected capacity change from 0 to 512 [ 390.514288][ T7299] loop2: detected capacity change from 0 to 2048 [ 390.679280][ T7302] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 390.747326][ T7299] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,delalloc,errors=remount-ro,. Quota mode: none. [ 390.765529][ T7302] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 390.855015][ T7302] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 390.880094][ T7297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 390.937781][ T7302] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 390.945785][ T7302] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0100] [ 391.040396][ T7302] EXT4-fs (loop5): orphan cleanup on readonly fs [ 391.105196][ T7297] EXT4-fs (loop2): Remounting filesystem read-only [ 391.119851][ T7302] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.564: bg 0: block 34: padding at end of block bitmap is not set [ 391.316558][ T7302] Quota error (device loop5): write_blk: dquota write failed [ 391.324546][ T7302] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 391.416394][ T7302] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.564: Failed to acquire dquot type 1 [ 391.466873][ T7302] EXT4-fs (loop5): 1 truncate cleaned up [ 391.515269][ T7302] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,commit=0x0000000000000000,abort,,errors=continue. Quota mode: writeback. [ 391.736439][ T4271] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 391.813448][ T7302] ipt_CLUSTERIP: Please specify destination IP [ 392.026447][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 392.496429][ T4271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.526338][ T4271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.566402][ T4271] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 392.601137][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.659246][ T4271] usb 3-1: config 0 descriptor?? [ 392.695151][ T7345] syz.0.570[7345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.695311][ T7345] syz.0.570[7345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.710919][ T4271] hub 3-1:0.0: USB hub found [ 392.750119][ T7348] loop6: detected capacity change from 0 to 1024 [ 392.793623][ T7348] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 392.846930][ T7348] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 392.921833][ T4271] hub 3-1:0.0: 28 ports detected [ 392.966570][ T4271] hub 3-1:0.0: insufficient power available to use all downstream ports [ 393.128043][ T4271] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 393.141603][ T4271] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 393.287040][ T4271] usbhid 3-1:0.0: can't add hid device: -71 [ 393.293435][ T4271] usbhid: probe of 3-1:0.0 failed with error -71 [ 393.361985][ T4271] usb 3-1: USB disconnect, device number 3 [ 393.406791][ T4302] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 393.475923][ T7364] netem: change failed [ 393.612733][ T7368] loop7: detected capacity change from 0 to 1024 [ 393.666535][ T7368] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 393.686276][ T4302] usb 1-1: Using ep0 maxpacket: 16 [ 393.740954][ T7368] EXT4-fs (loop7): Cannot use DAX on a filesystem that may contain inline data [ 393.986574][ T4302] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 394.482320][ T4302] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 394.922376][ T4302] usb 1-1: config 1 interface 1 has no altsetting 0 [ 395.516627][ T4302] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.525714][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.721705][ T4302] usb 1-1: Product: syz [ 395.725924][ T4302] usb 1-1: Manufacturer: syz [ 395.730926][ T4302] usb 1-1: SerialNumber: syz [ 396.666919][ T4302] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 396.679863][ T4302] usb 1-1: 2:1 : sample bitwidth 9 in over sample bytes 1 [ 396.711548][ T4302] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 396.776378][ T4302] usb 1-1: 2:1 : invalid channels 0 [ 396.860583][ T7407] loop7: detected capacity change from 0 to 1024 [ 396.896465][ T4302] usb 1-1: USB disconnect, device number 3 [ 396.990641][ T7407] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 397.663180][ T4456] udevd[4456]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.693851][ T7407] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 398.215316][ T7431] bridge0: port 3(gretap0) entered blocking state [ 398.345727][ T7435] loop0: detected capacity change from 0 to 256 [ 398.500082][ T7431] bridge0: port 3(gretap0) entered disabled state [ 399.242260][ T7431] device gretap0 entered promiscuous mode [ 399.595552][ T7431] bridge0: port 3(gretap0) entered blocking state [ 399.602142][ T7431] bridge0: port 3(gretap0) entered forwarding state [ 400.188895][ T7435] No such timeout policy "syz0" [ 402.210877][ T7452] loop6: detected capacity change from 0 to 1024 [ 402.246897][ T7452] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 402.255645][ T7452] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 402.534974][ T7457] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 402.606725][ T7457] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 403.102267][ T7469] loop0: detected capacity change from 0 to 4096 [ 403.248665][ T7469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.361331][ T7480] loop6: detected capacity change from 0 to 256 [ 403.404812][ T7469] fs-verity: sha256 using implementation "sha256-avx2" [ 403.461330][ T7481] loop2: detected capacity change from 0 to 128 [ 404.840505][ T7511] loop5: detected capacity change from 0 to 512 [ 406.290790][ T7511] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 406.302485][ T7511] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.926497][ C0] ------------[ cut here ]------------ [ 406.926497][ C1] ------------[ cut here ]------------ [ 406.927296][ C0] WARNING: CPU: 0 PID: 7509 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 406.927344][ C0] Modules linked in: [ 406.927366][ C0] CPU: 0 PID: 7509 Comm: syz.5.601 Not tainted 5.15.189-syzkaller #0 [ 406.927386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.927405][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 406.927429][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 406.927446][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010046 [ 406.927521][ C0] [ 406.927524][ C0] ====================================================== [ 406.927529][ C0] WARNING: possible circular locking dependency detected [ 406.927538][ C0] 5.15.189-syzkaller #0 Not tainted [ 406.927548][ C0] ------------------------------------------------------ [ 406.927553][ C0] syz.5.601/7509 is trying to acquire lock: [ 406.927562][ C0] ffffffff8c110da0 (console_owner){..-.}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 406.927612][ C0] [ 406.927612][ C0] but task is already holding lock: [ 406.927617][ C0] ffff8880b9039b18 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x595/0xd50 [ 406.927660][ C0] [ 406.927660][ C0] which lock already depends on the new lock. [ 406.927660][ C0] [ 406.927665][ C0] [ 406.927665][ C0] the existing dependency chain (in reverse order) is: [ 406.927671][ C0] [ 406.927671][ C0] -> #3 (&pool->lock){-.-.}-{2:2}: [ 406.927695][ C0] _raw_spin_lock+0x2a/0x40 [ 406.927719][ C0] __queue_work+0x413/0xd50 [ 406.927735][ C0] queue_work_on+0x11d/0x1d0 [ 406.927751][ C0] p9_pollwake+0x142/0x160 [ 406.927769][ C0] __wake_up_common+0x2a4/0x4e0 [ 406.927791][ C0] __wake_up+0x108/0x180 [ 406.927809][ C0] n_tty_set_termios+0xc24/0x1090 [ 406.927836][ C0] tty_set_termios+0xd64/0x1760 [ 406.927852][ C0] set_termios+0x83c/0x870 [ 406.927868][ C0] tty_mode_ioctl+0x667/0x870 [ 406.927885][ C0] tty_ioctl+0x8e7/0xc20 [ 406.927916][ C0] __se_sys_ioctl+0xfa/0x170 [ 406.927938][ C0] do_syscall_64+0x4c/0xa0 [ 406.927972][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.928005][ C0] [ 406.928005][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 406.928027][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 406.928046][ C0] __wake_up+0xed/0x180 [ 406.928063][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 406.928081][ C0] serial8250_tx_chars+0x629/0x830 [ 406.928099][ C0] serial8250_handle_irq+0x519/0x610 [ 406.928117][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 406.928155][ C0] serial8250_interrupt+0x9b/0x1c0 [ 406.928173][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 406.928192][ C0] handle_irq_event+0xa5/0x220 [ 406.928210][ C0] handle_edge_irq+0x243/0xb20 [ 406.928231][ C0] __common_interrupt+0xd7/0x1e0 [ 406.928248][ C0] common_interrupt+0xb0/0xd0 [ 406.928263][ C0] asm_common_interrupt+0x22/0x40 [ 406.928280][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 406.928302][ C0] uart_write+0x62f/0x880 [ 406.928317][ C0] n_tty_write+0xd21/0x1210 [ 406.928337][ C0] file_tty_write+0x557/0x910 [ 406.928355][ C0] vfs_write+0x712/0xd00 [ 406.928371][ C0] ksys_write+0x14d/0x250 [ 406.928387][ C0] do_syscall_64+0x4c/0xa0 [ 406.928407][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.928428][ C0] [ 406.928428][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 406.928453][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 406.928475][ C0] serial8250_console_write+0x170/0xf80 [ 406.928505][ C0] console_unlock+0xc86/0x1200 [ 406.928524][ C0] vprintk_emit+0xc0/0x150 [ 406.928542][ C0] _printk+0xcc/0x110 [ 406.928559][ C0] register_console+0x682/0x960 [ 406.928574][ C0] univ8250_console_init+0x41/0x50 [ 406.928592][ C0] console_init+0x177/0x5d0 [ 406.928607][ C0] start_kernel+0x2f9/0x530 [ 406.928623][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 406.928642][ C0] [ 406.928642][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 406.928664][ C0] __lock_acquire+0x2c33/0x7c60 [ 406.928683][ C0] lock_acquire+0x197/0x3f0 [ 406.928701][ C0] console_trylock_spinning+0x170/0x350 [ 406.928721][ C0] vprintk_emit+0xa7/0x150 [ 406.928740][ C0] _printk+0xcc/0x110 [ 406.928757][ C0] __show_regs+0x57/0x500 [ 406.928773][ C0] show_regs+0x32/0x60 [ 406.928787][ C0] __warn+0x15e/0x2b0 [ 406.928802][ C0] report_bug+0x1b7/0x2e0 [ 406.928820][ C0] handle_bug+0x3a/0x70 [ 406.928834][ C0] exc_invalid_op+0x16/0x40 [ 406.928849][ C0] asm_exc_invalid_op+0x16/0x20 [ 406.928863][ C0] copy_from_user_nofault+0x160/0x1c0 [ 406.928883][ C0] bpf_probe_read_compat+0xdd/0x170 [ 406.928906][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x6a4 [ 406.928921][ C0] bpf_trace_run1+0x153/0x2d0 [ 406.928942][ C0] trace_workqueue_activate_work+0x13e/0x1a0 [ 406.928960][ C0] __queue_work+0x8ec/0xd50 [ 406.928973][ C0] rcu_work_rcufn+0xcf/0x110 [ 406.928990][ C0] rcu_core+0x962/0x15d0 [ 406.929005][ C0] handle_softirqs+0x328/0x820 [ 406.929021][ C0] __irq_exit_rcu+0x12f/0x220 [ 406.929036][ C0] irq_exit_rcu+0x5/0x20 [ 406.929051][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 406.929087][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 406.929105][ C0] lock_acquire+0x1f2/0x3f0 [ 406.929124][ C0] local_lock_acquire+0x34/0x170 [ 406.929143][ C0] lru_cache_add+0x3bc/0x750 [ 406.929163][ C0] wp_page_copy+0xde8/0x1fd0 [ 406.929181][ C0] handle_mm_fault+0x1eca/0x43c0 [ 406.929198][ C0] do_user_addr_fault+0x489/0xc80 [ 406.929218][ C0] exc_page_fault+0x60/0x100 [ 406.929235][ C0] asm_exc_page_fault+0x22/0x30 [ 406.929252][ C0] __put_user_nocheck_4+0x3/0x11 [ 406.929271][ C0] ____sys_recvmsg+0x35d/0x580 [ 406.929290][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 406.929308][ C0] do_recvmmsg+0x344/0x7a0 [ 406.929326][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 406.929345][ C0] do_syscall_64+0x4c/0xa0 [ 406.929366][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.929388][ C0] [ 406.929388][ C0] other info that might help us debug this: [ 406.929388][ C0] [ 406.929394][ C0] Chain exists of: [ 406.929394][ C0] console_owner --> &tty->write_wait --> &pool->lock [ 406.929394][ C0] [ 406.929422][ C0] Possible unsafe locking scenario: [ 406.929422][ C0] [ 406.929426][ C0] CPU0 CPU1 [ 406.929431][ C0] ---- ---- [ 406.929435][ C0] lock(&pool->lock); [ 406.929445][ C0] lock(&tty->write_wait); [ 406.929458][ C0] lock(&pool->lock); [ 406.929469][ C0] lock(console_owner); [ 406.929480][ C0] [ 406.929480][ C0] *** DEADLOCK *** [ 406.929480][ C0] [ 406.929484][ C0] 7 locks held by syz.5.601/7509: [ 406.929495][ C0] #0: ffff888060328f28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2b9/0xc80 [ 406.929542][ C0] #1: ffff88802c23eaf8 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: wp_page_copy+0x6d0/0x1fd0 [ 406.929590][ C0] #2: ffff8880b9035528 (lock#5){+.+.}-{2:2}, at: local_lock_acquire+0xe/0x170 [ 406.929640][ C0] #3: ffffffff8c11c480 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20 [ 406.929684][ C0] #4: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 406.929727][ C0] #5: ffff8880b9039b18 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x595/0xd50 [ 406.929769][ C0] #6: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 406.929810][ C0] [ 406.929810][ C0] stack backtrace: [ 406.929815][ C0] CPU: 0 PID: 7509 Comm: syz.5.601 Not tainted 5.15.189-syzkaller #0 [ 406.929834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.929845][ C0] Call Trace: [ 406.929852][ C0] [ 406.929859][ C0] dump_stack_lvl+0x168/0x230 [ 406.929880][ C0] ? load_image+0x3b0/0x3b0 [ 406.929907][ C0] ? show_regs_print_info+0x20/0x20 [ 406.929933][ C0] ? print_circular_bug+0x12b/0x1a0 [ 406.929953][ C0] check_noncircular+0x274/0x310 [ 406.929973][ C0] ? add_chain_block+0x940/0x940 [ 406.929990][ C0] ? lockdep_lock+0x141/0x1e0 [ 406.930013][ C0] ? data_alloc+0x4c6/0x7b0 [ 406.930031][ C0] ? mark_lock+0x94/0x320 [ 406.930051][ C0] ? mark_lock+0x94/0x320 [ 406.930073][ C0] ? _find_first_zero_bit+0xce/0xf0 [ 406.930096][ C0] __lock_acquire+0x2c33/0x7c60 [ 406.930129][ C0] ? down_trylock+0x4c/0xa0 [ 406.930150][ C0] ? verify_lock_unused+0x140/0x140 [ 406.930172][ C0] ? verify_lock_unused+0x140/0x140 [ 406.930194][ C0] ? __rwlock_init+0x140/0x140 [ 406.930214][ C0] ? _prb_commit+0x289/0x340 [ 406.930232][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 406.930252][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 406.930276][ C0] ? _raw_spin_unlock+0x40/0x40 [ 406.930301][ C0] lock_acquire+0x197/0x3f0 [ 406.930321][ C0] ? console_trylock_spinning+0x150/0x350 [ 406.930346][ C0] ? console_trylock_spinning+0x150/0x350 [ 406.930370][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 406.930391][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 406.930410][ C0] ? read_lock_is_recursive+0x10/0x10 [ 406.930434][ C0] ? __rwlock_init+0x140/0x140 [ 406.930451][ C0] ? console_trylock_spinning+0x249/0x350 [ 406.930473][ C0] ? vprintk_emit+0x150/0x150 [ 406.930496][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 406.930517][ C0] console_trylock_spinning+0x170/0x350 [ 406.930540][ C0] ? console_trylock_spinning+0x150/0x350 [ 406.930562][ C0] ? vprintk_emit+0x150/0x150 [ 406.930587][ C0] ? vprintk_emit+0xf9/0x150 [ 406.930609][ C0] ? irq_work_queue+0xbf/0x140 [ 406.930633][ C0] vprintk_emit+0xa7/0x150 [ 406.930657][ C0] _printk+0xcc/0x110 [ 406.930679][ C0] ? load_image+0x3b0/0x3b0 [ 406.930700][ C0] ? show_opcodes+0x105/0x120 [ 406.930722][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 406.930745][ C0] __show_regs+0x57/0x500 [ 406.930764][ C0] ? dump_stack_print_info+0xf1/0x150 [ 406.930784][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 406.930805][ C0] show_regs+0x32/0x60 [ 406.930824][ C0] __warn+0x15e/0x2b0 [ 406.930843][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 406.930864][ C0] report_bug+0x1b7/0x2e0 [ 406.930888][ C0] handle_bug+0x3a/0x70 [ 406.930910][ C0] exc_invalid_op+0x16/0x40 [ 406.930928][ C0] asm_exc_invalid_op+0x16/0x20 [ 406.930945][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 406.930969][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 406.930987][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00010046 [ 406.931003][ C0] RAX: ffffffff819ecfb0 RBX: 0000000000000000 RCX: ffff88801d4dbb80 [ 406.931017][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.931030][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003a9b771 [ 406.931043][ C0] R10: ffffed1003a9b771 R11: 1ffff11003a9b770 R12: ffff88801d4dd308 [ 406.931059][ C0] R13: 00007ffffffff000 R14: ffffc90000007968 R15: 0000000020000000 [ 406.931078][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 406.931104][ C0] bpf_probe_read_compat+0xdd/0x170 [ 406.931128][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x6a4 [ 406.931144][ C0] bpf_trace_run1+0x153/0x2d0 [ 406.931168][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 406.931190][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 406.931210][ C0] ? __rwlock_init+0x140/0x140 [ 406.931230][ C0] trace_workqueue_activate_work+0x13e/0x1a0 [ 406.931254][ C0] __queue_work+0x8ec/0xd50 [ 406.931276][ C0] rcu_work_rcufn+0xcf/0x110 [ 406.931295][ C0] ? queue_rcu_work+0x90/0x90 [ 406.931314][ C0] ? debug_object_deactivate+0x63/0x340 [ 406.931340][ C0] rcu_core+0x962/0x15d0 [ 406.931358][ C0] ? lock_chain_count+0x20/0x20 [ 406.931404][ C0] ? local_bh_disable+0x20/0x20 [ 406.931422][ C0] ? __run_timers+0x770/0x7c0 [ 406.931444][ C0] ? __run_timers+0x73d/0x7c0 [ 406.931471][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 406.931495][ C0] ? detach_timer+0x2b0/0x2b0 [ 406.931517][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 406.931537][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 406.931564][ C0] handle_softirqs+0x328/0x820 [ 406.931584][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 406.931606][ C0] ? do_softirq+0x200/0x200 [ 406.931628][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 406.931650][ C0] __irq_exit_rcu+0x12f/0x220 [ 406.931669][ C0] ? irq_exit_rcu+0x20/0x20 [ 406.931694][ C0] irq_exit_rcu+0x5/0x20 [ 406.931711][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 406.931732][ C0] [ 406.931738][ C0] [ 406.931744][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 406.931765][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 406.931787][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 406.931805][ C0] RSP: 0018:ffffc900031df280 EFLAGS: 00000206 [ 406.931821][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: acbafdf2b2f60200 [ 406.931834][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 406.931849][ C0] RBP: ffffc900031df3a0 R08: dffffc0000000000 R09: fffffbfff1ff6e21 [ 406.931865][ C0] R10: fffffbfff1ff6e21 R11: 1ffffffff1ff6e20 R12: ffff8880b9035528 [ 406.931880][ C0] R13: 1ffff9200063be5c R14: 0000000000000246 R15: dffffc0000000000 [ 406.931914][ C0] ? rcu_lock_acquire+0x30/0x30 [ 406.931934][ C0] ? read_lock_is_recursive+0x10/0x10 [ 406.931959][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 406.931985][ C0] ? __mod_lruvec_page_state+0x1fe/0x330 [ 406.932010][ C0] local_lock_acquire+0x34/0x170 [ 406.932032][ C0] ? local_lock_acquire+0xe/0x170 [ 406.932055][ C0] lru_cache_add+0x3bc/0x750 [ 406.932080][ C0] wp_page_copy+0xde8/0x1fd0 [ 406.932099][ C0] ? do_wp_page+0x902/0xad0 [ 406.932125][ C0] ? insert_page_into_pte_locked+0x480/0x480 [ 406.932144][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 406.932166][ C0] ? _raw_spin_unlock+0x24/0x40 [ 406.932187][ C0] ? do_wp_page+0x902/0xad0 [ 406.932210][ C0] handle_mm_fault+0x1eca/0x43c0 [ 406.932238][ C0] ? get_page+0xe0/0xe0 [ 406.932255][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 406.932283][ C0] ? vmacache_find+0x238/0x590 [ 406.932306][ C0] ? find_vma+0xd2/0x230 [ 406.932327][ C0] do_user_addr_fault+0x489/0xc80 [ 406.932357][ C0] exc_page_fault+0x60/0x100 [ 406.932378][ C0] asm_exc_page_fault+0x22/0x30 [ 406.932396][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 406.932419][ C0] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 406.932436][ C0] RSP: 0018:ffffc900031df8f8 EFLAGS: 00050246 [ 406.932450][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000020000088c030 [ 406.932464][ C0] RDX: ffffc900031dfd90 RSI: 0000000000000002 RDI: 00000000ffffffff [ 406.932478][ C0] RBP: ffffc900031dfa90 R08: dffffc0000000000 R09: fffff5200063bedd [ 406.932494][ C0] R10: fffff5200063bedd R11: 1ffff9200063bedc R12: dffffc0000000000 [ 406.932510][ C0] R13: 000020000088c000 R14: 0000000000000000 R15: 0000000000000000 [ 406.932532][ C0] ____sys_recvmsg+0x35d/0x580 [ 406.932557][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 406.932589][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 406.932619][ C0] ? import_iovec+0x6f/0xa0 [ 406.932642][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 406.932665][ C0] ? __sys_recvmsg+0x250/0x250 [ 406.932698][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 406.932722][ C0] ? do_recvmmsg+0x35c/0x7a0 [ 406.932743][ C0] ? __might_fault+0xb3/0x110 [ 406.932764][ C0] do_recvmmsg+0x344/0x7a0 [ 406.932789][ C0] ? __sys_recvmmsg+0x280/0x280 [ 406.932818][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 406.932847][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 406.932869][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 406.932892][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 406.932919][ C0] do_syscall_64+0x4c/0xa0 [ 406.932940][ C0] ? clear_bhb_loop+0x30/0x80 [ 406.932958][ C0] ? clear_bhb_loop+0x30/0x80 [ 406.932976][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.932984][ C1] WARNING: CPU: 1 PID: 7492 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 406.932999][ C0] RIP: 0033:0x7fd5a094ebe9 [ 406.933015][ C1] Modules linked in: [ 406.933015][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.933024][ C1] CPU: 1 PID: 7492 Comm: dhcpcd-run-hook Not tainted 5.15.189-syzkaller #0 [ 406.933030][ C0] RSP: 002b:00007fd59eb95038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 406.933042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.933048][ C0] RAX: ffffffffffffffda RBX: 00007fd5a0b76090 RCX: 00007fd5a094ebe9 [ 406.933053][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 406.933061][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000005 [ 406.933074][ C0] RBP: 00007fd5a09d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.933075][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 406.933085][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 406.933091][ C1] RSP: 0018:ffffc90000dd0930 EFLAGS: 00010046 [ 406.933096][ C0] R13: 00007fd5a0b76128 R14: 00007fd5a0b76090 R15: 00007fff4dc90ff8 [ 406.933103][ C1] [ 406.933108][ C1] RAX: ffffffff819ecfb0 RBX: 0000000000000000 RCX: ffff888025e60000 [ 406.933123][ C0] [ 406.933121][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.933133][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1004bcc001 [ 406.938595][ C0] RAX: ffffffff819ecfb0 RBX: 0000000000000000 RCX: ffff88801d4dbb80 [ 406.947856][ C1] R10: ffffed1004bcc001 R11: 1ffff11004bcc000 R12: ffff888025e61788 [ 406.951744][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.959814][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0968 R15: 0000000020000000 [ 406.969858][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003a9b771 [ 406.975994][ C1] FS: 00007fcd13829c80(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 406.995585][ C0] R10: ffffed1003a9b771 R11: 1ffff11003a9b770 R12: ffff88801d4dd308 [ 407.001638][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.003953][ C0] R13: 00007ffffffff000 R14: ffffc90000007968 R15: 0000000020000000 [ 407.010956][ C1] CR2: 00005606b6f38138 CR3: 000000007aa6f000 CR4: 00000000003506e0 [ 407.017962][ C0] FS: 00007fd59eb956c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 407.023154][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.030156][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.036029][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.045809][ C0] CR2: 000020000088c030 CR3: 00000000625fd000 CR4: 00000000003506f0 [ 407.053171][ C1] Call Trace: [ 407.053180][ C1] [ 407.061794][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.072185][ C1] bpf_probe_read_compat+0xdd/0x170 [ 407.081180][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.088449][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0x6a4 [ 407.093452][ C0] Call Trace: [ 407.093458][ C0] [ 407.098457][ C1] bpf_trace_run1+0x153/0x2d0 [ 407.103550][ C0] bpf_probe_read_compat+0xdd/0x170 [ 407.108500][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 407.113862][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x6a4 [ 407.118614][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 407.124149][ C0] bpf_trace_run1+0x153/0x2d0 [ 407.129513][ C1] ? __rwlock_init+0x140/0x140 [ 407.134443][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 407.139627][ C1] trace_workqueue_activate_work+0x13e/0x1a0 [ 407.144374][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 407.149483][ C1] __queue_work+0x8ec/0xd50 [ 407.154405][ C0] ? __rwlock_init+0x140/0x140 [ 407.160807][ C1] rcu_work_rcufn+0xcf/0x110 [ 407.168527][ C0] trace_workqueue_activate_work+0x13e/0x1a0 [ 407.174232][ C1] ? queue_rcu_work+0x90/0x90 [ 407.178893][ C0] __queue_work+0x8ec/0xd50 [ 407.184682][ C1] ? debug_object_deactivate+0x63/0x340 [ 407.190391][ C0] rcu_work_rcufn+0xcf/0x110 [ 407.196186][ C1] rcu_core+0x962/0x15d0 [ 407.202584][ C0] ? queue_rcu_work+0x90/0x90 [ 407.208210][ C1] ? local_bh_disable+0x20/0x20 [ 407.214343][ C0] ? debug_object_deactivate+0x63/0x340 [ 407.219613][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 407.224888][ C0] rcu_core+0x962/0x15d0 [ 407.230327][ C1] ? mark_lock+0x94/0x320 [ 407.235509][ C0] ? lock_chain_count+0x20/0x20 [ 407.241039][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 407.247266][ C0] ? local_bh_disable+0x20/0x20 [ 407.252098][ C1] ? lock_chain_count+0x20/0x20 [ 407.257107][ C0] ? __run_timers+0x770/0x7c0 [ 407.262295][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 407.267047][ C0] ? __run_timers+0x73d/0x7c0 [ 407.271883][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 407.276810][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 407.283216][ C1] handle_softirqs+0x328/0x820 [ 407.290741][ C0] ? detach_timer+0x2b0/0x2b0 [ 407.296540][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 407.302593][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 407.307867][ C1] ? do_softirq+0x200/0x200 [ 407.312792][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 407.317290][ C1] __irq_exit_rcu+0x12f/0x220 [ 407.322652][ C0] handle_softirqs+0x328/0x820 [ 407.328263][ C1] ? irq_exit_rcu+0x20/0x20 [ 407.333273][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 407.338285][ C1] irq_exit_rcu+0x5/0x20 [ 407.344677][ C0] ? do_softirq+0x200/0x200 [ 407.352112][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 407.357468][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 407.362483][ C1] [ 407.368551][ C0] __irq_exit_rcu+0x12f/0x220 [ 407.373600][ C1] [ 407.373614][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.378108][ C0] ? irq_exit_rcu+0x20/0x20 [ 407.383061][ C1] RIP: 0010:preempt_count_add+0x0/0x190 [ 407.387653][ C0] irq_exit_rcu+0x5/0x20 [ 407.392142][ C1] Code: 24 80 e1 07 80 c1 03 38 c1 7c 97 48 8b 3c 24 e8 d6 b8 6a 00 eb 8c e9 f5 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <41> 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 60 df 0b 96 [ 407.396977][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 407.401646][ C1] RSP: 0018:ffffc900031ef480 EFLAGS: 00000202 [ 407.406661][ C0] [ 407.412031][ C1] [ 407.412037][ C1] RAX: 0000000000000001 RBX: ffffc900031ef548 RCX: 0000000080000001 [ 407.417915][ C0] [ 407.417924][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.423619][ C1] RDX: dffffc0000000000 RSI: ffffffff81469bb9 RDI: 0000000000000001 [ 407.429673][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 407.434855][ C1] RBP: ffffc900031ef590 R08: ffffc900031ef610 R09: 0000000000000005 [ 407.434869][ C1] R10: fffff5200063deb5 R11: 1ffff9200063deb3 R12: ffffffff81469bb9 [ 407.434880][ C1] R13: ffffc900031efca0 R14: dffffc0000000000 R15: 1ffff9200063dea9 [ 407.434894][ C1] ? kernel_clone+0x219/0x930 [ 407.441373][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 407.446389][ C1] ? kernel_clone+0x219/0x930 [ 407.451487][ C0] RSP: 0018:ffffc900031df280 EFLAGS: 00000206 [ 407.456240][ C1] unwind_next_frame+0xac/0x1d90 [ 407.461509][ C0] [ 407.461515][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: acbafdf2b2f60200 [ 407.466701][ C1] ? kernel_clone+0x219/0x930 [ 407.471453][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 407.477597][ C1] ? stack_trace_save+0xe0/0xe0 [ 407.484094][ C0] RBP: ffffc900031df3a0 R08: dffffc0000000000 R09: fffffbfff1ff6e21 [ 407.489111][ C1] arch_stack_walk+0x10c/0x140 [ 407.494555][ C0] R10: fffffbfff1ff6e21 R11: 1ffffffff1ff6e20 R12: ffff8880b9035528 [ 407.499653][ C1] ? kernel_clone+0x219/0x930 [ 407.504746][ C0] R13: 1ffff9200063be5c R14: 0000000000000246 R15: dffffc0000000000 [ 407.510194][ C1] stack_trace_save+0x98/0xe0 [ 407.515731][ C0] ? rcu_lock_acquire+0x30/0x30 [ 407.520814][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 407.526172][ C0] ? read_lock_is_recursive+0x10/0x10 [ 407.531616][ C1] ? verify_lock_unused+0x140/0x140 [ 407.536885][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 407.542068][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 407.546994][ C0] ? __mod_lruvec_page_state+0x1fe/0x330 [ 407.552524][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 407.557460][ C0] local_lock_acquire+0x34/0x170 [ 407.563854][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 407.574073][ C0] ? local_lock_acquire+0xe/0x170 [ 407.586641][ C1] ? kmem_cache_alloc+0x100/0x290 [ 407.594106][ C0] lru_cache_add+0x3bc/0x750 [ 407.599476][ C1] ? copy_mm+0x8b1/0x1370 [ 407.604834][ C0] wp_page_copy+0xde8/0x1fd0 [ 407.608882][ C1] ? copy_process+0x17c6/0x3e00 [ 407.615884][ C0] ? do_wp_page+0x902/0xad0 [ 407.622456][ C1] ? kernel_clone+0x219/0x930 [ 407.626690][ C0] ? insert_page_into_pte_locked+0x480/0x480 [ 407.634843][ C1] slab_post_alloc_hook+0x4c/0x380 [ 407.639830][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 407.649612][ C1] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 407.659315][ C0] ? _raw_spin_unlock+0x24/0x40 [ 407.668234][ C1] ? copy_mm+0x8b1/0x1370 [ 407.677410][ C0] ? do_wp_page+0x902/0xad0 [ 407.686689][ C1] kmem_cache_alloc+0x100/0x290 [ 407.695701][ C0] handle_mm_fault+0x1eca/0x43c0 [ 407.704967][ C1] copy_mm+0x8b1/0x1370 [ 407.710859][ C0] ? get_page+0xe0/0xe0 [ 407.718909][ C1] ? copy_signal+0x640/0x640 [ 407.728949][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 407.732228][ C1] ? __init_rwsem+0x11e/0x160 [ 407.735072][ C0] ? vmacache_find+0x238/0x590 [ 407.739731][ C1] ? copy_signal+0x537/0x640 [ 407.744221][ C0] ? find_vma+0xd2/0x230 [ 407.749411][ C1] copy_process+0x17c6/0x3e00 [ 407.754600][ C0] do_user_addr_fault+0x489/0xc80 [ 407.759560][ C1] ? __pidfd_prepare+0x140/0x140 [ 407.764478][ C0] exc_page_fault+0x60/0x100 [ 407.769138][ C1] kernel_clone+0x219/0x930 [ 407.773633][ C0] asm_exc_page_fault+0x22/0x30 [ 407.777952][ C1] ? create_io_thread+0x130/0x130 [ 407.782270][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 407.787462][ C1] ? __context_tracking_exit+0x4c/0x80 [ 407.792292][ C0] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 407.796781][ C1] __x64_sys_clone+0x170/0x1c0 [ 407.801963][ C0] RSP: 0018:ffffc900031df8f8 EFLAGS: 00050246 [ 407.807153][ C1] ? __ia32_sys_vfork+0xf0/0xf0 [ 407.811900][ C0] [ 407.811906][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000020000088c030 [ 407.816485][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 407.821665][ C0] RDX: ffffc900031dfd90 RSI: 0000000000000002 RDI: 00000000ffffffff [ 407.827557][ C1] do_syscall_64+0x4c/0xa0 [ 407.832494][ C0] RBP: ffffc900031dfa90 R08: dffffc0000000000 R09: fffff5200063bedd [ 407.836990][ C1] ? clear_bhb_loop+0x30/0x80 [ 407.842694][ C0] R10: fffff5200063bedd R11: 1ffff9200063bedc R12: dffffc0000000000 [ 407.848396][ C1] ? clear_bhb_loop+0x30/0x80 [ 407.853403][ C0] R13: 000020000088c000 R14: 0000000000000000 R15: 0000000000000000 [ 407.858418][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.863781][ C0] ____sys_recvmsg+0x35d/0x580 [ 407.868526][ C1] RIP: 0033:0x7fcd139c3636 [ 407.874236][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 407.878896][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 407.884078][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 407.889603][ C1] RSP: 002b:00007fffff1f6d20 EFLAGS: 00000246 [ 407.895318][ C0] ? import_iovec+0x6f/0xa0 [ 407.899971][ C1] ORIG_RAX: 0000000000000038 [ 407.904545][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 407.909292][ C1] RAX: ffffffffffffffda RBX: 00007fffff1f6d28 RCX: 00007fcd139c3636 [ 407.913704][ C0] ? __sys_recvmsg+0x250/0x250 [ 407.917672][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 407.922173][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 407.926823][ C1] RBP: 00005606b6f27e60 R08: 0000000000000000 R09: 00005606b6f27c30 [ 407.932379][ C0] ? do_recvmmsg+0x35c/0x7a0 [ 407.936691][ C1] R10: 00007fcd13829f50 R11: 0000000000000246 R12: 00005606b6f2bc30 [ 407.942053][ C0] ? __might_fault+0xb3/0x110 [ 407.947581][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.951639][ C0] do_recvmmsg+0x344/0x7a0 [ 407.955635][ C1] [ 407.961165][ C0] ? __sys_recvmmsg+0x280/0x280 [ 407.965493][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.969621][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 407.974119][ C1] CPU: 1 PID: 7492 Comm: dhcpcd-run-hook Not tainted 5.15.189-syzkaller #0 [ 407.978963][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 407.985121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.004716][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 408.010816][ C1] Call Trace: [ 408.010824][ C1] [ 408.018782][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 408.026740][ C1] dump_stack_lvl+0x168/0x230 [ 408.034708][ C0] do_syscall_64+0x4c/0xa0 [ 408.042675][ C1] ? show_regs_print_info+0x20/0x20 [ 408.050633][ C0] ? clear_bhb_loop+0x30/0x80 [ 408.056192][ C1] ? load_image+0x3b0/0x3b0 [ 408.061372][ C0] ? clear_bhb_loop+0x30/0x80 [ 408.066910][ C1] panic+0x2c9/0x7f0 [ 408.071570][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.076934][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 408.081953][ C0] RIP: 0033:0x7fd5a094ebe9 [ 408.086709][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 408.092682][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.097162][ C1] __warn+0x248/0x2b0 [ 408.101734][ C0] RSP: 002b:00007fd59eb95038 EFLAGS: 00000246 [ 408.106401][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 408.111932][ C0] ORIG_RAX: 000000000000012b [ 408.116158][ C1] report_bug+0x1b7/0x2e0 [ 408.120994][ C0] RAX: ffffffffffffffda RBX: 00007fd5a0b76090 RCX: 00007fd5a094ebe9 [ 408.125837][ C1] handle_bug+0x3a/0x70 [ 408.130496][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000005 [ 408.135155][ C1] exc_invalid_op+0x16/0x40 [ 408.141129][ C0] RBP: 00007fd5a09d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 408.145820][ C1] asm_exc_invalid_op+0x16/0x20 [ 408.150653][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 408.155924][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 408.160667][ C0] R13: 00007fd5a0b76128 R14: 00007fd5a0b76090 R15: 00007fff4dc90ff8 [ 408.165497][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 408.169997][ C0] [ 408.175177][ C1] RSP: 0018:ffffc90000dd0930 EFLAGS: 00010046 [ 408.179857][ C0] irq event stamp: 493993 [ 408.184329][ C1] [ 408.184335][ C1] RAX: ffffffff819ecfb0 RBX: 0000000000000000 RCX: ffff888025e60000 [ 408.188556][ C0] hardirqs last enabled at (493992): [] _raw_spin_unlock_irqrestore+0x82/0x100 [ 408.194175][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.197101][ C0] hardirqs last disabled at (493993): [] rcu_work_rcufn+0xa1/0x110 [ 408.200032][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1004bcc001 [ 408.206128][ C0] softirqs last enabled at (489688): [] __irq_exit_rcu+0x12f/0x220 [ 408.211412][ C1] R10: ffffed1004bcc001 R11: 1ffff11004bcc000 R12: ffff888025e61788 [ 408.231011][ C0] softirqs last disabled at (493937): [] __irq_exit_rcu+0x12f/0x220 [ 408.237076][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0968 R15: 0000000020000000 [ 408.245039][ C0] ---[ end trace 615c51fce8145949 ]--- [ 408.253007][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 410.108413][ C1] bpf_probe_read_compat+0xdd/0x170 [ 410.113620][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0x6a4 [ 410.119172][ C1] bpf_trace_run1+0x153/0x2d0 [ 410.123870][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 410.129234][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 410.134268][ C1] ? __rwlock_init+0x140/0x140 [ 410.139023][ C1] trace_workqueue_activate_work+0x13e/0x1a0 [ 410.144997][ C1] __queue_work+0x8ec/0xd50 [ 410.149582][ C1] rcu_work_rcufn+0xcf/0x110 [ 410.154169][ C1] ? queue_rcu_work+0x90/0x90 [ 410.158839][ C1] ? debug_object_deactivate+0x63/0x340 [ 410.164403][ C1] rcu_core+0x962/0x15d0 [ 410.168649][ C1] ? local_bh_disable+0x20/0x20 [ 410.173487][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 410.178797][ C1] ? mark_lock+0x94/0x320 [ 410.183121][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 410.189096][ C1] ? lock_chain_count+0x20/0x20 [ 410.193954][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 410.198812][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 410.204106][ C1] handle_softirqs+0x328/0x820 [ 410.208878][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 410.213732][ C1] ? do_softirq+0x200/0x200 [ 410.218235][ C1] __irq_exit_rcu+0x12f/0x220 [ 410.222973][ C1] ? irq_exit_rcu+0x20/0x20 [ 410.227506][ C1] irq_exit_rcu+0x5/0x20 [ 410.231757][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 410.237394][ C1] [ 410.240318][ C1] [ 410.243242][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 410.249214][ C1] RIP: 0010:preempt_count_add+0x0/0x190 [ 410.254765][ C1] Code: 24 80 e1 07 80 c1 03 38 c1 7c 97 48 8b 3c 24 e8 d6 b8 6a 00 eb 8c e9 f5 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <41> 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 60 df 0b 96 [ 410.274357][ C1] RSP: 0018:ffffc900031ef480 EFLAGS: 00000202 [ 410.280412][ C1] RAX: 0000000000000001 RBX: ffffc900031ef548 RCX: 0000000080000001 [ 410.288388][ C1] RDX: dffffc0000000000 RSI: ffffffff81469bb9 RDI: 0000000000000001 [ 410.296347][ C1] RBP: ffffc900031ef590 R08: ffffc900031ef610 R09: 0000000000000005 [ 410.304304][ C1] R10: fffff5200063deb5 R11: 1ffff9200063deb3 R12: ffffffff81469bb9 [ 410.312348][ C1] R13: ffffc900031efca0 R14: dffffc0000000000 R15: 1ffff9200063dea9 [ 410.320325][ C1] ? kernel_clone+0x219/0x930 [ 410.324988][ C1] ? kernel_clone+0x219/0x930 [ 410.329652][ C1] unwind_next_frame+0xac/0x1d90 [ 410.334582][ C1] ? kernel_clone+0x219/0x930 [ 410.339252][ C1] ? stack_trace_save+0xe0/0xe0 [ 410.344104][ C1] arch_stack_walk+0x10c/0x140 [ 410.348901][ C1] ? kernel_clone+0x219/0x930 [ 410.353580][ C1] stack_trace_save+0x98/0xe0 [ 410.358255][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 410.363375][ C1] ? verify_lock_unused+0x140/0x140 [ 410.368591][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 410.373436][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 410.378448][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 410.383732][ C1] ? kmem_cache_alloc+0x100/0x290 [ 410.388780][ C1] ? copy_mm+0x8b1/0x1370 [ 410.393107][ C1] ? copy_process+0x17c6/0x3e00 [ 410.397955][ C1] ? kernel_clone+0x219/0x930 [ 410.402652][ C1] slab_post_alloc_hook+0x4c/0x380 [ 410.407762][ C1] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 410.413748][ C1] ? copy_mm+0x8b1/0x1370 [ 410.418081][ C1] kmem_cache_alloc+0x100/0x290 [ 410.422923][ C1] copy_mm+0x8b1/0x1370 [ 410.427077][ C1] ? copy_signal+0x640/0x640 [ 410.431658][ C1] ? __init_rwsem+0x11e/0x160 [ 410.436336][ C1] ? copy_signal+0x537/0x640 [ 410.440939][ C1] copy_process+0x17c6/0x3e00 [ 410.445639][ C1] ? __pidfd_prepare+0x140/0x140 [ 410.450572][ C1] kernel_clone+0x219/0x930 [ 410.455086][ C1] ? create_io_thread+0x130/0x130 [ 410.460105][ C1] ? __context_tracking_exit+0x4c/0x80 [ 410.465576][ C1] __x64_sys_clone+0x170/0x1c0 [ 410.470345][ C1] ? __ia32_sys_vfork+0xf0/0xf0 [ 410.475191][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 410.480382][ C1] do_syscall_64+0x4c/0xa0 [ 410.484790][ C1] ? clear_bhb_loop+0x30/0x80 [ 410.489453][ C1] ? clear_bhb_loop+0x30/0x80 [ 410.494122][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.500011][ C1] RIP: 0033:0x7fcd139c3636 [ 410.504422][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 410.524035][ C1] RSP: 002b:00007fffff1f6d20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.532453][ C1] RAX: ffffffffffffffda RBX: 00007fffff1f6d28 RCX: 00007fcd139c3636 [ 410.540414][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 410.548375][ C1] RBP: 00005606b6f27e60 R08: 0000000000000000 R09: 00005606b6f27c30 [ 410.556337][ C1] R10: 00007fcd13829f50 R11: 0000000000000246 R12: 00005606b6f2bc30 [ 410.564297][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.572259][ C1] [ 411.716229][ C1] Shutting down cpus with NMI [ 411.721150][ C1] Kernel Offset: disabled [ 411.725482][ C1] Rebooting in 86400 seconds..