last executing test programs: 9m40.148163442s ago: executing program 2 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xe4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x65, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x50, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xe4}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044041}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) chdir(0x0) mknod$loop(0x0, 0x2480, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 9m36.824419404s ago: executing program 2 (id=49): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c7", 0x1f, 0x48004, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x106f) 9m35.908068248s ago: executing program 2 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000300)='\x00\x00\x00\x00\x00', 0x5, 0xffffffffffffffff) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "1cc307a704791dd1", "422510d7928c9da6525dce7010c5036512c372f7887c1f2a0a91184aa57888a6", "b48ff4f6", "872e37fc0ff22792"}, 0x38) 9m32.071732597s ago: executing program 2 (id=55): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000f80)=""/4096, &(0x7f0000000380)=0x1000) socket$kcm(0x2, 0x3, 0x2) unshare(0x22020400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) poll(&(0x7f0000000180)=[{r2, 0x4010}, {r1, 0x110}], 0x2, 0x59db) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0xfff, &(0x7f0000000340)=0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 9m29.525793917s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500000002000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 9m28.104503279s ago: executing program 2 (id=63): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 9m13.072109062s ago: executing program 32 (id=63): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 25.247548229s ago: executing program 1 (id=1262): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000fbffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32, @ANYBLOB="000000000000010185100000070080001811", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b7020000010000008500000085000000b7"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x26, 0xd3, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af", &(0x7f0000000580)="1324840f61f2582958c7a13a4cb07c12e6ecb79e1e4a5ce8e2b094cb1edf8582dfc76b94c7a32d6ad727284dee99911cbebac2b56de4b756a4b4d7ab40d887a06a1a64578ca3be4b2b1199f073af3b8786e28aaa18190e25a18d21a25234f582dce4358b52f6b2a6467c3f0c7739d6bd5a565b16e767e0da1df8fd4b076723d41eb010daaaeb5cf488ff4be3be97abe73c01bf69228aa29254faeba1beedba4f3f432007e825367a3d4e928f5c3a8adca1d0de94d2e7d7d9a0652a837242e2b09161c51dea51f2fc9a3ea6be63ad1a6444d530", 0x0, 0x0, 0x607}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004e00004c0000000000069078ac141400ac1e000107130ce0000002ac141400ac14140000000000440c05"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.408325342s ago: executing program 1 (id=1270): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 15.555661659s ago: executing program 1 (id=1280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0xff) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12.24421638s ago: executing program 1 (id=1290): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) close(r3) 9.844615327s ago: executing program 1 (id=1297): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.155391448s ago: executing program 0 (id=1298): r0 = gettid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r0], 0x0, 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 8.776671204s ago: executing program 5 (id=1299): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3175900698e2eed0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'geneve0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'bridge_slave_1\x00', {0x1}, 0x9}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000000)) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x12b8, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12a8, 0x2e8, 0x2e8, 0x12a8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x10d8, 0x10f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1318) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, 0x0, 0x0, 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) eventfd2(0x0, 0x1) 8.117500954s ago: executing program 1 (id=1301): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xb, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) close(r3) 7.995862206s ago: executing program 3 (id=1302): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.043435546s ago: executing program 3 (id=1304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x8032) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0xa, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0xfffffe00, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000a00)={[], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'sched_switch\x00'}}, {@subj_type}, {@appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_hash}, {@uid_eq}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+!+.!\\}/(%$}$:'}}, {@pcr={'pcr', 0x3d, 0x35}}]}, 0x5, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) 5.328122207s ago: executing program 5 (id=1306): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x8032) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0xa, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0xfffffe00, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000a00)={[], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'sched_switch\x00'}}, {@subj_type}, {@appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_hash}, {@uid_eq}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+!+.!\\}/(%$}$:'}}, {@pcr={'pcr', 0x3d, 0x35}}]}, 0x5, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) 4.807123556s ago: executing program 0 (id=1309): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) 4.650694528s ago: executing program 0 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.88603841s ago: executing program 4 (id=1312): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3.320762939s ago: executing program 5 (id=1313): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$eJzs3U9vG2kZAPBnnHibpGGdXTgsK7FbdrtKEdRJNvsn4rBsJf6cVkKUexoSJ4rixFXitE1UQfoJQKgCJE6cuCDxAZBQPwJCqgQ3DpxAFaTtgQsyGnvcJo6dJtRrt87vJ03nnfet53mepB7POzOqAzizLkTEpxExFBHvRUQh689lS+w1lvTvPdy/vZguSdRqV/+VRJL1te7zfPay1A++F/Gj5GjcrZ3dtYVyubR5uHv38ur6wkpppbQxOzvz0dzHcx/OTZ+wkmT4uNFXI+KTbz/+xU9/+91P/viNm3+f/+elH+cj4lo23q6ObmiUno+Rc82eY9N86QxlFeX7nQgAACdyMSJej4h3IuJrUYihATs/BQAAACJq3xpv3pmqAQAAAIMpFxHjkeSK2fO+45HLFYuNZ3i/FGO5cmWr+vXlyvbGUjoWMRH53PJquTSdPSs8Efkk3Z6pt59uv9+yPRsRr0XE3cJoul0fAwAAAHrjfMv8/3GhMf8HAAAABoyb8QAAADD4zP8BAABg8Jn/AwAAwED7/mefpUvt4f7t+vcALN3Y2V6r3Li8VNpaK65vLxYXK5vXiyuVykq5VBx69v7Klcr1D2Jj+9ZUdXirOrW1szu/XtneqM7Xv9d7vvR6D2oCAAAADnvt7Xt/TSJi75uj9SX1SjaW72tmwAskGW7puPbVPmUCdMUJLukfdmH780kE6LnWz3Tg7DDHB5LWjpYTg5FOpwp/On0s5xwAANAfk192/x/Oqly/EwD65mf9TgDoG9fi4ezKn/4JQGDAHLn/32Kk08Az7v8/vYZYq506KQAAoKvGG6u9yO4FjkcuVyw+uS2YLK+WS9MR8WpE/KWQP5duz/QxXwAAAAAAAAAAAAAAAAAAAAAAAAB4GdVqSdQAAACAgRaR+0eSff/XZOHieOv1gVeS/xTq64i4+eurv7y1UK1uzqT9/37SX/1V1v9+P65gAAAAwFmUP3a0OU9vzuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJse7t9ebC69jPvgSozGRLv4wzFSX49EPiLGHiUxfOB1SUQMdSH+3p2IeKNd/CRNKyayLMYenTv0ulxEjPY0/uH60/jnuxAfzrJ7VyLi03bvv1xcqK/bv/+Gs+V5PbhSf5O3jd88/g11OP594YQx3rz/+6mO8e9EvDnc/vjTjJ90iP/uCeNf++Hubqex2m8iJtt+/iSHYk1V169Pbe3sXl5dX1gprZQ2ZmdnPpr7eO7Duemp5dVyKfuzbYyff+UPe3c71p+rrw/Gb9Y50cjwJ53qv3jC+v97/9b+FxvN/NH4EZfebf/7f6O+bv/zT/9NvJd9DqTjk832XqN90Fu/+/NbnXJL4y91+Pk3fv+FWqf6L3UuOTnQPlIzANBfWzu7awvlcmmzB413PujeDpMe5fwyNFbGInoedOTFqL3Xje88936ap8PPs5+/da2udM7QfqjPByYAAKDrnp709zsTAAAAAAAAAAAAAAAAAAAAOLv+r/887O3Tvao15l5/SgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONb/AgAA//9nwsbL") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3.027677583s ago: executing program 4 (id=1314): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3.023354764s ago: executing program 3 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfa, 0x20000}, 0x54) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0xffffffff, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdc02, 0x4000000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r12, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.514965487s ago: executing program 4 (id=1316): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) inotify_init1(0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/138, 0x8a) 1.444180558s ago: executing program 5 (id=1317): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.395600049s ago: executing program 0 (id=1318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x4004005) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000540)={r6}, &(0x7f0000000240)=0x8) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x994}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4000) r9 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000740), 0x12) 1.372554769s ago: executing program 4 (id=1319): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syslog(0x4, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000700) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 1.192192771s ago: executing program 3 (id=1320): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) 1.125756172s ago: executing program 5 (id=1321): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) 849.966377ms ago: executing program 3 (id=1322): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) close(r3) 308.171736ms ago: executing program 0 (id=1323): r0 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x2, 0x40, 0xfffffffc, 0xffffffffffffffff, 0x11c3adec}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsync(r2) unlink(&(0x7f0000000080)='./file1\x00') r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'sit0\x00', 0x0}) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x40002010}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = signalfd(r5, 0x0, 0x0) read(r11, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) connect$unix(r11, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) 203.236827ms ago: executing program 4 (id=1324): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x30, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x4000003a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000840)={[{@abort}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@errors_remount}, {@usrjquota}, {@grpquota}]}, 0x11, 0x46e, &(0x7f0000000300)="$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") r2 = syz_pidfd_open(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r2, 0xffffffffffffffff, 0x0) 142.011588ms ago: executing program 4 (id=1325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x8032) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0xa, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0xff, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0xfffffe00, 0xee00, 0x0, 0x6, 0x800001}}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000a00)={[], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'sched_switch\x00'}}, {@subj_type}, {@appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_hash}, {@uid_eq}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '+!+.!\\}/(%$}$:'}}, {@pcr={'pcr', 0x3d, 0x35}}]}, 0x5, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) 1.04296ms ago: executing program 0 (id=1326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) close_range(r1, 0xffffffffffffffff, 0x0) 525.75µs ago: executing program 5 (id=1327): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc0001, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 0s ago: executing program 3 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd66) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) epoll_create1(0x80000) socket$key(0xf, 0x3, 0x2) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.583356][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.607961][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.616381][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.634123][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.635093][ T4284] overlayfs: empty lowerdir [ 80.645139][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.783100][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.931772][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.474507][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.495893][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.505592][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.517301][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537477][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.549344][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.560056][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.572378][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.583913][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.595536][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.606533][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.617958][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.636192][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.646193][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.660965][ T1336] cfg80211: failed to load regulatory.db [ 81.674857][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.966063][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132118][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.261027][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.297455][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.416242][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.484872][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.533827][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.583510][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.620850][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.683896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.841325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.478141][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.486861][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.436094][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.451780][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.467084][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.492923][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.549521][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 86.577822][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.618001][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.658987][ T4329] loop1: detected capacity change from 0 to 128 [ 86.721179][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.745101][ T4324] bond0: (slave rose0): Enslaving as an active interface with an up link [ 86.899678][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.917191][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 87.507897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.517268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.527124][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.536469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.545893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.555623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.566436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.579699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 87.596565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 87.605864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 87.761290][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.772046][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.784455][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.082766][ T4350] kernel profiling enabled (shift: 7) [ 89.233191][ T4329] attempt to access beyond end of device [ 89.233191][ T4329] loop1: rw=2049, want=1041, limit=128 [ 89.336948][ T4354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 89.527401][ T4353] tipc: Started in network mode [ 89.533125][ T4353] tipc: Node identity ac14140f, cluster identity 4711 [ 89.540733][ T4353] tipc: New replicast peer: 255.255.255.255 [ 89.548099][ T4353] tipc: Enabled bearer , priority 10 [ 90.617475][ T4286] tipc: Node number set to 2886997007 [ 96.259523][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 97.094465][ T4413] loop4: detected capacity change from 0 to 128 [ 97.491832][ T4413] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 98.919776][ T4427] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 98.927915][ T4427] FAT-fs (loop4): Filesystem has been set read-only [ 98.963836][ T26] audit: type=1800 audit(1744120387.109:2): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 99.622348][ T26] audit: type=1800 audit(1744120387.119:3): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 101.371464][ T4444] loop3: detected capacity change from 0 to 16 [ 101.570032][ T4444] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 102.253023][ T26] audit: type=1107 audit(1744120390.459:4): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖ' [ 102.640052][ T4455] loop1: detected capacity change from 0 to 2048 [ 103.004383][ T4464] loop0: detected capacity change from 0 to 256 [ 104.319119][ T4455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.340206][ T26] audit: type=1800 audit(1744120393.519:5): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="bus" dev="loop0" ino=1048592 res=0 errno=0 [ 106.365898][ T4483] loop3: detected capacity change from 0 to 4096 [ 106.590429][ T4483] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.699438][ T4505] ======================================================= [ 107.699438][ T4505] WARNING: The mand mount option has been deprecated and [ 107.699438][ T4505] and is ignored by this kernel. Remove the mand [ 107.699438][ T4505] option from the mount to silence this warning. [ 107.699438][ T4505] ======================================================= [ 108.679416][ T4483] ntfs: volume version 3.1. [ 115.534777][ T4558] sched: RT throttling activated [ 116.106667][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 116.857020][ T4574] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 118.740935][ T4585] loop3: detected capacity change from 0 to 1024 [ 119.028007][ T4585] EXT4-fs (loop3): Ignoring removed nobh option [ 119.034459][ T4585] EXT4-fs (loop3): Ignoring removed bh option [ 119.040980][ T4585] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.746180][ T4585] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,min_batch_time=0x0000000000000004,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.662171][ T4612] process 'syz.1.75' launched './file0' with NULL argv: empty string added [ 130.304406][ T4653] loop3: detected capacity change from 0 to 4096 [ 130.441470][ T4653] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 130.794963][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 131.437354][ T4653] ntfs: volume version 3.1. [ 131.640150][ T4670] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 131.668337][ T26] audit: type=1326 audit(1744120419.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 131.691091][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.753752][ T26] audit: type=1326 audit(1744120419.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 131.776059][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.837322][ T4647] chnl_net:caif_netlink_parms(): no params data found [ 132.386880][ T26] audit: type=1326 audit(1744120419.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 132.409557][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.529541][ T26] audit: type=1326 audit(1744120419.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 132.553585][ T26] audit: type=1326 audit(1744120419.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 132.586766][ T26] audit: type=1326 audit(1744120419.859:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 132.608929][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.629082][ T4286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.880305][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895523][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.019991][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 133.076154][ T26] audit: type=1326 audit(1744120419.859:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 133.178143][ T4286] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 133.271442][ T4286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.333975][ T4286] usb 1-1: Product: syz [ 133.359965][ T4286] usb 1-1: Manufacturer: syz [ 133.383929][ T26] audit: type=1326 audit(1744120419.859:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 133.407146][ T4286] usb 1-1: SerialNumber: syz [ 133.490853][ T4286] usb 1-1: config 0 descriptor?? [ 133.541996][ T4286] ldusb 1-1:0.0: Interrupt in endpoint not found [ 133.553073][ T4690] loop3: detected capacity change from 0 to 2048 [ 133.578108][ T26] audit: type=1326 audit(1744120419.859:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 133.732206][ T4312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.857218][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.894856][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.912037][ T4647] device bridge_slave_0 entered promiscuous mode [ 134.945876][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.037525][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.067186][ T4647] device bridge_slave_1 entered promiscuous mode [ 135.338448][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 135.676209][ T4286] usb 1-1: USB disconnect, device number 2 [ 135.744089][ T4647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.779712][ T4312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.015954][ T4647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.335197][ T4712] Zero length message leads to an empty skb [ 136.775281][ T4647] team0: Port device team_slave_0 added [ 136.814867][ T4312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.170232][ T4704] Bluetooth: hci5: command 0x0419 tx timeout [ 139.834659][ T4733] loop3: detected capacity change from 0 to 128 [ 139.899766][ T4733] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 140.764168][ T4647] team0: Port device team_slave_1 added [ 140.795408][ T4176] sysv_free_block: trying to free block not in datazone [ 140.910379][ T4312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.926893][ T4176] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 141.171610][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.179390][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.239402][ T4647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.258665][ T4750] netlink: 165 bytes leftover after parsing attributes in process `syz.4.105'. [ 142.201739][ T4752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 142.309897][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.317155][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.706966][ T4647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.298818][ T4764] ipt_CLUSTERIP: Please specify destination IP [ 145.733670][ T4647] device hsr_slave_0 entered promiscuous mode [ 146.051946][ T4647] device hsr_slave_1 entered promiscuous mode [ 146.104857][ T4647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.301755][ T4777] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.625677][ T4647] Cannot create hsr debugfs directory [ 147.380753][ T4782] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 147.387710][ T4782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.396387][ T4782] vhci_hcd vhci_hcd.0: Device attached [ 148.242216][ T4795] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.424445][ T4286] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 148.467414][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.476531][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.697384][ T4793] device bridge_slave_1 left promiscuous mode [ 148.726625][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.976097][ T4803] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 149.991339][ T4793] device bridge_slave_0 left promiscuous mode [ 149.997791][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.107931][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.172017][ T4312] tipc: Disabling bearer [ 150.219260][ T4312] tipc: Left network mode [ 150.395766][ T4647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.657407][ T4647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.689895][ T4647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.728113][ T13] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 150.778590][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.815449][ T4647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.834495][ T13] usb 4-1: Product: syz [ 150.852553][ T4819] loop0: detected capacity change from 0 to 1024 [ 150.862066][ T13] usb 4-1: Manufacturer: syz [ 150.885250][ T13] usb 4-1: SerialNumber: syz [ 150.930055][ T13] usb 4-1: config 0 descriptor?? [ 150.999146][ T13] ldusb 4-1:0.0: Interrupt in endpoint not found [ 151.118908][ T4819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.264909][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.314008][ T4647] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.630425][ T4818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 151.647561][ T4818] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 151.660273][ T4818] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.660273][ T4818] [ 151.670523][ T4818] EXT4-fs (loop0): Total free blocks count 0 [ 151.676610][ T4818] EXT4-fs (loop0): Free/Dirty block details [ 151.682714][ T4818] EXT4-fs (loop0): free_blocks=68451041280 [ 151.688651][ T4818] EXT4-fs (loop0): dirty_blocks=32 [ 151.693775][ T4818] EXT4-fs (loop0): Block reservation details [ 151.699881][ T4818] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 151.799117][ T1107] usb 4-1: USB disconnect, device number 2 [ 151.865199][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.886976][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.009434][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.029286][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.048824][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.055990][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.483971][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.626718][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.660852][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.765571][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.772796][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.939547][ T4844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 152.978495][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.014861][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.087068][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.118705][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.132105][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.151743][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.200730][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.222826][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.374716][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.519650][ T4852] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.532497][ T4852] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 153.768707][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.777485][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.798225][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.646285][ T4891] loop1: detected capacity change from 0 to 1024 [ 161.204547][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.778923][ T4890] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 162.794032][ T4890] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 162.806346][ T4890] EXT4-fs (loop1): This should not happen!! Data will be lost [ 162.806346][ T4890] [ 162.816014][ T4890] EXT4-fs (loop1): Total free blocks count 0 [ 162.822018][ T4890] EXT4-fs (loop1): Free/Dirty block details [ 162.827969][ T4890] EXT4-fs (loop1): free_blocks=68451041280 [ 162.834194][ T4890] EXT4-fs (loop1): dirty_blocks=32 [ 162.839356][ T4890] EXT4-fs (loop1): Block reservation details [ 162.845343][ T4890] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 162.938731][ T4312] device hsr_slave_0 left promiscuous mode [ 163.217953][ T4312] device hsr_slave_1 left promiscuous mode [ 163.352249][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.512064][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.666098][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.104704][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.163954][ T4312] device bridge_slave_1 left promiscuous mode [ 164.205642][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.550068][ T4312] device bridge_slave_0 left promiscuous mode [ 164.581389][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.563886][ T4928] binder_alloc: 4921: binder_alloc_buf, no vma [ 165.823785][ T4312] device veth1_macvtap left promiscuous mode [ 167.279151][ T4930] binder: BINDER_SET_CONTEXT_MGR already set [ 167.285545][ T4930] binder: 4924:4930 ioctl 4018620d 200000000040 returned -16 [ 167.310792][ T4931] loop1: detected capacity change from 0 to 2048 [ 167.374689][ T4312] device veth0_macvtap left promiscuous mode [ 168.235510][ T4931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.235558][ T4312] device veth1_vlan left promiscuous mode [ 168.256654][ T4312] device veth0_vlan left promiscuous mode [ 168.345173][ T4936] loop3: detected capacity change from 0 to 128 [ 168.649426][ T4936] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,,errors=continue. Quota mode: none. [ 168.667221][ T4936] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.754339][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 170.161563][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 170.232410][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 170.282612][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.320756][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.804340][ T4312] bond0 (unregistering): Released all slaves [ 172.098943][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.106483][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.157343][ T4969] tipc: Started in network mode [ 172.162335][ T4969] tipc: Node identity ac14140f, cluster identity 4711 [ 172.169418][ T4969] tipc: New replicast peer: 255.255.255.255 [ 172.175911][ T4969] tipc: Enabled bearer , priority 10 [ 172.301281][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.361177][ T23] tipc: Node number set to 2886997007 [ 178.469272][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.500395][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.060418][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.070116][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.108059][ T4647] device veth0_vlan entered promiscuous mode [ 179.325710][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.038991][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.114374][ T4647] device veth1_vlan entered promiscuous mode [ 181.379858][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.721464][ T5051] loop4: detected capacity change from 0 to 1024 [ 183.085154][ T5060] loop3: detected capacity change from 0 to 4096 [ 183.095027][ T5060] ntfs3: Unknown parameter 'nocase' [ 183.434557][ T4647] device veth0_macvtap entered promiscuous mode [ 183.457724][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.467634][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.479712][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.529401][ T5051] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 186.191904][ T4647] device veth1_macvtap entered promiscuous mode [ 187.105710][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.207855][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.345736][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.411772][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.312115][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.368481][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.454073][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.473854][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.370701][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.392227][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.428858][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.285387][ T5102] loop3: detected capacity change from 0 to 256 [ 191.568453][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.575349][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 191.790199][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 192.814990][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 194.349391][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355736][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.663333][ T5134] loop1: detected capacity change from 0 to 1024 [ 194.837349][ T5139] loop3: detected capacity change from 0 to 512 [ 194.846210][ T5137] loop0: detected capacity change from 0 to 1024 [ 194.921405][ T5139] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 194.986231][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 195.003139][ T5137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.082593][ T5145] delete_channel: no stack [ 195.221080][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.338454][ T5126] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 195.353767][ T5126] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 195.366147][ T5126] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.366147][ T5126] [ 195.375895][ T5126] EXT4-fs (loop0): Total free blocks count 0 [ 195.381929][ T5126] EXT4-fs (loop0): Free/Dirty block details [ 195.387877][ T5126] EXT4-fs (loop0): free_blocks=68451041280 [ 195.393700][ T5126] EXT4-fs (loop0): dirty_blocks=32 [ 195.399412][ T5126] EXT4-fs (loop0): Block reservation details [ 195.405409][ T5126] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 195.972669][ T5156] loop3: detected capacity change from 0 to 65 [ 195.980230][ T4317] Bluetooth: hci2: command 0x0409 tx timeout [ 196.042858][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 196.308006][ T5156] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 196.326622][ T5152] hfsplus: request for non-existent node 33423360 in B*Tree [ 196.510761][ T5152] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.038175][ T5157] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.080782][ T5157] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.136449][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.176339][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.224915][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.242958][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.253806][ T5118] device bridge_slave_0 entered promiscuous mode [ 197.260939][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.282908][ T5169] loop4: detected capacity change from 0 to 128 [ 197.298428][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.304146][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.488642][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.498691][ T5152] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.564934][ T5152] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.573601][ T5169] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,,errors=continue. Quota mode: none. [ 197.632731][ T5118] device bridge_slave_1 entered promiscuous mode [ 197.674649][ T5178] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.851196][ T5169] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.933498][ T5157] hfsplus: request for non-existent node 33423360 in B*Tree [ 197.945534][ T5173] loop0: detected capacity change from 0 to 1024 [ 198.017214][ T5157] hfsplus: request for non-existent node 33423360 in B*Tree [ 198.416209][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 198.439465][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 198.489900][ T5134] hfsplus: request for non-existent node 33423360 in B*Tree [ 198.733956][ T5173] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.144629][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.463438][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.472990][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 200.706219][ T5198] syz.1.190[5198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.762977][ T5198] loop1: detected capacity change from 0 to 512 [ 200.832511][ T5172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 200.878012][ T5172] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 200.925323][ T5172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 200.925323][ T5172] [ 201.090221][ T5172] EXT4-fs (loop0): Total free blocks count 0 [ 201.096549][ T5172] EXT4-fs (loop0): Free/Dirty block details [ 201.102864][ T5172] EXT4-fs (loop0): free_blocks=68451041280 [ 201.109094][ T5172] EXT4-fs (loop0): dirty_blocks=32 [ 201.114504][ T5172] EXT4-fs (loop0): Block reservation details [ 201.120801][ T5172] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 201.214391][ T5118] team0: Port device team_slave_0 added [ 201.273018][ T5198] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2766: inode #12: comm syz.1.190: corrupted xattr block 142 [ 201.341180][ T5118] team0: Port device team_slave_1 added [ 201.416741][ T5198] EXT4-fs (loop1): Remounting filesystem read-only [ 201.454321][ T5198] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 201.546889][ T5198] EXT4-fs (loop1): 1 truncate cleaned up [ 201.600766][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,errors=remount-ro,usrjquota=,grpquota,. Quota mode: writeback. [ 202.425885][ T5213] loop3: detected capacity change from 0 to 1024 [ 202.528134][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 202.666398][ T5213] hfsplus: request for non-existent node 33423360 in B*Tree [ 202.739211][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.778873][ T5213] hfsplus: request for non-existent node 33423360 in B*Tree [ 202.809813][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.835861][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.848563][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.855523][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.886228][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.941618][ T5216] hfsplus: request for non-existent node 33423360 in B*Tree [ 202.974142][ T5219] loop4: detected capacity change from 0 to 1024 [ 202.988536][ T5216] hfsplus: request for non-existent node 33423360 in B*Tree [ 203.110442][ T5118] device hsr_slave_0 entered promiscuous mode [ 203.450878][ T5219] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.486502][ T5118] device hsr_slave_1 entered promiscuous mode [ 203.543833][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.638999][ T5220] hfsplus: request for non-existent node 33423360 in B*Tree [ 203.858179][ T5118] Cannot create hsr debugfs directory [ 203.890404][ T5220] hfsplus: request for non-existent node 33423360 in B*Tree [ 203.939070][ T5216] hfsplus: request for non-existent node 33423360 in B*Tree [ 203.977929][ T5216] hfsplus: request for non-existent node 33423360 in B*Tree [ 204.065231][ T5213] hfsplus: request for non-existent node 33423360 in B*Tree [ 204.081841][ T5213] hfsplus: request for non-existent node 33423360 in B*Tree [ 204.159971][ T5217] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 204.175395][ T5217] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 204.187962][ T5217] EXT4-fs (loop4): This should not happen!! Data will be lost [ 204.187962][ T5217] [ 204.197773][ T5217] EXT4-fs (loop4): Total free blocks count 0 [ 204.206206][ T5217] EXT4-fs (loop4): Free/Dirty block details [ 204.212319][ T5217] EXT4-fs (loop4): free_blocks=68451041280 [ 204.218491][ T5217] EXT4-fs (loop4): dirty_blocks=32 [ 204.223715][ T5217] EXT4-fs (loop4): Block reservation details [ 204.229853][ T5217] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 204.743460][ T5236] loop4: detected capacity change from 0 to 512 [ 205.650198][ T5242] loop3: detected capacity change from 0 to 2048 [ 206.487303][ T5247] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 207.461552][ T5236] EXT4-fs: failed to create workqueue [ 207.468459][ T5236] EXT4-fs (loop4): mount failed [ 207.505600][ T5242] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.774140][ T5267] loop0: detected capacity change from 0 to 1024 [ 210.554886][ T5267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.569866][ T5286] loop3: detected capacity change from 0 to 1024 [ 211.989150][ T5286] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.077348][ T5317] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 214.035456][ T5118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.079328][ T5118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.161148][ T5118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.284094][ T5118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.011408][ T4312] device hsr_slave_0 left promiscuous mode [ 215.155783][ T4312] device hsr_slave_1 left promiscuous mode [ 215.175126][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.188696][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.670888][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.740576][ T154] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 216.665428][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 216.694605][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 216.694605][ T154] [ 216.722394][ T5342] loop4: detected capacity change from 0 to 128 [ 216.758359][ T4312] device bridge_slave_1 left promiscuous mode [ 216.808919][ T154] EXT4-fs (loop0): Total free blocks count 0 [ 216.818227][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.846809][ T5342] EXT4-fs (loop4): Ignoring removed nobh option [ 216.871200][ T154] EXT4-fs (loop0): Free/Dirty block details [ 217.060508][ T154] EXT4-fs (loop0): free_blocks=68451041280 [ 217.066599][ T154] EXT4-fs (loop0): dirty_blocks=32 [ 217.100024][ T5342] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 217.109218][ T4312] device bridge_slave_0 left promiscuous mode [ 217.183435][ T5342] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.419321][ T154] EXT4-fs (loop0): Block reservation details [ 218.356474][ T154] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 218.393755][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.156868][ T4312] device veth1_macvtap left promiscuous mode [ 219.169791][ T5363] loop1: detected capacity change from 0 to 1024 [ 219.235241][ T4312] device veth0_macvtap left promiscuous mode [ 219.245920][ T4312] device veth1_vlan left promiscuous mode [ 219.287964][ T4312] device veth0_vlan left promiscuous mode [ 219.399467][ T5363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.505344][ T5361] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 219.520502][ T5361] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 219.532845][ T5361] EXT4-fs (loop1): This should not happen!! Data will be lost [ 219.532845][ T5361] [ 219.543066][ T5361] EXT4-fs (loop1): Total free blocks count 0 [ 219.549157][ T5361] EXT4-fs (loop1): Free/Dirty block details [ 219.555153][ T5361] EXT4-fs (loop1): free_blocks=68451041280 [ 219.561573][ T5361] EXT4-fs (loop1): dirty_blocks=32 [ 219.566718][ T5361] EXT4-fs (loop1): Block reservation details [ 219.573006][ T5361] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 222.550473][ T5397] loop1: detected capacity change from 0 to 4096 [ 222.890612][ T5395] loop4: detected capacity change from 0 to 512 [ 224.006959][ T5395] fscrypt: Error allocating hmac(sha512): -2 [ 224.057374][ T5395] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 226.197017][ T5424] loop0: detected capacity change from 0 to 1024 [ 226.226325][ T5427] loop3: detected capacity change from 0 to 1024 [ 226.257672][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 226.373104][ T5424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.769381][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 227.556449][ T5423] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 227.572278][ T5423] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 227.584807][ T5423] EXT4-fs (loop0): This should not happen!! Data will be lost [ 227.584807][ T5423] [ 227.594538][ T5423] EXT4-fs (loop0): Total free blocks count 0 [ 227.600612][ T5423] EXT4-fs (loop0): Free/Dirty block details [ 227.606571][ T5423] EXT4-fs (loop0): free_blocks=68451041280 [ 227.612475][ T5423] EXT4-fs (loop0): dirty_blocks=32 [ 227.617648][ T5423] EXT4-fs (loop0): Block reservation details [ 227.623805][ T5423] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 227.833127][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.882313][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.001039][ T5427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.274163][ T5422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 228.289449][ T5422] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 228.301938][ T5422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 228.301938][ T5422] [ 228.311879][ T5422] EXT4-fs (loop3): Total free blocks count 0 [ 228.317983][ T5422] EXT4-fs (loop3): Free/Dirty block details [ 228.323983][ T5422] EXT4-fs (loop3): free_blocks=68451041280 [ 228.329915][ T5422] EXT4-fs (loop3): dirty_blocks=32 [ 228.335117][ T5422] EXT4-fs (loop3): Block reservation details [ 228.341215][ T5422] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 228.559078][ T4312] bond0 (unregistering): Released all slaves [ 231.517571][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.596608][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.045716][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.064393][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.105983][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.169426][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.227418][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.234604][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.259567][ T5485] loop3: detected capacity change from 0 to 1024 [ 234.204675][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.949466][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.973220][ T5493] loop4: detected capacity change from 0 to 1024 [ 235.007663][ T5485] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.070235][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.077657][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.408746][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.662555][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.436389][ T5483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 236.451582][ T5483] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 236.464422][ T5483] EXT4-fs (loop3): This should not happen!! Data will be lost [ 236.464422][ T5483] [ 236.474153][ T5483] EXT4-fs (loop3): Total free blocks count 0 [ 236.480212][ T5483] EXT4-fs (loop3): Free/Dirty block details [ 236.486128][ T5483] EXT4-fs (loop3): free_blocks=68451041280 [ 236.492008][ T5483] EXT4-fs (loop3): dirty_blocks=32 [ 236.497140][ T5483] EXT4-fs (loop3): Block reservation details [ 236.503170][ T5483] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 236.550090][ T5493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.565145][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.127375][ T5118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.465183][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.617581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.637155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.660170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.708853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.717540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.727186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.737329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.747453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.770348][ T5519] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 239.783704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.795292][ T5519] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 25 with error 28 [ 239.817658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.824952][ T5519] EXT4-fs (loop4): This should not happen!! Data will be lost [ 239.824952][ T5519] [ 239.843562][ T5519] EXT4-fs (loop4): Total free blocks count 0 [ 239.852060][ T5519] EXT4-fs (loop4): Free/Dirty block details [ 239.861763][ T5519] EXT4-fs (loop4): free_blocks=68451041280 [ 239.872816][ T5519] EXT4-fs (loop4): dirty_blocks=32 [ 239.883230][ T5519] EXT4-fs (loop4): Block reservation details [ 239.910693][ T5519] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 240.106440][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.138929][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.202544][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.517642][ T5553] loop0: detected capacity change from 0 to 64 [ 240.622955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.680863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.763702][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.782297][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.808960][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.840069][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.860431][ T5118] device veth0_vlan entered promiscuous mode [ 240.908359][ T5118] device veth1_vlan entered promiscuous mode [ 240.997438][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.017542][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.035779][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.045105][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.064984][ T5118] device veth0_macvtap entered promiscuous mode [ 241.084128][ T5118] device veth1_macvtap entered promiscuous mode [ 241.118715][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.135423][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.146432][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.164393][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.176868][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.189410][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.200606][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.211784][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.225078][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.241590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.258736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.270589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.294989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.308894][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.320844][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.331596][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.342550][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.352907][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.363806][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.374980][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.391960][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.405319][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.417343][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.429053][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.444372][ T5118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.468489][ T5118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.488206][ T5118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.497109][ T5118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.623053][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.645860][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.688381][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.696662][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.715062][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.741070][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.919591][ T5578] loop0: detected capacity change from 0 to 16 [ 248.731918][ T5613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.439786][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 251.458041][ T5651] IPVS: Error joining to the multicast group [ 253.043484][ T5656] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 253.054110][ T5656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.498535][ T5671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.475401][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.484452][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.687096][ T5694] loop1: detected capacity change from 0 to 1024 [ 261.077558][ T5703] loop0: detected capacity change from 0 to 128 [ 263.589276][ T5725] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 265.307884][ T5694] EXT4-fs: error -4 creating inode table initialization thread [ 265.316530][ T5694] EXT4-fs (loop1): mount failed [ 266.923587][ T5741] loop1: detected capacity change from 0 to 2048 [ 269.813228][ T5741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.542513][ T5765] loop3: detected capacity change from 0 to 4096 [ 270.864414][ T5779] loop1: detected capacity change from 0 to 64 [ 272.737268][ T5794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.296'. [ 274.256919][ T4176] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 274.307818][ T4176] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 274.716940][ T5068] Bluetooth: hci2: command 0x0405 tx timeout [ 279.818031][ T5842] vivid-001: ================= START STATUS ================= [ 279.827657][ T5842] vivid-001: Generate PTS: true [ 279.838194][ T5842] vivid-001: Generate SCR: true [ 279.843443][ T5842] tpg source WxH: 1280x720 (Y'CbCr) [ 279.849294][ T5842] tpg field: 1 [ 279.852875][ T5842] tpg crop: 1280x720@0x0 [ 279.857324][ T5842] tpg compose: 1280x720@0x0 [ 279.862831][ T5842] tpg colorspace: 3 [ 280.021272][ T5842] tpg transfer function: 0/0 [ 280.026018][ T5842] tpg Y'CbCr encoding: 0/0 [ 280.030816][ T5842] tpg quantization: 0/0 [ 280.035168][ T5842] tpg RGB range: 0/1 [ 280.039229][ T5842] vivid-001: ================== END STATUS ================== [ 280.133338][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.309'. [ 281.700142][ T5859] loop5: detected capacity change from 0 to 32768 [ 281.813924][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 283.490395][ T5879] loop0: detected capacity change from 0 to 64 [ 283.697830][ T4210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 283.753408][ T5885] loop3: detected capacity change from 0 to 64 [ 283.955718][ T5889] loop4: detected capacity change from 0 to 64 [ 285.284807][ T4210] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 285.310036][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.570497][ T4210] usb 2-1: Product: syz [ 285.603384][ T4210] usb 2-1: Manufacturer: syz [ 285.626142][ T4210] usb 2-1: SerialNumber: syz [ 286.008065][ T4210] usb 2-1: config 0 descriptor?? [ 286.082394][ T4210] usb 2-1: can't set config #0, error -71 [ 286.179472][ T4210] usb 2-1: USB disconnect, device number 2 [ 288.403301][ T5934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.629790][ T5932] sctp: failed to load transform for md5: -4 [ 289.640697][ T5926] sctp: failed to load transform for md5: -2 [ 289.884657][ T5951] loop4: detected capacity change from 0 to 64 [ 290.831831][ T5957] loop4: detected capacity change from 0 to 2048 [ 291.106735][ T5957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.772066][ T5986] loop4: detected capacity change from 0 to 32768 [ 297.091728][ T6003] loop0: detected capacity change from 0 to 64 [ 298.671823][ T6031] loop4: detected capacity change from 0 to 64 [ 301.167134][ T6047] loop1: detected capacity change from 0 to 1024 [ 301.374558][ T6055] loop4: detected capacity change from 0 to 64 [ 302.038960][ T6047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.419163][ T6066] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 302.459476][ T6070] loop0: detected capacity change from 0 to 256 [ 302.614725][ T6074] loop3: detected capacity change from 0 to 64 [ 302.649041][ T6078] loop4: detected capacity change from 0 to 64 [ 302.812671][ T6046] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 302.825376][ T6046] EXT4-fs (loop1): This should not happen!! Data will be lost [ 302.825376][ T6046] [ 302.835268][ T6046] EXT4-fs (loop1): Total free blocks count 0 [ 302.841404][ T6046] EXT4-fs (loop1): Free/Dirty block details [ 302.847425][ T6046] EXT4-fs (loop1): free_blocks=68451041280 [ 302.853409][ T6046] EXT4-fs (loop1): dirty_blocks=32 [ 302.858659][ T6046] EXT4-fs (loop1): Block reservation details [ 302.864759][ T6046] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 302.952441][ T6085] loop5: detected capacity change from 0 to 64 [ 302.961579][ T6086] loop0: detected capacity change from 0 to 64 [ 303.111511][ T6092] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.156690][ T6104] loop1: detected capacity change from 0 to 64 [ 307.492039][ T6127] loop4: detected capacity change from 0 to 64 [ 307.504469][ T6128] loop3: detected capacity change from 0 to 64 [ 307.953507][ T6139] loop1: detected capacity change from 0 to 256 [ 308.371879][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 310.461308][ T6188] loop4: detected capacity change from 0 to 64 [ 310.599978][ T6189] loop1: detected capacity change from 0 to 64 [ 310.725788][ T6195] loop3: detected capacity change from 0 to 64 [ 310.888553][ T6198] capability: warning: `syz.4.395' uses deprecated v2 capabilities in a way that may be insecure [ 310.910442][ T6198] loop4: detected capacity change from 0 to 1024 [ 313.483556][ T6212] loop4: detected capacity change from 0 to 64 [ 316.743245][ T6252] loop4: detected capacity change from 0 to 64 [ 316.764977][ T6254] loop1: detected capacity change from 0 to 64 [ 319.201024][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.212491][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.581908][ T6260] loop0: detected capacity change from 0 to 64 [ 319.689916][ T6264] loop4: detected capacity change from 0 to 64 [ 319.972688][ T6272] loop4: detected capacity change from 0 to 64 [ 321.985407][ T6294] loop3: detected capacity change from 0 to 64 [ 322.056547][ T6292] loop5: detected capacity change from 0 to 2048 [ 322.110030][ T6297] loop0: detected capacity change from 0 to 512 [ 322.404740][ T6292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.843499][ T6300] loop4: detected capacity change from 0 to 64 [ 323.002623][ T4345] Bluetooth: hci2: command 0x0405 tx timeout [ 323.705401][ T6304] loop1: detected capacity change from 0 to 4096 [ 324.250386][ T6311] loop0: detected capacity change from 0 to 64 [ 324.295862][ T6304] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 325.978430][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.428'. [ 326.846781][ T6334] loop0: detected capacity change from 0 to 1024 [ 328.306041][ T6348] loop3: detected capacity change from 0 to 64 [ 329.299170][ T6353] loop4: detected capacity change from 0 to 64 [ 329.385811][ T6334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.652550][ T6368] loop3: detected capacity change from 0 to 1024 [ 330.820425][ T6375] loop1: detected capacity change from 0 to 64 [ 330.874415][ T6376] loop5: detected capacity change from 0 to 2048 [ 331.740564][ T6376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.768363][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.302850][ T6361] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 334.318018][ T6361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 334.330325][ T6361] EXT4-fs (loop3): This should not happen!! Data will be lost [ 334.330325][ T6361] [ 334.340041][ T6361] EXT4-fs (loop3): Total free blocks count 0 [ 334.346037][ T6361] EXT4-fs (loop3): Free/Dirty block details [ 334.352643][ T6361] EXT4-fs (loop3): free_blocks=68451041280 [ 334.358565][ T6361] EXT4-fs (loop3): dirty_blocks=32 [ 334.363697][ T6361] EXT4-fs (loop3): Block reservation details [ 334.369772][ T6361] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 336.322700][ T5515] Bluetooth: hci2: command 0x0406 tx timeout [ 336.342644][ T6400] loop4: detected capacity change from 0 to 64 [ 336.448065][ T6401] loop1: detected capacity change from 0 to 64 [ 340.903745][ T6439] loop1: detected capacity change from 0 to 64 [ 340.945761][ T6440] loop0: detected capacity change from 0 to 64 [ 341.265268][ T6444] loop4: detected capacity change from 0 to 40427 [ 341.565875][ T6444] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 341.574582][ T6444] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 341.627433][ T6444] F2FS-fs (loop4): invalid crc value [ 342.168774][ T6444] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.289749][ T6452] loop1: detected capacity change from 0 to 64 [ 342.303976][ T6444] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.311587][ T6444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 344.557538][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 344.557555][ T26] audit: type=1326 audit(1744120632.749:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 345.718483][ T26] audit: type=1326 audit(1744120632.749:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 346.048680][ T4172] attempt to access beyond end of device [ 346.048680][ T4172] loop4: rw=2049, want=40968, limit=40427 [ 346.080264][ T4251] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 346.202343][ T4251] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 348.949896][ T6494] loop4: detected capacity change from 0 to 64 [ 348.989028][ T6495] loop0: detected capacity change from 0 to 64 [ 349.062021][ T6499] loop5: detected capacity change from 0 to 64 [ 349.996007][ T6516] loop0: detected capacity change from 0 to 64 [ 350.024867][ T6518] loop5: detected capacity change from 0 to 512 [ 350.388961][ T6522] loop4: detected capacity change from 0 to 64 [ 350.719439][ T6518] EXT4-fs (loop5): Ignoring removed oldalloc option [ 350.729499][ T6518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 350.743536][ T6518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.982505][ T6531] loop3: detected capacity change from 0 to 64 [ 352.688576][ T6518] EXT4-fs (loop5): 1 truncate cleaned up [ 352.706234][ T6545] loop0: detected capacity change from 0 to 1024 [ 352.712896][ T6518] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 353.047239][ T6545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.104081][ T6553] loop4: detected capacity change from 0 to 64 [ 353.145773][ T6556] loop1: detected capacity change from 0 to 256 [ 355.113163][ T26] audit: type=1800 audit(1744120643.249:55): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 355.351798][ T6556] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 355.369807][ T6564] loop4: detected capacity change from 0 to 64 [ 355.463651][ T6566] loop5: detected capacity change from 0 to 64 [ 360.247245][ T6570] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 360.259530][ T6570] gfs2: error 10 reading superblock [ 360.265527][ T6591] loop0: detected capacity change from 0 to 64 [ 361.410547][ T6599] loop5: detected capacity change from 0 to 1024 [ 361.436552][ T6605] loop4: detected capacity change from 0 to 1024 [ 361.480941][ T6607] loop1: detected capacity change from 0 to 64 [ 361.493531][ T6605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.695167][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.667123][ T6604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 362.682241][ T6604] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 362.694572][ T6604] EXT4-fs (loop4): This should not happen!! Data will be lost [ 362.694572][ T6604] [ 362.704486][ T6604] EXT4-fs (loop4): Total free blocks count 0 [ 362.710661][ T6604] EXT4-fs (loop4): Free/Dirty block details [ 362.717223][ T6604] EXT4-fs (loop4): free_blocks=68451041280 [ 362.723162][ T6604] EXT4-fs (loop4): dirty_blocks=32 [ 362.728341][ T6604] EXT4-fs (loop4): Block reservation details [ 362.734343][ T6604] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 367.189334][ T6638] loop1: detected capacity change from 0 to 64 [ 367.292949][ T6644] loop5: detected capacity change from 0 to 64 [ 367.779817][ T6649] loop5: detected capacity change from 0 to 1024 [ 367.800343][ T6651] loop1: detected capacity change from 0 to 64 [ 368.049343][ T6649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.511453][ T6658] loop3: detected capacity change from 0 to 64 [ 368.845160][ T6661] loop4: detected capacity change from 0 to 512 [ 369.010606][ T6648] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 369.026379][ T6648] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 369.038985][ T6648] EXT4-fs (loop5): This should not happen!! Data will be lost [ 369.038985][ T6648] [ 369.048913][ T6648] EXT4-fs (loop5): Total free blocks count 0 [ 369.055059][ T6648] EXT4-fs (loop5): Free/Dirty block details [ 369.061170][ T6648] EXT4-fs (loop5): free_blocks=68451041280 [ 369.067670][ T6648] EXT4-fs (loop5): dirty_blocks=32 [ 369.073092][ T6648] EXT4-fs (loop5): Block reservation details [ 369.079255][ T6648] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 369.163825][ T6664] loop1: detected capacity change from 0 to 512 [ 369.308863][ T6661] EXT4-fs (loop4): Ignoring removed oldalloc option [ 369.315935][ T6661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 369.354573][ T6661] EXT4-fs (loop4): 1 truncate cleaned up [ 369.360550][ T6661] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 373.399468][ T6686] loop0: detected capacity change from 0 to 64 [ 375.386608][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 375.466184][ T6693] loop3: detected capacity change from 0 to 64 [ 375.481367][ T6698] loop1: detected capacity change from 0 to 64 [ 380.669668][ T6733] loop5: detected capacity change from 0 to 64 [ 380.706823][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.539'. [ 380.718135][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 381.723572][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 381.833337][ T6739] loop4: detected capacity change from 0 to 1024 [ 381.891429][ T6739] EXT4-fs (loop4): Ignoring removed orlov option [ 381.908076][ T7] usb 1-1: device descriptor read/64, error -71 [ 382.009425][ T6739] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,mb_optimize_scan=0x0000000000000001,jqfmt=vfsv1,noload,jqfmt=vfsv0,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 382.167765][ T6737] bridge0: port 3(syz_tun) entered blocking state [ 382.197622][ T6737] bridge0: port 3(syz_tun) entered disabled state [ 382.237017][ T6737] device syz_tun entered promiscuous mode [ 382.251791][ T6737] bridge0: port 3(syz_tun) entered blocking state [ 382.258840][ T6737] bridge0: port 3(syz_tun) entered forwarding state [ 382.314971][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 382.885251][ T6751] loop5: detected capacity change from 0 to 1024 [ 383.107480][ T6757] loop1: detected capacity change from 0 to 64 [ 383.161070][ T6759] loop4: detected capacity change from 0 to 64 [ 383.185420][ T6751] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.446697][ T6750] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 383.462055][ T6750] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 383.474539][ T6750] EXT4-fs (loop5): This should not happen!! Data will be lost [ 383.474539][ T6750] [ 383.484397][ T6750] EXT4-fs (loop5): Total free blocks count 0 [ 383.490730][ T6750] EXT4-fs (loop5): Free/Dirty block details [ 383.496740][ T6750] EXT4-fs (loop5): free_blocks=68451041280 [ 383.502695][ T6750] EXT4-fs (loop5): dirty_blocks=32 [ 383.508604][ T6750] EXT4-fs (loop5): Block reservation details [ 383.514698][ T6750] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 384.197271][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.203079][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.297662][ T6768] No such timeout policy "syz1" [ 385.047446][ T6789] loop3: detected capacity change from 0 to 64 [ 385.136376][ T6794] loop4: detected capacity change from 0 to 64 [ 385.195825][ T6796] loop5: detected capacity change from 0 to 128 [ 385.307846][ T4170] Bluetooth: hci3: ACL packet for unknown connection handle 3840 [ 385.374415][ T6801] loop4: detected capacity change from 0 to 64 [ 385.382127][ T6796] FAT-fs (loop5): Unrecognized mount option "ÿÿè~תPZaÂJªrh{hòT$¾PS2AÂòã‰4Š‡áMÎ÷W‡S¶³hâƒé#2Ä<Èõé¼ îNªs¹6¥À!ù(þcívºJ\ 0àyÕ÷A^ÿŸ/ÿ/cìž°å" or missing value [ 385.415595][ T6802] loop1: detected capacity change from 0 to 64 [ 385.421106][ T6804] loop3: detected capacity change from 0 to 64 [ 385.443375][ T6806] loop0: detected capacity change from 0 to 1024 [ 385.775248][ T6806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.360338][ T6816] syz.4.566 uses obsolete (PF_INET,SOCK_PACKET) [ 386.507862][ T6805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 386.522859][ T6805] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 386.535160][ T6805] EXT4-fs (loop0): This should not happen!! Data will be lost [ 386.535160][ T6805] [ 386.544859][ T6805] EXT4-fs (loop0): Total free blocks count 0 [ 386.550857][ T6805] EXT4-fs (loop0): Free/Dirty block details [ 386.556742][ T6805] EXT4-fs (loop0): free_blocks=68451041280 [ 386.562584][ T6805] EXT4-fs (loop0): dirty_blocks=32 [ 386.567686][ T6805] EXT4-fs (loop0): Block reservation details [ 386.573692][ T6805] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 388.855055][ T6829] loop4: detected capacity change from 0 to 64 [ 389.101272][ T6838] loop4: detected capacity change from 0 to 64 [ 389.747950][ T4345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 390.028167][ T4345] usb 1-1: Using ep0 maxpacket: 8 [ 390.179490][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 390.616790][ T6850] loop4: detected capacity change from 0 to 64 [ 390.679343][ T6848] loop5: detected capacity change from 0 to 64 [ 391.517914][ T4345] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 391.527272][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.536023][ T4345] usb 1-1: Product: syz [ 391.551593][ T4345] usb 1-1: Manufacturer: syz [ 391.560151][ T4345] usb 1-1: SerialNumber: syz [ 391.595046][ T4345] usb 1-1: config 0 descriptor?? [ 391.609230][ T6854] loop3: detected capacity change from 0 to 1024 [ 391.843287][ T6854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.877560][ T4345] rndis_wlan 1-1:0.0: invalid descriptor buffer length [ 392.090646][ T6840] loop0: detected capacity change from 0 to 64 [ 392.208013][ T4345] usb 1-1: bad CDC descriptors [ 392.930410][ T4345] rndis_host 1-1:0.0: invalid descriptor buffer length [ 392.937324][ T4345] usb 1-1: bad CDC descriptors [ 393.086061][ T6853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 393.155474][ T6853] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 393.197799][ T6871] loop5: detected capacity change from 0 to 64 [ 393.203962][ T6853] EXT4-fs (loop3): This should not happen!! Data will be lost [ 393.203962][ T6853] [ 393.251838][ T6853] EXT4-fs (loop3): Total free blocks count 0 [ 393.253665][ T6876] loop4: detected capacity change from 0 to 64 [ 393.268065][ T6853] EXT4-fs (loop3): Free/Dirty block details [ 393.341401][ T6853] EXT4-fs (loop3): free_blocks=68451041280 [ 393.386259][ T6853] EXT4-fs (loop3): dirty_blocks=32 [ 393.438982][ T6853] EXT4-fs (loop3): Block reservation details [ 393.496819][ T6853] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 394.342059][ T6881] loop4: detected capacity change from 0 to 64 [ 394.375420][ T5854] usb 1-1: USB disconnect, device number 5 [ 395.897975][ T6891] autofs4:pid:6891:autofs_fill_super: called with bogus options [ 396.009119][ T6891] overlayfs: failed to resolve './file0': -2 [ 399.907319][ T6929] loop0: detected capacity change from 0 to 64 [ 400.050398][ T6930] loop4: detected capacity change from 0 to 64 [ 401.486570][ T6936] loop5: detected capacity change from 0 to 1024 [ 401.535986][ T6938] loop4: detected capacity change from 0 to 64 [ 401.925152][ T6936] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.701028][ T26] audit: type=1326 audit(1744120690.669:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 402.723613][ T6945] capability: warning: `syz.4.602' uses 32-bit capabilities (legacy support in use) [ 402.734311][ T6945] program syz.4.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.617273][ T6960] loop4: detected capacity change from 0 to 512 [ 403.660531][ T6960] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 403.757932][ T26] audit: type=1326 audit(1744120690.669:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 405.709319][ T26] audit: type=1326 audit(1744120690.699:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 406.744941][ T6986] xt_TPROXY: Can be used only with -p tcp or -p udp [ 407.438044][ T6989] loop1: detected capacity change from 0 to 64 [ 407.444630][ T26] audit: type=1326 audit(1744120690.699:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.466727][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.481502][ T26] audit: type=1326 audit(1744120690.699:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.517771][ T26] audit: type=1326 audit(1744120690.709:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.658560][ T26] audit: type=1326 audit(1744120690.709:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.686092][ T26] audit: type=1326 audit(1744120690.709:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.710948][ T26] audit: type=1326 audit(1744120690.709:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.735595][ T26] audit: type=1326 audit(1744120690.719:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.759154][ T26] audit: type=1326 audit(1744120690.719:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.782823][ T26] audit: type=1326 audit(1744120690.719:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.806117][ T26] audit: type=1326 audit(1744120690.719:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.829500][ T26] audit: type=1326 audit(1744120690.719:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.900211][ T6996] loop3: detected capacity change from 0 to 64 [ 407.910436][ T26] audit: type=1326 audit(1744120690.729:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 407.932567][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.017399][ T26] audit: type=1326 audit(1744120690.729:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 408.293312][ T26] audit: type=1326 audit(1744120690.729:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 408.315482][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.343656][ T26] audit: type=1326 audit(1744120690.729:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f54094c1169 code=0x7ffc0000 [ 408.365882][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.869925][ T7014] loop3: detected capacity change from 0 to 64 [ 410.589668][ T7017] loop4: detected capacity change from 0 to 64 [ 410.857405][ T7020] loop4: detected capacity change from 0 to 64 [ 411.175209][ T7025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 412.144236][ T7026] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.789712][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 412.789903][ T26] audit: type=1326 audit(1744120699.649:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16d705169 code=0x7ffc0000 [ 412.891356][ T26] audit: type=1326 audit(1744120699.669:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc16d705169 code=0x7ffc0000 [ 412.918201][ T26] audit: type=1326 audit(1744120699.669:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc16d7051a3 code=0x7ffc0000 [ 413.131802][ T26] audit: type=1326 audit(1744120699.729:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc16d703c1f code=0x7ffc0000 [ 413.160737][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 413.189579][ T7031] loop1: detected capacity change from 0 to 64 [ 413.221591][ T6961] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 413.239637][ T6961] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28 [ 413.292951][ T6961] EXT4-fs (loop5): This should not happen!! Data will be lost [ 413.292951][ T6961] [ 413.392338][ T6961] EXT4-fs (loop5): Total free blocks count 0 [ 413.520537][ T6961] EXT4-fs (loop5): Free/Dirty block details [ 413.570482][ T6961] EXT4-fs (loop5): free_blocks=68451041280 [ 413.599334][ T6961] EXT4-fs (loop5): dirty_blocks=32 [ 413.876516][ T6961] EXT4-fs (loop5): Block reservation details [ 413.913274][ T6961] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 413.977027][ T26] audit: type=1326 audit(1744120699.789:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc16d7051f7 code=0x7ffc0000 [ 414.262744][ T26] audit: type=1326 audit(1744120699.799:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc16d703ad0 code=0x7ffc0000 [ 414.286118][ T26] audit: type=1326 audit(1744120699.799:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc16d703dca code=0x7ffc0000 [ 414.443280][ T26] audit: type=1326 audit(1744120699.829:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16d705169 code=0x7ffc0000 [ 415.189226][ T7053] loop0: detected capacity change from 0 to 1024 [ 415.698688][ T26] audit: type=1326 audit(1744120699.829:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16d705169 code=0x7ffc0000 [ 415.727124][ T7060] loop3: detected capacity change from 0 to 64 [ 415.889939][ T26] audit: type=1326 audit(1744120700.349:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc16d705169 code=0x7ffc0000 [ 416.000344][ T7065] loop4: detected capacity change from 0 to 64 [ 416.019863][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.763152][ T7069] loop1: detected capacity change from 0 to 64 [ 420.286023][ T7088] loop3: detected capacity change from 0 to 64 [ 420.395406][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.642'. [ 420.414952][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 420.487996][ T7090] bridge0: port 3(syz_tun) entered blocking state [ 420.515342][ T7090] bridge0: port 3(syz_tun) entered disabled state [ 420.536696][ T7090] device syz_tun entered promiscuous mode [ 420.567103][ T7090] bridge0: port 3(syz_tun) entered blocking state [ 420.573673][ T7090] bridge0: port 3(syz_tun) entered forwarding state [ 420.871496][ T7098] loop1: detected capacity change from 0 to 1024 [ 421.123248][ T7099] program syz.5.637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.305823][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 422.305843][ T26] audit: type=1326 audit(1744120709.319:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 422.761819][ T7107] autofs4:pid:7107:autofs_fill_super: called with bogus options [ 422.787043][ T26] audit: type=1326 audit(1744120709.319:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 422.939952][ T26] audit: type=1326 audit(1744120709.319:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 423.658001][ T7098] EXT4-fs (loop1): Ignoring removed orlov option [ 423.844322][ T26] audit: type=1326 audit(1744120709.319:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 423.873084][ T7070] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 424.758351][ T7117] SET target dimension over the limit! [ 425.227640][ T7070] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 13 with error 28 [ 425.241077][ T7098] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 425.266113][ T26] audit: type=1326 audit(1744120709.319:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.313979][ T7070] EXT4-fs (loop0): This should not happen!! Data will be lost [ 425.313979][ T7070] [ 425.390617][ T26] audit: type=1326 audit(1744120709.319:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.414258][ T7070] EXT4-fs (loop0): Total free blocks count 0 [ 425.423729][ T26] audit: type=1326 audit(1744120709.319:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.454334][ T7070] EXT4-fs (loop0): Free/Dirty block details [ 425.546710][ T7070] EXT4-fs (loop0): free_blocks=68451041280 [ 425.570424][ T26] audit: type=1326 audit(1744120709.319:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.591045][ T7070] EXT4-fs (loop0): dirty_blocks=16 [ 425.593201][ T7125] loop4: detected capacity change from 0 to 64 [ 425.604521][ T26] audit: type=1326 audit(1744120709.319:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.629215][ T26] audit: type=1326 audit(1744120709.319:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcd81e169 code=0x7ffc0000 [ 425.631434][ T7070] EXT4-fs (loop0): Block reservation details [ 425.658350][ T7127] loop3: detected capacity change from 0 to 64 [ 425.665168][ T7070] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 426.323955][ T7133] cgroup: Invalid name [ 426.382733][ T7134] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 426.740410][ T7142] loop0: detected capacity change from 0 to 64 [ 428.204600][ T7154] loop5: detected capacity change from 0 to 64 [ 429.563552][ T7162] fuse: Unknown parameter '0x0000000000000009' [ 429.577384][ T4317] Process accounting resumed [ 430.107337][ T7160] Process accounting resumed [ 430.138660][ T7168] loop1: detected capacity change from 0 to 64 [ 433.027191][ T7178] loop4: detected capacity change from 0 to 64 [ 433.280008][ T7184] loop0: detected capacity change from 0 to 1024 [ 433.441159][ T7181] loop4: detected capacity change from 0 to 64 [ 433.469294][ T7184] EXT4-fs (loop0): quotafile must be on filesystem root [ 433.714608][ T7184] loop0: detected capacity change from 0 to 1024 [ 433.876049][ T7184] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 435.564470][ T7199] loop5: detected capacity change from 0 to 64 [ 436.526916][ T7205] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 436.545690][ T7205] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 437.516570][ T7210] loop4: detected capacity change from 0 to 64 [ 437.643950][ T7213] loop1: detected capacity change from 0 to 4096 [ 437.699412][ T7213] __ntfs_warning: 22 callbacks suppressed [ 437.699431][ T7213] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 437.802535][ T7213] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 437.864630][ T7213] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 437.936143][ T7213] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 438.084080][ T7224] 9pnet_virtio: no channels available for device syz [ 438.805030][ T7213] ntfs: volume version 3.1. [ 438.934340][ T7227] loop5: detected capacity change from 0 to 64 [ 439.076193][ T7233] "syz.3.683" (7233) uses obsolete ecb(arc4) skcipher [ 439.109991][ T7233] loop3: detected capacity change from 0 to 256 [ 439.163372][ T7234] loop4: detected capacity change from 0 to 512 [ 439.240696][ T7233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0x702b3b70, utbl_chksum : 0xe619d30d) [ 439.264340][ T7233] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x20ffffff) [ 439.275339][ T7233] exFAT-fs (loop3): failed to initialize root inode [ 439.527847][ T7234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.545430][ T7234] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.767028][ T144] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 439.785595][ T4166] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 440.546145][ T7253] loop1: detected capacity change from 0 to 64 [ 441.104777][ T7258] loop3: detected capacity change from 0 to 64 [ 442.249580][ T7267] loop5: detected capacity change from 0 to 512 [ 443.553180][ T7281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.692'. [ 443.818414][ T7267] EXT4-fs (loop5): 1 orphan inode deleted [ 443.866505][ T7267] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 443.909380][ T7291] loop3: detected capacity change from 0 to 64 [ 444.117967][ T7267] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.143909][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 445.342883][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.362337][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.321075][ T7309] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 446.844195][ T7313] loop3: detected capacity change from 0 to 64 [ 447.068578][ T7321] loop1: detected capacity change from 0 to 64 [ 448.762745][ T7334] loop0: detected capacity change from 0 to 128 [ 448.796587][ T7336] loop3: detected capacity change from 0 to 64 [ 448.894769][ T7337] loop5: detected capacity change from 0 to 512 [ 449.021033][ T7337] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 449.215562][ T7337] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 450.233887][ T7332] loop5: detected capacity change from 0 to 256 [ 450.450684][ T7345] cgroup: Invalid name [ 450.566595][ T7349] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 450.763584][ T7334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 450.778713][ T7352] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 450.838555][ T7334] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 451.098871][ T7334] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.008867][ T7393] loop5: detected capacity change from 0 to 64 [ 455.329879][ T7397] loop1: detected capacity change from 0 to 64 [ 457.854842][ T7424] loop3: detected capacity change from 0 to 32768 [ 457.878428][ T7416] cgroup: Invalid name [ 458.171366][ T7421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 458.322368][ T7432] sctp: [Deprecated]: syz.3.738 (pid 7432) Use of int in max_burst socket option. [ 458.322368][ T7432] Use struct sctp_assoc_value instead [ 458.624675][ T7435] loop0: detected capacity change from 0 to 64 [ 459.295098][ T7445] loop1: detected capacity change from 0 to 64 [ 459.366457][ T7448] loop0: detected capacity change from 0 to 64 [ 459.956646][ T7451] fuse: Unknown parameter '0x0000000000000009' [ 459.977122][ T4213] Process accounting resumed [ 460.690965][ T7449] Process accounting resumed [ 461.241059][ T7461] loop1: detected capacity change from 0 to 64 [ 461.408791][ T7462] 9pnet_virtio: no channels available for device syz [ 462.143305][ T7471] loop0: detected capacity change from 0 to 64 [ 462.333991][ T7474] loop3: detected capacity change from 0 to 64 [ 463.620347][ T7488] loop0: detected capacity change from 0 to 64 [ 463.936532][ T7490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 464.276803][ T7497] loop0: detected capacity change from 0 to 1024 [ 464.634987][ T7497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.242931][ T7514] fuse: Unknown parameter '0x0000000000000009' [ 465.468624][ T5123] Process accounting resumed [ 466.713528][ T7525] loop5: detected capacity change from 0 to 64 [ 466.728729][ T7511] Process accounting resumed [ 467.760692][ T7535] loop5: detected capacity change from 0 to 64 [ 468.541427][ T7509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 468.558138][ T7509] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 468.584321][ T7509] EXT4-fs (loop0): This should not happen!! Data will be lost [ 468.584321][ T7509] [ 468.621615][ T7509] EXT4-fs (loop0): Total free blocks count 0 [ 468.637427][ T7509] EXT4-fs (loop0): Free/Dirty block details [ 468.654212][ T7509] EXT4-fs (loop0): free_blocks=68451041280 [ 468.674091][ T7509] EXT4-fs (loop0): dirty_blocks=32 [ 468.692251][ T7509] EXT4-fs (loop0): Block reservation details [ 468.712657][ T7509] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 468.812307][ T7547] loop5: detected capacity change from 0 to 32768 [ 468.879348][ T7547] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.774 (7547) [ 468.968890][ T7549] loop1: detected capacity change from 0 to 64 [ 468.984106][ T7547] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 468.994886][ T7547] BTRFS info (device loop5): force clearing of disk cache [ 469.002388][ T7547] BTRFS info (device loop5): enabling ssd optimizations [ 469.009842][ T7547] BTRFS info (device loop5): using spread ssd allocation scheme [ 469.017630][ T7547] BTRFS info (device loop5): using free space tree [ 469.024338][ T7547] BTRFS info (device loop5): has skinny extents [ 469.140121][ T7554] loop3: detected capacity change from 0 to 64 [ 470.672226][ T7585] loop1: detected capacity change from 0 to 64 [ 470.696376][ T7547] BTRFS info (device loop5): clearing free space tree [ 470.704574][ T7547] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 470.715184][ T7547] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 470.778904][ T7547] BTRFS info (device loop5): creating free space tree [ 470.788792][ T7547] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 470.798583][ T7547] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 474.847497][ T7627] loop0: detected capacity change from 0 to 64 [ 474.953792][ T7632] syz.4.794[7632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.336700][ T7642] loop0: detected capacity change from 0 to 64 [ 476.897043][ T7654] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 477.167656][ T7665] loop3: detected capacity change from 0 to 128 [ 477.658795][ T7665] EXT4-fs (loop3): Test dummy encryption mode enabled [ 477.746972][ T7670] loop0: detected capacity change from 0 to 64 [ 477.892436][ T7675] syz.4.805[7675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.099690][ T7665] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 478.167967][ T7665] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.474390][ T7688] loop5: detected capacity change from 0 to 64 [ 481.227015][ T7711] loop0: detected capacity change from 0 to 2048 [ 481.628213][ T7720] syz.4.817[7720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.673623][ T7719] loop3: detected capacity change from 0 to 1024 [ 481.819639][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 481.927509][ T7728] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.014957][ T7719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 484.084133][ T7715] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 484.099281][ T7715] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 484.111602][ T7715] EXT4-fs (loop3): This should not happen!! Data will be lost [ 484.111602][ T7715] [ 484.121537][ T7715] EXT4-fs (loop3): Total free blocks count 0 [ 484.127619][ T7715] EXT4-fs (loop3): Free/Dirty block details [ 484.133681][ T7715] EXT4-fs (loop3): free_blocks=68451041280 [ 484.139655][ T7715] EXT4-fs (loop3): dirty_blocks=32 [ 484.144865][ T7715] EXT4-fs (loop3): Block reservation details [ 484.150970][ T7715] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 484.398405][ T7760] syz.5.829[7760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.794369][ T7766] loop5: detected capacity change from 0 to 512 [ 485.985443][ T7766] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2766: inode #12: comm syz.5.829: corrupted xattr block 142 [ 486.033966][ T7778] IPVS: set_ctl: invalid protocol: 4 172.30.1.5:20000 [ 486.087427][ T7781] loop3: detected capacity change from 0 to 64 [ 486.106420][ T7766] EXT4-fs (loop5): Remounting filesystem read-only [ 486.130184][ T7766] EXT4-fs (loop5): 1 truncate cleaned up [ 486.172457][ T7766] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,errors=remount-ro,usrjquota=,grpquota,. Quota mode: writeback. [ 487.159622][ T7789] syz.4.846[7789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.415576][ T7813] loop3: detected capacity change from 0 to 1024 [ 492.929499][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.326760][ T7839] syz.5.849[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.337156][ T7839] loop5: detected capacity change from 0 to 512 [ 494.677219][ T7839] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2766: inode #12: comm syz.5.849: corrupted xattr block 142 [ 496.597820][ T26] audit: type=1326 audit(1744120784.749:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 496.718613][ T7839] EXT4-fs (loop5): Remounting filesystem read-only [ 496.734883][ T7839] EXT4-fs (loop5): 1 truncate cleaned up [ 496.763611][ T7839] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,errors=remount-ro,usrjquota=,grpquota,. Quota mode: writeback. [ 497.038755][ T26] audit: type=1326 audit(1744120784.749:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 497.139819][ T26] audit: type=1326 audit(1744120784.749:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 497.243948][ T26] audit: type=1326 audit(1744120784.749:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 497.945575][ T26] audit: type=1326 audit(1744120784.749:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 499.294470][ T26] audit: type=1326 audit(1744120784.749:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 499.983746][ T26] audit: type=1326 audit(1744120784.749:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 500.023959][ T7878] loop5: detected capacity change from 0 to 1024 [ 500.216411][ T26] audit: type=1326 audit(1744120784.749:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 500.247023][ T26] audit: type=1326 audit(1744120784.749:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 501.216663][ T7876] ODEBUG: Out of memory. ODEBUG disabled [ 501.276449][ T26] audit: type=1326 audit(1744120784.749:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f9f86169 code=0x7ffc0000 [ 501.337537][ T7878] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 503.590502][ T7898] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 503.634855][ T7898] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 503.649461][ T7898] EXT4-fs (loop5): This should not happen!! Data will be lost [ 503.649461][ T7898] [ 503.659965][ T7898] EXT4-fs (loop5): Total free blocks count 0 [ 503.665969][ T7898] EXT4-fs (loop5): Free/Dirty block details [ 503.674255][ T7898] EXT4-fs (loop5): free_blocks=68451041280 [ 503.683641][ T7898] EXT4-fs (loop5): dirty_blocks=32 [ 503.743864][ T7898] EXT4-fs (loop5): Block reservation details [ 503.757306][ T7898] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 507.048241][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.055129][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.249156][ T7944] tipc: Started in network mode [ 508.254148][ T7944] tipc: Node identity 2007ff, cluster identity 4711 [ 508.260852][ T7944] tipc: Node number set to 2099199 [ 509.222646][ T7936] syz.5.884 (7936): drop_caches: 2 [ 509.230938][ T7936] syz.5.884 (7936): drop_caches: 2 [ 513.182777][ T7995] binder_alloc: 7987: pid 7987 spamming oneway? 1 buffers allocated for a total size of 4096 [ 513.401734][ T8000] loop1: detected capacity change from 0 to 256 [ 517.390691][ T8018] loop3: detected capacity change from 0 to 128 [ 518.160415][ T8018] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,,errors=continue. Quota mode: none. [ 519.879892][ T8018] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.418486][ T8043] loop5: detected capacity change from 0 to 64 [ 522.858739][ T8053] loop3: detected capacity change from 0 to 64 [ 526.450613][ T8092] loop5: detected capacity change from 0 to 64 [ 526.517025][ T8095] loop3: detected capacity change from 0 to 16 [ 526.682778][ T8095] erofs: (device loop3): mounted with root inode @ nid 36. [ 527.718043][ T8107] ptrace attach of "./syz-executor exec"[8109] was attempted by "./syz-executor exec"[8107] [ 532.673608][ T8149] loop1: detected capacity change from 0 to 512 [ 532.903387][ T8154] batman_adv: batadv0: Adding interface: vlan0 [ 532.910242][ T8154] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.937027][ T8154] batman_adv: batadv0: Interface activated: vlan0 [ 532.944070][ T8149] EXT4-fs (loop1): invalid inodes per group: 0 [ 532.944070][ T8149] [ 537.808953][ T8191] loop3: detected capacity change from 0 to 64 [ 539.138524][ T8202] overlayfs: failed to clone upperpath [ 539.917559][ T8205] netlink: 'syz.1.948': attribute type 21 has an invalid length. [ 539.925752][ T8205] netlink: 'syz.1.948': attribute type 6 has an invalid length. [ 539.933703][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.948'. [ 542.015342][ T8233] loop1: detected capacity change from 0 to 64 [ 544.290181][ T8256] bridge0: port 4(vlan2) entered blocking state [ 544.296523][ T8256] bridge0: port 4(vlan2) entered disabled state [ 544.304684][ T8256] device vlan2 entered promiscuous mode [ 544.310335][ T8256] device bond0 entered promiscuous mode [ 544.315978][ T8256] device bond_slave_0 entered promiscuous mode [ 544.322371][ T8256] device bond_slave_1 entered promiscuous mode [ 544.329470][ T8256] bridge0: port 4(vlan2) entered blocking state [ 544.335834][ T8256] bridge0: port 4(vlan2) entered forwarding state [ 544.356413][ T8256] loop1: detected capacity change from 0 to 64 [ 546.338237][ T144] attempt to access beyond end of device [ 546.338237][ T144] loop1: rw=1, want=268435470, limit=64 [ 546.363536][ T144] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 546.400552][ T8271] loop3: detected capacity change from 0 to 64 [ 547.987086][ T8293] loop1: detected capacity change from 0 to 64 [ 548.300256][ T8299] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 552.483590][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 553.683072][ T8335] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 554.225407][ T8347] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 556.355699][ T8362] loop1: detected capacity change from 0 to 16 [ 556.528995][ T8362] erofs: (device loop1): mounted with root inode @ nid 36. [ 557.247273][ T8372] ptrace attach of "./syz-executor exec"[8374] was attempted by "./syz-executor exec"[8372] [ 558.891738][ T8354] Set syz1 is full, maxelem 65536 reached [ 561.521319][ T8388] trusted_key: encrypted_key: insufficient parameters specified [ 561.543349][ T8388] trusted_key: encrypted_key: insufficient parameters specified [ 562.381680][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1006'. [ 562.436156][ T8398] loop5: detected capacity change from 0 to 64 [ 563.529107][ T8416] loop5: detected capacity change from 0 to 2048 [ 563.644067][ T8416] Alternate GPT is invalid, using primary GPT. [ 563.651466][ T8416] loop5: p1 p2 p3 [ 565.293786][ T3546] Alternate GPT is invalid, using primary GPT. [ 565.674731][ T3546] loop5: p1 p2 p3 [ 567.927028][ T6776] udevd[6776]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 567.950724][ T6774] udevd[6774]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 569.636169][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.642700][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.932610][ T6776] udevd[6776]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 569.991453][ T5720] udevd[5720]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 570.012472][ T5721] udevd[5721]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 570.205670][ T8471] loop1: detected capacity change from 0 to 64 [ 571.059453][ T8479] xt_TCPMSS: Only works on TCP SYN packets [ 572.825096][ T8494] loop1: detected capacity change from 0 to 1024 [ 573.632655][ T8494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 575.497733][ T8493] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 575.581838][ T8493] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 575.666185][ T8493] EXT4-fs (loop1): This should not happen!! Data will be lost [ 575.666185][ T8493] [ 575.807856][ T8493] EXT4-fs (loop1): Total free blocks count 0 [ 575.992998][ T8493] EXT4-fs (loop1): Free/Dirty block details [ 576.019610][ T8493] EXT4-fs (loop1): free_blocks=68451041280 [ 576.090258][ T8493] EXT4-fs (loop1): dirty_blocks=32 [ 576.095436][ T8493] EXT4-fs (loop1): Block reservation details [ 576.177871][ T8493] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 576.410954][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1045'. [ 576.423485][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1045'. [ 580.416598][ T8581] loop3: detected capacity change from 0 to 1024 [ 580.730251][ T8581] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 583.367279][ T8625] loop5: detected capacity change from 0 to 64 [ 584.278715][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 585.467428][ T8596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 585.491545][ T8596] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 585.534076][ T8596] EXT4-fs (loop3): This should not happen!! Data will be lost [ 585.534076][ T8596] [ 585.544318][ T8596] EXT4-fs (loop3): Total free blocks count 0 [ 585.550523][ T8596] EXT4-fs (loop3): Free/Dirty block details [ 585.556624][ T8596] EXT4-fs (loop3): free_blocks=68451041280 [ 585.562584][ T8596] EXT4-fs (loop3): dirty_blocks=32 [ 585.568017][ T8596] EXT4-fs (loop3): Block reservation details [ 585.574133][ T8596] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 588.741692][ T8650] device veth1_macvtap left promiscuous mode [ 588.747970][ T8650] device macsec0 entered promiscuous mode [ 589.557036][ T8669] loop3: detected capacity change from 0 to 64 [ 589.629809][ T8671] loop5: detected capacity change from 0 to 64 [ 590.752813][ T8678] overlayfs: failed to clone upperpath [ 594.999254][ T8709] loop5: detected capacity change from 0 to 64 [ 596.790699][ T8713] delete_channel: no stack [ 597.457029][ T8727] usb usb8: usbfs: process 8727 (syz.3.1103) did not claim interface 0 before use [ 599.738947][ T8720] Set syz1 is full, maxelem 65536 reached [ 601.408917][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 601.855428][ T8746] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 601.982421][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.204707][ T8746] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 603.350538][ T8756] device bond0 entered promiscuous mode [ 603.368988][ T8756] device bond_slave_0 entered promiscuous mode [ 603.438917][ T8770] syz.4.1115 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 604.153193][ T8756] device bond_slave_1 entered promiscuous mode [ 604.407313][ T8756] device batadv0 entered promiscuous mode [ 604.414335][ T8775] loop3: detected capacity change from 0 to 64 [ 605.145550][ T8784] raw_sendmsg: syz.4.1121 forgot to set AF_INET. Fix it! [ 605.814869][ T8790] loop1: detected capacity change from 0 to 1024 [ 607.956539][ T8790] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 608.268840][ T8822] loop3: detected capacity change from 0 to 64 [ 608.463680][ T8788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 608.479292][ T8788] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 608.491822][ T8788] EXT4-fs (loop1): This should not happen!! Data will be lost [ 608.491822][ T8788] [ 608.501723][ T8788] EXT4-fs (loop1): Total free blocks count 0 [ 608.507867][ T8788] EXT4-fs (loop1): Free/Dirty block details [ 608.513889][ T8788] EXT4-fs (loop1): free_blocks=68451041280 [ 608.519992][ T8788] EXT4-fs (loop1): dirty_blocks=32 [ 608.525209][ T8788] EXT4-fs (loop1): Block reservation details [ 608.531351][ T8788] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 608.662459][ T8829] loop5: detected capacity change from 0 to 64 [ 610.869596][ T8844] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1133'. [ 613.952244][ T8874] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 614.102215][ T8877] loop3: detected capacity change from 0 to 64 [ 616.433582][ T8903] loop3: detected capacity change from 0 to 64 [ 616.605452][ T8906] loop1: detected capacity change from 0 to 64 [ 617.402300][ T8922] loop3: detected capacity change from 0 to 64 [ 619.537210][ T8952] loop3: detected capacity change from 0 to 64 [ 621.183946][ T8973] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 623.335337][ T8986] loop3: detected capacity change from 0 to 64 [ 624.123847][ T9006] loop3: detected capacity change from 0 to 64 [ 625.271984][ T9014] loop3: detected capacity change from 0 to 32768 [ 625.420322][ T9014] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1174 (9014) [ 625.468333][ T9014] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 625.477965][ T9014] BTRFS info (device loop3): force clearing of disk cache [ 625.485286][ T9014] BTRFS info (device loop3): enabling ssd optimizations [ 625.492456][ T9014] BTRFS info (device loop3): using spread ssd allocation scheme [ 625.500345][ T9014] BTRFS info (device loop3): using free space tree [ 625.506969][ T9014] BTRFS info (device loop3): has skinny extents [ 626.042417][ T9030] loop5: detected capacity change from 0 to 64 [ 626.934717][ T9048] 9pnet: Could not find request transport: uni [ 626.960278][ T9048] loop1: detected capacity change from 0 to 128 [ 629.109686][ T9014] BTRFS error (device loop3): open_ctree failed: -22 [ 629.122702][ T9048] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 629.133615][ T9048] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.500634][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.506982][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.930346][ T9077] loop5: detected capacity change from 0 to 64 [ 629.959343][ T9079] loop1: detected capacity change from 0 to 64 [ 643.039703][ T9198] loop1: detected capacity change from 0 to 64 [ 643.057047][ T9201] loop3: detected capacity change from 0 to 64 [ 644.843308][ T9225] loop1: detected capacity change from 0 to 64 [ 647.345445][ T9245] loop3: detected capacity change from 0 to 64 [ 648.439660][ T9254] loop5: detected capacity change from 0 to 64 [ 649.878708][ T9263] device team0 entered promiscuous mode [ 649.927247][ T9263] device team_slave_0 entered promiscuous mode [ 649.938790][ T9270] loop5: detected capacity change from 0 to 1024 [ 649.967260][ T9263] device team_slave_1 entered promiscuous mode [ 650.153488][ T9270] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 652.258043][ T9265] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 652.258592][ T9265] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 652.258660][ T9265] EXT4-fs (loop5): This should not happen!! Data will be lost [ 652.258660][ T9265] [ 652.258683][ T9265] EXT4-fs (loop5): Total free blocks count 0 [ 652.258699][ T9265] EXT4-fs (loop5): Free/Dirty block details [ 652.258715][ T9265] EXT4-fs (loop5): free_blocks=68451041280 [ 652.258772][ T9265] EXT4-fs (loop5): dirty_blocks=32 [ 652.258828][ T9265] EXT4-fs (loop5): Block reservation details [ 652.258844][ T9265] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 652.914814][ T9271] team0: Port device team_slave_0 removed [ 653.060204][ T9263] device team0 left promiscuous mode [ 653.073477][ T9263] device team_slave_1 left promiscuous mode [ 653.151752][ T9305] loop1: detected capacity change from 0 to 64 [ 654.603036][ T9322] loop3: detected capacity change from 0 to 1024 [ 655.276838][ T9322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 656.676476][ T9321] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 656.692208][ T9321] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 656.704747][ T9321] EXT4-fs (loop3): This should not happen!! Data will be lost [ 656.704747][ T9321] [ 656.714844][ T9321] EXT4-fs (loop3): Total free blocks count 0 [ 656.721025][ T9321] EXT4-fs (loop3): Free/Dirty block details [ 656.727113][ T9321] EXT4-fs (loop3): free_blocks=68451041280 [ 656.733138][ T9321] EXT4-fs (loop3): dirty_blocks=32 [ 656.738443][ T9321] EXT4-fs (loop3): Block reservation details [ 656.744764][ T9321] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 656.755581][ T9342] loop5: detected capacity change from 0 to 64 [ 658.424515][ T9361] loop3: detected capacity change from 0 to 64 [ 659.503974][ T9372] loop5: detected capacity change from 0 to 1024 [ 664.815026][ T9372] EXT4-fs: error -4 creating inode table initialization thread [ 664.957123][ T9372] EXT4-fs (loop5): mount failed [ 667.837890][ T9421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 669.003323][ T9433] loop5: detected capacity change from 0 to 512 [ 670.044649][ T9433] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 670.260205][ T9433] UDF-fs: Scanning with blocksize 512 failed [ 670.319978][ T9433] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 670.417759][ T9433] UDF-fs: Scanning with blocksize 1024 failed [ 670.429090][ T9433] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 670.436736][ T9433] UDF-fs: Scanning with blocksize 2048 failed [ 670.446397][ T9433] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 670.818185][ T9433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.771254][ T9457] loop1: detected capacity change from 0 to 512 [ 672.145097][ T9457] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 672.355575][ T9457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 672.362360][ T9457] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.1297: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 672.384868][ T9457] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.1297: Bad quota inode: 3, type: 0 [ 672.396810][ T9457] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 672.411838][ T9457] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 672.418763][ T9457] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 672.777218][ T9467] Set syz1 is full, maxelem 65536 reached [ 673.297497][ T9473] overlayfs: failed to clone upperpath [ 675.406399][ T9485] loop3: detected capacity change from 0 to 1024 [ 675.826902][ T9488] loop5: detected capacity change from 0 to 1024 [ 676.044197][ T9488] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 676.103403][ T9485] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 676.999569][ T9484] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 677.015371][ T9484] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 677.028048][ T9484] EXT4-fs (loop3): This should not happen!! Data will be lost [ 677.028048][ T9484] [ 677.038231][ T9484] EXT4-fs (loop3): Total free blocks count 0 [ 677.044396][ T9484] EXT4-fs (loop3): Free/Dirty block details [ 677.050489][ T9484] EXT4-fs (loop3): free_blocks=68451041280 [ 677.056477][ T9484] EXT4-fs (loop3): dirty_blocks=32 [ 677.061752][ T9484] EXT4-fs (loop3): Block reservation details [ 677.068045][ T9484] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 677.263178][ T9487] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 677.278845][ T9487] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 677.291552][ T9487] EXT4-fs (loop5): This should not happen!! Data will be lost [ 677.291552][ T9487] [ 677.301434][ T9487] EXT4-fs (loop5): Total free blocks count 0 [ 677.307571][ T9487] EXT4-fs (loop5): Free/Dirty block details [ 677.313717][ T9487] EXT4-fs (loop5): free_blocks=68451041280 [ 677.319722][ T9487] EXT4-fs (loop5): dirty_blocks=32 [ 677.324977][ T9487] EXT4-fs (loop5): Block reservation details [ 677.331295][ T9487] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 679.366788][ T9531] loop5: detected capacity change from 0 to 64 [ 679.649820][ T9541] loop3: detected capacity change from 0 to 64 [ 680.374558][ T9544] loop5: detected capacity change from 0 to 64 [ 680.619613][ T9552] syz.4.1324[9552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.619708][ T9552] syz.4.1324[9552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.179417][ T27] INFO: task kworker/1:6:4286 blocked for more than 144 seconds. [ 682.289938][ T9568] loop5: detected capacity change from 0 to 512 [ 683.060496][ T27] Not tainted 5.15.179-syzkaller #0 [ 683.073340][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.093671][ T27] task:kworker/1:6 state:D stack:23384 pid: 4286 ppid: 2 flags:0x00004000 [ 683.105985][ T27] Workqueue: usb_hub_wq hub_event [ 683.115550][ T27] Call Trace: [ 683.121931][ T27] [ 683.125345][ T27] __schedule+0x12c4/0x45b0 [ 683.134264][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 683.142484][ T27] ? mark_lock+0x98/0x340 [ 683.146986][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 683.161740][ T27] ? release_firmware_map_entry+0x190/0x190 [ 683.172549][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 683.180958][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 683.186368][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 683.196325][ T27] schedule+0x11b/0x1f0 [ 683.203695][ T27] usb_kill_urb+0x1c9/0x300 [ 683.212403][ T27] ? usb_unlink_urb+0xa0/0xa0 [ 683.217381][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 683.225625][ T27] ? init_wait_entry+0xd0/0xd0 [ 683.234934][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 683.243513][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 683.253041][ T27] usb_start_wait_urb+0x1ac/0x510 [ 683.261315][ T27] ? usb_api_blocking_completion+0xa0/0xa0 [ 683.267368][ T27] usb_control_msg+0x2ad/0x4c0 [ 683.281102][ T27] ? usb_anchor_empty+0x40/0x40 [ 683.286282][ T27] ? kmem_cache_alloc_trace+0x143/0x290 [ 683.296264][ T27] ? hub_port_init+0x150/0x28c0 [ 683.304583][ T27] hub_port_init+0xb44/0x28c0 [ 683.313678][ T27] ? _raw_spin_unlock+0x40/0x40 [ 683.327285][ T27] hub_event+0x28ed/0x54c0 [ 683.332110][ T27] ? led_work+0x700/0x700 [ 683.336479][ T27] ? read_lock_is_recursive+0x10/0x10 [ 683.341899][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 683.348052][ T27] ? sched_core_share_pid+0x470/0x740 [ 683.353460][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 683.359416][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 683.364646][ T27] process_one_work+0x8a1/0x10c0 [ 683.369679][ T27] ? worker_detach_from_pool+0x260/0x260 [ 683.375375][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 683.380988][ T27] ? kthread_data+0x4e/0xc0 [ 683.385543][ T27] ? wq_worker_running+0x97/0x170 [ 683.390665][ T27] worker_thread+0xaca/0x1280 [ 683.395401][ T27] kthread+0x3f6/0x4f0 [ 683.399532][ T27] ? rcu_lock_release+0x20/0x20 [ 683.404411][ T27] ? kthread_blkcg+0xd0/0xd0 [ 683.409085][ T27] ret_from_fork+0x1f/0x30 [ 683.413549][ T27] [ 683.416635][ T27] [ 683.416635][ T27] Showing all locks held in the system: [ 683.425652][ T27] 1 lock held by khungtaskd/27: [ 683.430947][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 683.440798][ T27] 2 locks held by udevd/3546: [ 683.445589][ T27] #0: ffff888021614518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 683.455279][ T27] #1: ffff88814777c468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 683.464504][ T27] 2 locks held by getty/3923: [ 683.469239][ T27] #0: ffff88802c5f7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 683.479187][ T27] #1: ffffc900026362e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 683.489519][ T27] 5 locks held by kworker/1:6/4286: [ 683.494735][ T27] #0: ffff88801c5a9938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 683.505624][ T27] #1: ffffc900047afd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 683.516940][ T27] #2: ffff8880253d6220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 683.526028][ T27] #3: ffff8881485795c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2238/0x54c0 [ 683.536186][ T27] #4: ffff88801fe49f68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2260/0x54c0 [ 683.546090][ T27] 1 lock held by syz.5.1327/9568: [ 683.551460][ T27] #0: ffff888021614518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 683.562693][ T27] [ 683.565146][ T27] ============================================= [ 683.565146][ T27] [ 683.574194][ T27] NMI backtrace for cpu 1 [ 683.578555][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 683.586550][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 683.596612][ T27] Call Trace: [ 683.599915][ T27] [ 683.602862][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 683.607573][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 683.613366][ T27] ? panic+0x860/0x860 [ 683.617479][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 683.622624][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 683.627590][ T27] ? __wake_up_klogd+0xd5/0x100 [ 683.632477][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 683.638666][ T27] ? _printk+0xd1/0x120 [ 683.642848][ T27] ? panic+0x860/0x860 [ 683.646940][ T27] ? __wake_up_klogd+0xcc/0x100 [ 683.651830][ T27] ? panic+0x860/0x860 [ 683.655927][ T27] ? __rcu_read_unlock+0x92/0x100 [ 683.661021][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 683.667118][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 683.673124][ T27] watchdog+0xe72/0xeb0 [ 683.677294][ T27] kthread+0x3f6/0x4f0 [ 683.681369][ T27] ? hungtask_pm_notify+0x50/0x50 [ 683.686414][ T27] ? kthread_blkcg+0xd0/0xd0 [ 683.691009][ T27] ret_from_fork+0x1f/0x30 [ 683.695443][ T27] [ 683.698803][ T27] Sending NMI from CPU 1 to CPUs 0: [ 683.704048][ C0] NMI backtrace for cpu 0 [ 683.704065][ C0] CPU: 0 PID: 4784 Comm: kworker/u4:14 Not tainted 5.15.179-syzkaller #0 [ 683.704082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 683.704092][ C0] Workqueue: bat_events batadv_nc_worker [ 683.704116][ C0] RIP: 0010:__lock_acquire+0x12d/0x1ff0 [ 683.704136][ C0] Code: b6 04 10 84 c0 0f 85 b7 15 00 00 48 89 6c 24 30 8b 6d 00 48 c7 c0 80 5f a9 96 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 bf 15 00 00 <83> 3d 4c 77 46 15 00 75 09 83 fd 30 0f 83 d3 13 00 00 44 89 7c 24 [ 683.704150][ C0] RSP: 0018:ffffc9000386f9a0 EFLAGS: 00000097 [ 683.704163][ C0] RAX: 0000000000000004 RBX: ffffffff90317f40 RCX: ffffffff96a95f03 [ 683.704175][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8cb1f4e0 [ 683.704187][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 683.704196][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 683.704207][ C0] R13: ffff88807d835940 R14: 0000000000000002 R15: 0000000000000000 [ 683.704223][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 683.704237][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.704248][ C0] CR2: 00007f92fa171ab8 CR3: 00000000791bd000 CR4: 00000000003506f0 [ 683.704263][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.704272][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.704282][ C0] Call Trace: [ 683.704287][ C0] [ 683.704293][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 683.704310][ C0] ? read_lock_is_recursive+0x10/0x10 [ 683.704328][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 683.704353][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 683.704370][ C0] ? nmi_handle+0xf7/0x370 [ 683.704391][ C0] ? __lock_acquire+0x12d/0x1ff0 [ 683.704406][ C0] ? default_do_nmi+0x62/0x150 [ 683.704425][ C0] ? exc_nmi+0xa8/0x100 [ 683.704441][ C0] ? end_repeat_nmi+0x16/0x31 [ 683.704462][ C0] ? __lock_acquire+0x12d/0x1ff0 [ 683.704478][ C0] ? __lock_acquire+0x12d/0x1ff0 [ 683.704494][ C0] ? __lock_acquire+0x12d/0x1ff0 [ 683.704510][ C0] [ 683.704514][ C0] [ 683.704526][ C0] lock_acquire+0x1db/0x4f0 [ 683.704540][ C0] ? rcu_lock_acquire+0x5/0x30 [ 683.704561][ C0] ? read_lock_is_recursive+0x10/0x10 [ 683.704578][ C0] ? rcu_lock_release+0x5/0x20 [ 683.704595][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 683.704612][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 683.704632][ C0] rcu_lock_acquire+0x2a/0x30 [ 683.704649][ C0] ? rcu_lock_acquire+0x5/0x30 [ 683.704665][ C0] batadv_nc_worker+0xc1/0x5b0 [ 683.704685][ C0] process_one_work+0x8a1/0x10c0 [ 683.704711][ C0] ? worker_detach_from_pool+0x260/0x260 [ 683.704731][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 683.704747][ C0] ? kthread_data+0x4e/0xc0 [ 683.704762][ C0] ? wq_worker_running+0x97/0x170 [ 683.704779][ C0] worker_thread+0xaca/0x1280 [ 683.704806][ C0] kthread+0x3f6/0x4f0 [ 683.704822][ C0] ? rcu_lock_release+0x20/0x20 [ 683.704838][ C0] ? kthread_blkcg+0xd0/0xd0 [ 683.704854][ C0] ret_from_fork+0x1f/0x30 [ 683.704878][ C0] [ 683.707471][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 684.020185][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 684.028164][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 684.038213][ T27] Call Trace: [ 684.041508][ T27] [ 684.044433][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 684.049119][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 684.054791][ T27] ? panic+0x860/0x860 [ 684.058871][ T27] panic+0x318/0x860 [ 684.062770][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 684.068609][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 684.074774][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 684.079982][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 684.086146][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 684.092294][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 684.098443][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 684.104597][ T27] watchdog+0xeb0/0xeb0 [ 684.108760][ T27] kthread+0x3f6/0x4f0 [ 684.112912][ T27] ? hungtask_pm_notify+0x50/0x50 [ 684.117929][ T27] ? kthread_blkcg+0xd0/0xd0 [ 684.122511][ T27] ret_from_fork+0x1f/0x30 [ 684.126977][ T27] [ 684.130260][ T27] Kernel Offset: disabled [ 684.134618][ T27] Rebooting in 86400 seconds..