last executing test programs: 3m35.573828288s ago: executing program 1 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) io_pgetevents(0x0, 0x10, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x888000, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 3m34.505960835s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x410, &(0x7f0000000100)='barrier') sendfile(0xffffffffffffffff, r1, 0x0, 0x80008) 3m31.618069921s ago: executing program 1 (id=913): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000ac0)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) 3m29.440031296s ago: executing program 1 (id=917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/17, @ANYBLOB="8ee93845085670ff2a", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) memfd_create(&(0x7f00000009c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x80\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x04\xc6\x9a\xa0R\xa0F\xcc\xd0\x8b2Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4g1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0*=,\xf8<\xea\xb5b\xa3\xcfm\x8a\xef\x13\xb0\x85\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8fY\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 3m27.990187199s ago: executing program 1 (id=921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) syz_emit_vhci(0x0, 0xf) 3m19.373358487s ago: executing program 1 (id=937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m4.060833941s ago: executing program 32 (id=937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m43.659421175s ago: executing program 3 (id=1145): syz_open_dev$admmidi(&(0x7f0000000180), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffffd) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20440, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xe24) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x3, 0x12) 1m41.909659183s ago: executing program 3 (id=1148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2004400d) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 1m39.827084096s ago: executing program 3 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x3000000, 0x10000002000003, 0x0, 0x0, 0x300}) 1m31.106703065s ago: executing program 3 (id=1176): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[], 0xde, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x9c) 1m29.763856067s ago: executing program 3 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m28.189629382s ago: executing program 3 (id=1188): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x14009, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303000003030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYBLOB="b08d8175", @ANYRESDEC, @ANYRESHEX], 0xff, 0xc3d, &(0x7f0000000f40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001000000000000001000000000000800dc9e605a2abbf8b2f10798cd88261b119a12a13e59c30c5e9f7dccafe4f00000000cdd570e093d9242b4904a7e26d36c22eb8ce59796c7830c3ba4bc87f5355dc98d1c4a80402a53b5a7c93bea69b369029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 1m26.232409114s ago: executing program 33 (id=1188): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x14009, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303000003030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYBLOB="b08d8175", @ANYRESDEC, @ANYRESHEX], 0xff, 0xc3d, &(0x7f0000000f40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001000000000000001000000000000800dc9e605a2abbf8b2f10798cd88261b119a12a13e59c30c5e9f7dccafe4f00000000cdd570e093d9242b4904a7e26d36c22eb8ce59796c7830c3ba4bc87f5355dc98d1c4a80402a53b5a7c93bea69b369029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 30.08387188s ago: executing program 5 (id=1314): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = epoll_create(0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 28.505843295s ago: executing program 5 (id=1320): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 24.956566002s ago: executing program 5 (id=1324): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 23.469502086s ago: executing program 5 (id=1329): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 21.750359753s ago: executing program 0 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf02}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) 20.374612925s ago: executing program 0 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) 17.650337829s ago: executing program 4 (id=1342): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 16.070207844s ago: executing program 6 (id=1344): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f0000000340)={'trans=xen,', {[{}, {@cache_fscache}], [{@fowner_eq}]}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) accept4$rose(r6, 0x0, &(0x7f0000000100), 0x80800) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f0000006680)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174) 15.604221851s ago: executing program 4 (id=1345): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, 0x0) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJNh65/v1+bnK/L/gd1h+WXF/zfj/462r6a46veQx//N22Ozz/RE13Sjz3e7Wfc1MKreW7X7f11PzG2A+yjC+ITSNnfbodVq1XqTzx3GetX9/dd9nlB3+XV//1Xi+L/xGD6O/xvT4/i/MT2O/xvT29cVP1watDd+X3H835gex/+N6feEcuP4wHsq0j9Zkb63Iv3eivT7KtI/VZG+vyL9/or0ByrS765If7Ai/TPhLx7TP1vx+Ycq0h/56PT5H1V8frPL7VHGdf1hnMX2eX7/MD7y/Z9Bv/9dFenA6PrZGweefOZ3324utv+f7lwPyffxjqTpRjp3judL8frJZEp7K03/PaRv9OsdME5i/xnx//vDFenA6MrPefl9wxgq+/fYM2y/VYOO8xktn0vx51P8hRQ/muKZFM+m+ECK59apfqyNJ3/7h8Ovlkvn+ztC+rDPk8f2QLGfqPkh6xOvDyz3efzYj99yrbT822wOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJuJ9uvBg3vKorj85qWjTx8/Pbsw5/FOjmb7daprqtH5XFE8luLJFP8yvbnx/isnu+ObKS6LuaIsys784pvXOyXdWRTF+WJfcaVoFnsvX33t7bmnjl84dnH/O68fvrZ23wAAAABsfv8PAAD//+ZXHDE=") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080)) 13.351451037s ago: executing program 6 (id=1346): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080)) 13.208849749s ago: executing program 4 (id=1347): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080)) 13.110076151s ago: executing program 5 (id=1348): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080)) 12.880053285s ago: executing program 2 (id=1349): socket$igmp(0x2, 0x3, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x60, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0x28, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@can={0x1d, r4, 0xc7}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0x6dd}], 0x1}}], 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r9}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x1, 0x3, 0x7, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x9, 0x80000000, 0x81, 0xfa4, 0x9, 0xfffffffffffffffb, 0x8]}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000300)=0xb83) 11.158841662s ago: executing program 0 (id=1350): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x5, "78e1141009f593233bce41f20613341f43d01f"}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 11.155879412s ago: executing program 5 (id=1351): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x3000000, 0x10000002000003, 0x0, 0x0, 0x300}) 11.111130953s ago: executing program 2 (id=1352): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x4000) 8.316795057s ago: executing program 6 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000000c0)='qdisc_dequeue\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 7.762199026s ago: executing program 4 (id=1354): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[], 0x10) 6.485913617s ago: executing program 0 (id=1355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) read$alg(r1, &(0x7f0000000080)=""/48, 0x30) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r3, 0x200004) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) 6.053439764s ago: executing program 2 (id=1356): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0182101, &(0x7f0000000080)) 5.864647077s ago: executing program 6 (id=1357): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.964819511s ago: executing program 2 (id=1358): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, &(0x7f0000000280)=0x98) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.907573212s ago: executing program 0 (id=1359): socket$igmp(0x2, 0x3, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x60, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0x28, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@can={0x1d, r4, 0xc7}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0x60d}], 0x1}}], 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r9}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x1, 0x3, 0x7, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x9, 0x80000000, 0x81, 0xfa4, 0x9, 0xfffffffffffffffb, 0x8]}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000300)=0xb83) 3.257901278s ago: executing program 0 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) 3.104547111s ago: executing program 4 (id=1361): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 2.48772664s ago: executing program 2 (id=1362): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 2.462897331s ago: executing program 6 (id=1363): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @mcast1, 0x6}}, 0x6, 0x800, 0x6, 0x2, 0x4}, 0x0) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x7fe00, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7c, &(0x7f0000001400)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7}, {0x9, 0x7, 0x3, 0x4}, {0x7ff, 0x22, 0xe6, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, &(0x7f0000000080)) 1.630934334s ago: executing program 4 (id=1364): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f0000000340)={'trans=xen,', {[{@cache_fscache}], [{@fowner_eq}]}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) accept4$rose(r6, 0x0, &(0x7f0000000100), 0x80800) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f0000006680)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174) 398.029474ms ago: executing program 2 (id=1365): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x5, "78e1141009f593233bce41f20613341f43d01f"}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88dcf146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 0s ago: executing program 6 (id=1366): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x4000) kernel console output (not intermixed with test programs): T5653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 198.556586][ T5653] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.569180][ T5663] loop4: detected capacity change from 0 to 256 [ 198.649239][ T5661] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.252703][ T4266] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 199.281973][ T5661] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 199.388683][ T27] audit: type=1800 audit(1750333402.723:4): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.339" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 199.507458][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 201.277570][ T5688] device syzkaller1 entered promiscuous mode [ 201.598954][ T5695] loop0: detected capacity change from 0 to 16 [ 202.355552][ T5695] erofs: (device loop0): mounted with root inode @ nid 36. [ 203.200091][ T5701] loop3: detected capacity change from 0 to 2048 [ 203.257218][ T5701] NILFS (loop3): invalid segment: Magic number mismatch [ 203.296107][ T5701] NILFS (loop3): trying rollback from an earlier position [ 204.046673][ T5701] NILFS (loop3): recovery complete [ 204.145244][ T5713] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.282489][ T5714] loop1: detected capacity change from 0 to 4096 [ 204.381857][ T5718] loop2: detected capacity change from 0 to 256 [ 204.785009][ T5714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.436304][ T5726] loop0: detected capacity change from 0 to 128 [ 205.478301][ T27] audit: type=1800 audit(1750333408.813:5): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.360" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 205.611200][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 205.728692][ T5733] device syzkaller1 entered promiscuous mode [ 205.912405][ T5736] loop2: detected capacity change from 0 to 8 [ 206.203831][ T5736] SQUASHFS error: zstd decompression failed, data probably corrupt [ 206.211901][ T5736] SQUASHFS error: Failed to read block 0x4ec: -5 [ 207.094822][ T5736] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 207.094867][ T5736] SQUASHFS error: Unable to read inode 0x2011f [ 208.817457][ T5761] loop3: detected capacity change from 0 to 256 [ 210.009948][ T5771] loop3: detected capacity change from 0 to 764 [ 210.046022][ T5771] rock: directory entry would overflow storage [ 210.046037][ T5771] rock: sig=0x4654, size=5, remaining=4 [ 210.071382][ T5771] rock: directory entry would overflow storage [ 210.143190][ T5771] rock: sig=0x4f50, size=4, remaining=3 [ 210.143217][ T5771] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 212.265053][ T5802] input: syz1 as /devices/virtual/input/input5 [ 212.346937][ T5803] loop4: detected capacity change from 0 to 64 [ 212.556445][ T5803] syz.4.381: attempt to access beyond end of device [ 212.556445][ T5803] loop4: rw=0, sector=128, nr_sectors = 2 limit=64 [ 212.570021][ T5803] Trying to free block not in datazone [ 212.575620][ T5803] Trying to free block not in datazone [ 212.581120][ T5803] Trying to free block not in datazone [ 212.587054][ T5803] Trying to free block not in datazone [ 212.592614][ T5803] Trying to free block not in datazone [ 212.598275][ T5803] Trying to free block not in datazone [ 212.603854][ T5803] minix_free_block (loop4:6): bit already cleared [ 215.832714][ T5823] loop3: detected capacity change from 0 to 8 [ 215.837045][ T5823] SQUASHFS error: zstd decompression failed, data probably corrupt [ 215.837082][ T5823] SQUASHFS error: Failed to read block 0x4ec: -5 [ 215.837098][ T5823] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 215.837111][ T5823] SQUASHFS error: Unable to read inode 0x2011f [ 215.882507][ T5822] loop4: detected capacity change from 0 to 64 [ 216.867798][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.275709][ T5863] loop2: detected capacity change from 0 to 64 [ 222.695141][ T5881] loop1: detected capacity change from 0 to 64 [ 222.755134][ T5881] syz.1.413: attempt to access beyond end of device [ 222.755134][ T5881] loop1: rw=0, sector=128, nr_sectors = 2 limit=64 [ 222.827619][ T5881] Trying to free block not in datazone [ 222.833345][ T5881] Trying to free block not in datazone [ 222.839540][ T5881] Trying to free block not in datazone [ 222.845988][ T5881] Trying to free block not in datazone [ 222.851507][ T5881] Trying to free block not in datazone [ 222.857592][ T5881] Trying to free block not in datazone [ 222.863422][ T5881] minix_free_block (loop1:6): bit already cleared [ 223.193811][ T5885] loop3: detected capacity change from 0 to 2048 [ 223.487304][ T5885] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 223.586943][ T5885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.696589][ T5889] loop0: detected capacity change from 0 to 164 [ 223.827652][ T5885] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 225.290264][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 225.547735][ T5905] loop2: detected capacity change from 0 to 64 [ 229.380437][ T5945] loop2: detected capacity change from 0 to 256 [ 229.394440][ T5945] exfat: Deprecated parameter 'namecase' [ 229.423333][ T5944] loop1: detected capacity change from 0 to 512 [ 229.430501][ T5944] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.437271][ T5944] EXT4-fs: Ignoring removed bh option [ 229.444143][ T5944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.455633][ T5944] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.470761][ T5945] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 229.495032][ T5944] EXT4-fs (loop1): 1 truncate cleaned up [ 229.500814][ T5944] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 230.491681][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 230.732977][ T5956] loop2: detected capacity change from 0 to 2048 [ 230.877016][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.930667][ T5954] loop1: detected capacity change from 0 to 40427 [ 230.942634][ T5954] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 230.950836][ T5954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.964978][ T5954] F2FS-fs (loop1): invalid crc value [ 231.079845][ T5954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.150980][ T5954] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.158423][ T5954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.623948][ T5965] loop0: detected capacity change from 0 to 40427 [ 231.668769][ T5965] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 231.676940][ T5965] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 231.831691][ T5965] F2FS-fs (loop0): invalid crc value [ 232.091557][ T5965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.603660][ T5965] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 232.610770][ T5965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.481084][ T5982] loop4: detected capacity change from 0 to 1024 [ 236.134200][ T6000] loop1: detected capacity change from 0 to 512 [ 236.138678][ T6000] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.138913][ T6000] EXT4-fs: Ignoring removed bh option [ 236.145249][ T6000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.145531][ T6000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.353940][ T6000] EXT4-fs (loop1): 1 truncate cleaned up [ 236.354052][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.945402][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 237.091767][ T6005] loop3: detected capacity change from 0 to 16 [ 237.134353][ T6005] erofs: (device loop3): mounted with root inode @ nid 36. [ 237.276603][ T6009] loop1: detected capacity change from 0 to 128 [ 237.302766][ T6008] loop4: detected capacity change from 0 to 64 [ 237.374228][ T6009] FAT-fs (loop1): Directory bread(block 11554) failed [ 237.381490][ T6009] FAT-fs (loop1): Directory bread(block 11555) failed [ 237.533495][ T6012] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 237.544011][ T6012] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 237.552999][ T6012] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 237.576970][ T6012] syz.3.445: attempt to access beyond end of device [ 237.576970][ T6012] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 237.602646][ T6012] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 237.612767][ T27] audit: type=1800 audit(1750333440.943:6): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.445" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 237.679126][ T6009] FAT-fs (loop1): Directory bread(block 11556) failed [ 237.734784][ T6009] FAT-fs (loop1): Directory bread(block 11557) failed [ 237.794651][ T6009] FAT-fs (loop1): Directory bread(block 11558) failed [ 237.801524][ T6009] FAT-fs (loop1): Directory bread(block 11559) failed [ 237.808428][ T6009] FAT-fs (loop1): Directory bread(block 11560) failed [ 237.815337][ T6009] FAT-fs (loop1): Directory bread(block 11561) failed [ 237.822554][ T6009] FAT-fs (loop1): Directory bread(block 11562) failed [ 237.843281][ T6009] FAT-fs (loop1): Directory bread(block 11563) failed [ 237.933255][ T125] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 239.037413][ T125] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 239.045769][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.057025][ T125] usb 4-1: config 0 has no interface number 0 [ 239.063279][ T125] usb 4-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.194229][ T6025] loop1: detected capacity change from 0 to 256 [ 239.924291][ T6025] FAT-fs (loop1): Directory bread(block 64) failed [ 239.931109][ T6025] FAT-fs (loop1): Directory bread(block 65) failed [ 239.937745][ T6025] FAT-fs (loop1): Directory bread(block 66) failed [ 239.944276][ T6025] FAT-fs (loop1): Directory bread(block 67) failed [ 239.950800][ T6025] FAT-fs (loop1): Directory bread(block 68) failed [ 239.957325][ T6025] FAT-fs (loop1): Directory bread(block 69) failed [ 239.963926][ T6025] FAT-fs (loop1): Directory bread(block 70) failed [ 239.970416][ T6025] FAT-fs (loop1): Directory bread(block 71) failed [ 239.976967][ T6025] FAT-fs (loop1): Directory bread(block 72) failed [ 239.983526][ T6025] FAT-fs (loop1): Directory bread(block 73) failed [ 240.004384][ T125] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 240.233632][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.287785][ T6030] loop0: detected capacity change from 0 to 16 [ 240.298571][ T6030] erofs: (device loop0): mounted with root inode @ nid 36. [ 240.308301][ T4266] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 240.324653][ T6030] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 240.335928][ T27] audit: type=1800 audit(1750333443.673:7): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.450" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 240.365449][ T125] usb 4-1: Product: syz [ 240.477296][ T125] usb 4-1: Manufacturer: syz [ 240.477348][ T125] usb 4-1: SerialNumber: syz [ 240.816282][ T125] usb 4-1: config 0 descriptor?? [ 240.825433][ T125] usb 4-1: can't set config #0, error -71 [ 240.973455][ T125] usb 4-1: USB disconnect, device number 6 [ 241.471724][ T6046] loop2: detected capacity change from 0 to 512 [ 241.479963][ T6046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.516056][ T6047] loop3: detected capacity change from 0 to 512 [ 241.523216][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.529702][ T6047] EXT4-fs: Ignoring removed bh option [ 241.552945][ T6047] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.564646][ T6047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.600644][ T6047] EXT4-fs (loop3): 1 truncate cleaned up [ 241.606502][ T6047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.607303][ T6046] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 241.677116][ T6046] EXT4-fs (loop2): 1 truncate cleaned up [ 241.682929][ T6046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 243.961575][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 243.982185][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 244.135764][ T6067] kernel read not supported for file /!sel (pid: 6067 comm: syz.2.461) [ 244.168126][ T27] audit: type=1800 audit(1750333447.493:8): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.461" name="!sel" dev="mqueue" ino=36821 res=0 errno=0 [ 244.452759][ T4779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 244.860327][ T4779] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.353200][ T4779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.361264][ T4779] usb 1-1: Product: syz [ 245.375798][ T4779] usb 1-1: Manufacturer: syz [ 245.380942][ T4779] usb 1-1: SerialNumber: syz [ 245.402948][ T4779] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.486221][ T4779] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 245.930638][ T6065] loop0: detected capacity change from 0 to 136 [ 246.332692][ T6078] loop1: detected capacity change from 0 to 32768 [ 246.494934][ T6078] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.464 (6078) [ 246.569198][ T6078] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 246.610582][ T1043] block nbd2: Attempted send on invalid socket [ 246.617644][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 246.629588][ T6097] efs: cannot read volume header [ 246.843726][ T6078] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 247.008171][ T6078] BTRFS info (device loop1): using free space tree [ 247.302904][ T4779] usb 1-1: Service connection timeout for: 256 [ 247.343391][ T4779] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 247.379970][ T125] usb 1-1: USB disconnect, device number 2 [ 247.428729][ T4779] ath9k_htc: Failed to initialize the device [ 247.497925][ T125] usb 1-1: ath9k_htc: USB layer deinitialized [ 249.065180][ T6078] BTRFS error (device loop1): open_ctree failed: -12 [ 249.065580][ T4354] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4354) [ 249.169606][ T6130] loop2: detected capacity change from 0 to 128 [ 250.823296][ T27] audit: type=1326 audit(1750333454.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 250.877349][ T6157] loop3: detected capacity change from 0 to 256 [ 250.905585][ T27] audit: type=1326 audit(1750333454.193:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 250.935263][ T6157] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.963316][ T6157] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 250.998135][ T27] audit: type=1326 audit(1750333454.193:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 251.041749][ T6157] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 251.114881][ T27] audit: type=1326 audit(1750333454.193:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 251.139229][ T6157] afs: Unknown parameter 'dy' [ 251.314019][ T27] audit: type=1326 audit(1750333454.193:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 251.346477][ T27] audit: type=1326 audit(1750333454.193:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 252.442937][ T27] audit: type=1326 audit(1750333454.193:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 252.553472][ T6170] loop1: detected capacity change from 0 to 128 [ 252.554750][ T27] audit: type=1326 audit(1750333454.193:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 252.581801][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.629118][ T27] audit: type=1326 audit(1750333454.193:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 252.997552][ T6174] loop3: detected capacity change from 0 to 40427 [ 253.028342][ T6174] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 253.036245][ T6174] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.048952][ T6174] F2FS-fs (loop3): invalid crc value [ 253.536685][ T6174] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.591262][ T27] audit: type=1326 audit(1750333454.193:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.2.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 253.613537][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.632539][ T6174] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 253.639825][ T6174] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.046793][ T6186] loop2: detected capacity change from 0 to 40427 [ 254.175432][ T6186] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 254.183398][ T6186] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 254.199471][ T6186] F2FS-fs (loop2): invalid crc value [ 254.406677][ T6186] F2FS-fs (loop2): Found nat_bits in checkpoint [ 254.991628][ T6186] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.998941][ T6186] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.894586][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913852][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.939368][ T6203] loop4: detected capacity change from 0 to 64 [ 259.668816][ T6209] loop3: detected capacity change from 0 to 262144 [ 259.680903][ T6209] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.499 (6209) [ 259.700934][ T6209] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 259.711180][ T6209] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 259.720529][ T6209] BTRFS info (device loop3): using free space tree [ 260.121517][ T6242] loop2: detected capacity change from 0 to 8 [ 260.200641][ T6209] BTRFS info (device loop3): enabling ssd optimizations [ 260.281161][ T6242] SQUASHFS error: zstd decompression failed, data probably corrupt [ 260.322587][ T6209] BTRFS info (device loop3): balance: start -d -m [ 260.342868][ T6209] BTRFS info (device loop3): relocating block group 30408704 flags metadata|dup [ 260.373865][ T6242] SQUASHFS error: Failed to read block 0x4ec: -5 [ 260.403211][ T6242] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 260.452441][ T6242] SQUASHFS error: Unable to read inode 0x2011f [ 260.520559][ T6209] BTRFS info (device loop3): found 3 extents, stage: move data extents [ 260.557021][ T6209] BTRFS info (device loop3): relocating block group 13631488 flags data [ 260.582575][ T6209] BTRFS info (device loop3): balance: canceled [ 260.653529][ T4255] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 262.067345][ T6249] loop1: detected capacity change from 0 to 32768 [ 262.269951][ T6249] XFS (loop1): Mounting V5 Filesystem [ 262.466246][ T6249] XFS (loop1): Ending clean mount [ 262.964261][ T4260] XFS (loop1): Unmounting Filesystem [ 264.948679][ T6291] loop2: detected capacity change from 0 to 128 [ 265.033552][ T6290] 9pnet_fd: Insufficient options for proto=fd [ 265.235186][ T6290] lo speed is unknown, defaulting to 1000 [ 265.244188][ T6290] lo speed is unknown, defaulting to 1000 [ 265.246428][ T6290] lo speed is unknown, defaulting to 1000 [ 265.262894][ T6290] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 265.269196][ T6290] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.391322][ T6290] lo speed is unknown, defaulting to 1000 [ 265.398418][ T6290] lo speed is unknown, defaulting to 1000 [ 265.404046][ T6290] lo speed is unknown, defaulting to 1000 [ 265.409842][ T6290] lo speed is unknown, defaulting to 1000 [ 265.422523][ T6290] lo speed is unknown, defaulting to 1000 [ 265.849271][ T6292] tty tty21: ldisc open failed (-12), clearing slot 20 [ 266.903659][ T6299] loop0: detected capacity change from 0 to 128 [ 266.985346][ T6307] overlayfs: overlapping lowerdir path [ 267.064232][ T6299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 267.143362][ T6299] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.190391][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 268.836640][ T6327] loop1: detected capacity change from 0 to 16 [ 269.394652][ T6327] erofs: (device loop1): mounted with root inode @ nid 36. [ 270.146783][ T6329] loop0: detected capacity change from 0 to 128 [ 270.253316][ T6329] FAT-fs (loop0): Directory bread(block 11554) failed [ 270.293270][ T6329] FAT-fs (loop0): Directory bread(block 11555) failed [ 270.300178][ T6329] FAT-fs (loop0): Directory bread(block 11556) failed [ 270.419828][ T6329] FAT-fs (loop0): Directory bread(block 11557) failed [ 270.444175][ T6329] FAT-fs (loop0): Directory bread(block 11558) failed [ 270.475921][ T6329] FAT-fs (loop0): Directory bread(block 11559) failed [ 272.353326][ T6329] FAT-fs (loop0): Directory bread(block 11560) failed [ 272.353402][ T6329] FAT-fs (loop0): Directory bread(block 11561) failed [ 272.353729][ T6329] FAT-fs (loop0): Directory bread(block 11562) failed [ 272.353760][ T6329] FAT-fs (loop0): Directory bread(block 11563) failed [ 272.538292][ T6342] loop1: detected capacity change from 0 to 128 [ 274.448566][ T6357] loop0: detected capacity change from 0 to 40427 [ 274.471728][ T6357] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 274.479567][ T6357] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 274.489917][ T6357] F2FS-fs (loop0): invalid crc value [ 274.526700][ T6357] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.577353][ T6357] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 274.584799][ T6357] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 276.087673][ T6383] loop3: detected capacity change from 0 to 128 [ 276.147239][ T6383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.170881][ T6383] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.227393][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 277.241524][ T6390] loop2: detected capacity change from 0 to 128 [ 277.321208][ T6390] FAT-fs (loop2): Directory bread(block 11554) failed [ 277.364359][ T6390] FAT-fs (loop2): Directory bread(block 11555) failed [ 277.394258][ T6390] FAT-fs (loop2): Directory bread(block 11556) failed [ 277.416167][ T6390] FAT-fs (loop2): Directory bread(block 11557) failed [ 277.583273][ T6390] FAT-fs (loop2): Directory bread(block 11558) failed [ 277.590308][ T6390] FAT-fs (loop2): Directory bread(block 11559) failed [ 277.629487][ T6390] FAT-fs (loop2): Directory bread(block 11560) failed [ 278.603332][ T6390] FAT-fs (loop2): Directory bread(block 11561) failed [ 278.604119][ T6390] FAT-fs (loop2): Directory bread(block 11562) failed [ 278.660935][ T6390] FAT-fs (loop2): Directory bread(block 11563) failed [ 278.922153][ T6400] loop0: detected capacity change from 0 to 128 [ 282.576012][ T6422] loop4: detected capacity change from 0 to 64 [ 282.697224][ T6420] loop0: detected capacity change from 0 to 4096 [ 282.703542][ T6420] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 284.399975][ T6442] device team_slave_0 entered promiscuous mode [ 284.406645][ T6442] device team_slave_1 entered promiscuous mode [ 284.463482][ T6442] device macsec1 entered promiscuous mode [ 284.469268][ T6442] device team0 entered promiscuous mode [ 284.769217][ T6442] device team0 left promiscuous mode [ 284.882774][ T6442] device team_slave_0 left promiscuous mode [ 284.889064][ T6442] device team_slave_1 left promiscuous mode [ 286.067131][ T6459] loop2: detected capacity change from 0 to 16 [ 286.133643][ T6459] erofs: (device loop2): mounted with root inode @ nid 36. [ 287.724414][ T6476] overlayfs: failed to resolve './file2': -2 [ 288.126751][ T6481] loop0: detected capacity change from 0 to 8 [ 288.137687][ T6481] SQUASHFS error: zstd decompression failed, data probably corrupt [ 288.145946][ T6481] SQUASHFS error: Failed to read block 0x4ec: -5 [ 288.152526][ T6481] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 288.160130][ T6481] SQUASHFS error: Unable to read inode 0x2011f [ 289.025358][ T6499] loop2: detected capacity change from 0 to 16 [ 289.084273][ T6499] erofs: (device loop2): mounted with root inode @ nid 36. [ 289.740602][ T6505] loop4: detected capacity change from 0 to 512 [ 289.938701][ T6505] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.081872][ T6505] EXT4-fs: Ignoring removed bh option [ 290.142721][ T6505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.190803][ T6509] overlayfs: failed to resolve './file2': -2 [ 290.201688][ T6505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.302345][ T6505] EXT4-fs (loop4): 1 truncate cleaned up [ 290.363182][ T6505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.732996][ T6492] loop1: detected capacity change from 0 to 32768 [ 291.742818][ T6492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.576 (6492) [ 293.092118][ T4297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 293.434985][ T4297] usb 3-1: config 0 has no interfaces? [ 293.440554][ T4297] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 293.493142][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.577061][ T6544] overlayfs: overlapping lowerdir path [ 293.716576][ T4297] usb 3-1: config 0 descriptor?? [ 294.347904][ T4297] usb 3-1: USB disconnect, device number 2 [ 294.506824][ T6548] loop1: detected capacity change from 0 to 16 [ 294.565522][ T6548] erofs: (device loop1): mounted with root inode @ nid 36. [ 295.794270][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 296.610481][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 296.794382][ T6550] loop0: detected capacity change from 0 to 32768 [ 297.059339][ T6550] XFS (loop0): Mounting V5 Filesystem [ 298.188192][ T6550] XFS (loop0): Ending clean mount [ 298.487114][ T6550] XFS (loop0): Quotacheck needed: Please wait. [ 299.751629][ T6585] loop1: detected capacity change from 0 to 164 [ 299.816075][ T6550] XFS (loop0): Quotacheck: Done. [ 299.847008][ T52] block nbd2: Attempted send on invalid socket [ 299.853381][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 299.862474][ T6592] efs: cannot read volume header [ 300.076034][ T4252] XFS (loop0): Unmounting Filesystem [ 300.149875][ T6587] capability: warning: `syz.1.601' uses 32-bit capabilities (legacy support in use) [ 301.039927][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 303.795147][ T1043] block nbd2: Attempted send on invalid socket [ 303.801971][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 303.814766][ T6625] efs: cannot read volume header [ 304.830931][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 304.861420][ T6644] fuse: Bad value for 'fd' [ 305.054966][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 305.087845][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.623'. [ 305.139755][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.317888][ T6650] device bridge_slave_0 left promiscuous mode [ 305.333031][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.582132][ T6659] loop0: detected capacity change from 0 to 512 [ 305.634273][ T6659] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.700383][ T6659] EXT4-fs: Ignoring removed bh option [ 305.749569][ T6659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.856955][ T6659] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.009314][ T6659] EXT4-fs (loop0): 1 truncate cleaned up [ 306.143273][ T6659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.317312][ T1043] block nbd3: Attempted send on invalid socket [ 306.324578][ T1043] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 306.335022][ T6671] efs: cannot read volume header [ 307.728619][ T6685] fuse: Bad value for 'fd' [ 307.964694][ T6690] loop3: detected capacity change from 0 to 64 [ 309.058721][ T6703] loop4: detected capacity change from 0 to 40427 [ 309.316520][ T6703] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 309.324620][ T6703] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 309.339727][ T6703] F2FS-fs (loop4): invalid crc value [ 309.600861][ T6703] F2FS-fs (loop4): Found nat_bits in checkpoint [ 309.667800][ T6703] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 309.674982][ T6703] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.951565][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 310.298409][ T6720] loop2: detected capacity change from 0 to 16 [ 310.434108][ T6720] erofs: (device loop2): mounted with root inode @ nid 36. [ 310.502417][ T4316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 311.839935][ T4316] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.996412][ T4316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 312.138776][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 312.185668][ T4316] usb 4-1: Product: syz [ 312.265443][ T4316] usb 4-1: Manufacturer: syz [ 312.288814][ T6729] loop2: detected capacity change from 0 to 16 [ 312.298651][ T4316] usb 4-1: SerialNumber: syz [ 312.393955][ T6729] erofs: (device loop2): mounted with root inode @ nid 36. [ 312.446984][ T4266] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 312.458982][ T6729] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 312.555027][ T27] audit: type=1800 audit(1750333515.893:19): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.647" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 313.086457][ T4316] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 313.163314][ T4316] usb 4-1: USB disconnect, device number 7 [ 313.210629][ T4316] usblp0: removed [ 315.275241][ T6755] fuse: Bad value for 'fd' [ 315.892047][ T6764] loop2: detected capacity change from 0 to 16 [ 315.954218][ T6764] erofs: (device loop2): mounted with root inode @ nid 36. [ 316.939755][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.946187][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.152488][ T6772] loop1: detected capacity change from 0 to 16 [ 317.199204][ T6772] erofs: (device loop1): mounted with root inode @ nid 36. [ 319.167852][ T6786] fuse: Bad value for 'fd' [ 319.880319][ T6791] loop2: detected capacity change from 0 to 8 [ 319.890884][ T6791] SQUASHFS error: zstd decompression failed, data probably corrupt [ 319.899356][ T6791] SQUASHFS error: Failed to read block 0x4ec: -5 [ 319.905896][ T6791] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 319.913289][ T6791] SQUASHFS error: Unable to read inode 0x2011f [ 320.185348][ T4354] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.351701][ T6802] loop1: detected capacity change from 0 to 32768 [ 322.533214][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 322.533351][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 322.562967][ T6802] XFS (loop1): Mounting V5 Filesystem [ 322.669926][ T6802] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 322.723009][ T6802] XFS (loop1): Starting recovery (logdev: internal) [ 323.103263][ T6802] XFS (loop1): Ending recovery (logdev: internal) [ 323.282883][ T27] audit: type=1804 audit(1750333526.613:20): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.671" name="/newroot/137/file1/file1" dev="loop1" ino=4422 res=1 errno=0 [ 323.557279][ T4260] XFS (loop1): Unmounting Filesystem [ 325.575878][ T6842] loop0: detected capacity change from 0 to 64 [ 325.644393][ T6844] fuse: Bad value for 'fd' [ 326.896369][ T6860] loop2: detected capacity change from 0 to 8 [ 326.976621][ T6860] SQUASHFS error: zstd decompression failed, data probably corrupt [ 327.028001][ T6860] SQUASHFS error: Failed to read block 0x4ec: -5 [ 327.035170][ T6860] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 327.044300][ T6860] SQUASHFS error: Unable to read inode 0x2011f [ 327.052304][ T6864] overlayfs: failed to resolve './file2': -2 [ 328.833569][ T6881] loop3: detected capacity change from 0 to 64 [ 331.064232][ T6906] overlayfs: failed to resolve './file2': -2 [ 332.546083][ T6920] loop2: detected capacity change from 0 to 64 [ 332.686533][ T6925] loop4: detected capacity change from 0 to 64 [ 333.981526][ T6939] loop3: detected capacity change from 0 to 128 [ 334.911074][ T1043] block nbd2: Attempted send on invalid socket [ 334.947013][ T1043] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 335.005926][ T6944] efs: cannot read volume header [ 336.215686][ T6962] loop3: detected capacity change from 0 to 64 [ 338.735005][ T6982] loop4: detected capacity change from 0 to 16 [ 339.106023][ T6982] erofs: (device loop4): mounted with root inode @ nid 36. [ 339.179615][ T6988] loop1: detected capacity change from 0 to 16 [ 339.248061][ T6988] erofs: (device loop1): mounted with root inode @ nid 36. [ 339.360230][ T6989] loop0: detected capacity change from 0 to 512 [ 339.373983][ T4266] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 339.386294][ T6982] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 339.483973][ T6993] loop2: detected capacity change from 0 to 16 [ 339.523848][ T6993] erofs: (device loop2): mounted with root inode @ nid 36. [ 339.534397][ T6989] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.670006][ T27] audit: type=1800 audit(1750333543.003:21): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.723" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 339.743578][ T6989] EXT4-fs: Ignoring removed bh option [ 339.824330][ T6989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.950247][ T7000] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 339.959643][ T7000] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 339.968820][ T7000] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 339.973563][ T6989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 339.977969][ T7000] syz.2.728: attempt to access beyond end of device [ 339.977969][ T7000] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 340.001776][ T7000] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 340.010775][ T27] audit: type=1800 audit(1750333543.343:22): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.728" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 340.030549][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.144755][ T6989] EXT4-fs (loop0): 1 truncate cleaned up [ 340.150477][ T6989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.433148][ T5341] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 340.634957][ T5341] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 340.653094][ T5341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.693116][ T5341] usb 3-1: config 0 has no interface number 0 [ 340.713119][ T5341] usb 3-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.770542][ T5341] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 340.809054][ T5341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.847770][ T5341] usb 3-1: Product: syz [ 340.852002][ T5341] usb 3-1: Manufacturer: syz [ 340.873135][ T5341] usb 3-1: SerialNumber: syz [ 340.895860][ T5341] usb 3-1: config 0 descriptor?? [ 341.006639][ T7005] loop1: detected capacity change from 0 to 16 [ 341.126594][ T7005] erofs: (device loop1): mounted with root inode @ nid 36. [ 342.109520][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 344.928121][ T5341] usb 3-1: MIDIStreaming interface descriptor not found [ 344.967484][ T7031] loop1: detected capacity change from 0 to 16 [ 344.995345][ T7031] erofs: (device loop1): mounted with root inode @ nid 36. [ 345.003160][ T5341] usb 3-1: USB disconnect, device number 3 [ 347.205846][ T5330] udevd[5330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.944080][ T7057] loop3: detected capacity change from 0 to 16 [ 348.042805][ T7057] erofs: (device loop3): mounted with root inode @ nid 36. [ 348.240315][ T4266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 348.257692][ T7057] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 348.403524][ T27] audit: type=1800 audit(1750333551.743:23): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.742" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 351.064786][ T7083] loop4: detected capacity change from 0 to 16 [ 351.092182][ T7083] erofs: (device loop4): mounted with root inode @ nid 36. [ 352.535790][ T7094] loop2: detected capacity change from 0 to 64 [ 352.603782][ T7092] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 352.612946][ T7092] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 352.622025][ T7092] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 352.632734][ T7092] syz.4.750: attempt to access beyond end of device [ 352.632734][ T7092] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 352.646713][ T7092] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 352.685918][ T27] audit: type=1800 audit(1750333555.993:24): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.750" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 353.033651][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 353.312342][ T4316] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 353.353008][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.494147][ T4316] usb 5-1: config 0 has no interface number 0 [ 353.500854][ T4316] usb 5-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.764455][ T4316] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 353.783097][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.791149][ T4316] usb 5-1: Product: syz [ 353.897669][ T7106] loop3: detected capacity change from 0 to 8 [ 353.928278][ T7106] SQUASHFS error: zstd decompression failed, data probably corrupt [ 353.936711][ T7106] SQUASHFS error: Failed to read block 0x4ec: -5 [ 353.943281][ T7106] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 353.950632][ T7106] SQUASHFS error: Unable to read inode 0x2011f [ 354.953410][ T4316] usb 5-1: Manufacturer: syz [ 355.548046][ T4316] usb 5-1: SerialNumber: syz [ 355.565626][ T4316] usb 5-1: config 0 descriptor?? [ 355.749030][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.323155][ T4316] usb 5-1: can't set config #0, error -71 [ 357.344073][ T4316] usb 5-1: USB disconnect, device number 7 [ 360.923785][ T7148] loop0: detected capacity change from 0 to 64 [ 362.934787][ T7159] loop0: detected capacity change from 0 to 64 [ 363.674064][ T7169] loop4: detected capacity change from 0 to 8 [ 363.700771][ T7169] SQUASHFS error: zstd decompression failed, data probably corrupt [ 363.709061][ T7169] SQUASHFS error: Failed to read block 0x4ec: -5 [ 363.715513][ T7169] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 363.722866][ T7169] SQUASHFS error: Unable to read inode 0x2011f [ 365.139424][ T7173] loop3: detected capacity change from 0 to 16 [ 365.256104][ T7173] erofs: (device loop3): mounted with root inode @ nid 36. [ 366.644754][ T7185] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 366.654037][ T7185] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 366.663071][ T7185] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 366.672180][ T7185] syz.3.772: attempt to access beyond end of device [ 366.672180][ T7185] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 366.689221][ T7185] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 366.713113][ T27] audit: type=1800 audit(1750333570.033:25): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.772" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 366.983373][ T4325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 368.077263][ T7197] loop4: detected capacity change from 0 to 512 [ 368.085020][ T7197] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.091487][ T7197] EXT4-fs: Ignoring removed bh option [ 368.109745][ T7197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.121448][ T7197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.133202][ T4325] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 368.468105][ T7197] EXT4-fs (loop4): 1 truncate cleaned up [ 368.474083][ T7197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 368.546203][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.556571][ T4325] usb 4-1: config 0 has no interface number 0 [ 368.562805][ T4325] usb 4-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.116438][ T7213] loop0: detected capacity change from 0 to 16 [ 370.179997][ T7213] erofs: (device loop0): mounted with root inode @ nid 36. [ 370.269279][ T4266] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 370.280572][ T7212] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 370.303108][ T27] audit: type=1800 audit(1750333573.633:26): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.781" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 370.450863][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 371.099194][ T7222] loop1: detected capacity change from 0 to 16 [ 371.123976][ T7222] erofs: (device loop1): mounted with root inode @ nid 36. [ 371.953469][ T4325] usb 4-1: string descriptor 0 read error: -71 [ 371.959873][ T4325] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 371.981110][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.090772][ T4325] usb 4-1: config 0 descriptor?? [ 372.119190][ T4325] usb 4-1: can't set config #0, error -71 [ 372.157811][ T4325] usb 4-1: USB disconnect, device number 8 [ 375.349438][ T7248] loop0: detected capacity change from 0 to 64 [ 378.423823][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.430408][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.109908][ T7287] loop3: detected capacity change from 0 to 8 [ 381.369929][ T7287] SQUASHFS error: zstd decompression failed, data probably corrupt [ 381.659164][ T7287] SQUASHFS error: Failed to read block 0x4ec: -5 [ 381.993341][ T7287] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 382.000709][ T7287] SQUASHFS error: Unable to read inode 0x2011f [ 382.132627][ T7297] loop1: detected capacity change from 0 to 64 [ 384.236456][ T7304] loop0: detected capacity change from 0 to 8 [ 384.433886][ T7304] SQUASHFS error: Failed to allocate zstd workspace [ 384.564551][ T7304] squashfs image failed sanity check [ 388.496467][ T7332] loop2: detected capacity change from 0 to 512 [ 388.593560][ T7332] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.683719][ T7332] EXT4-fs: Ignoring removed bh option [ 388.709146][ T7332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 388.773508][ T7332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.812092][ T7332] EXT4-fs (loop2): 1 truncate cleaned up [ 388.828086][ T7332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 390.126566][ T7359] loop4: detected capacity change from 0 to 16 [ 390.136987][ T7359] erofs: (device loop4): mounted with root inode @ nid 36. [ 390.173253][ T4266] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 390.184596][ T7359] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 390.196395][ T27] audit: type=1800 audit(1750333593.543:27): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.817" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 393.040410][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 393.141611][ T7378] loop0: detected capacity change from 0 to 16 [ 393.179193][ T7378] erofs: (device loop0): mounted with root inode @ nid 36. [ 394.831844][ T7389] loop1: detected capacity change from 0 to 8 [ 394.852653][ T7389] SQUASHFS error: zstd decompression failed, data probably corrupt [ 394.860766][ T7389] SQUASHFS error: Failed to read block 0x4ec: -5 [ 394.867236][ T7389] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 394.874616][ T7389] SQUASHFS error: Unable to read inode 0x2011f [ 400.792176][ T7432] loop4: detected capacity change from 0 to 16 [ 400.928689][ T7432] erofs: (device loop4): mounted with root inode @ nid 36. [ 401.875689][ T7442] loop1: detected capacity change from 0 to 64 [ 401.898448][ T7443] loop0: detected capacity change from 0 to 512 [ 402.055389][ T7443] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.102889][ T7443] EXT4-fs: Ignoring removed bh option [ 402.178133][ T7443] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 402.377891][ T7443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 402.532981][ T7449] loop3: detected capacity change from 0 to 16 [ 402.545860][ T7449] erofs: (device loop3): mounted with root inode @ nid 36. [ 402.650650][ T4266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 402.664359][ T7449] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 402.676448][ T27] audit: type=1800 audit(1750333606.013:28): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.845" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 402.979000][ T7443] EXT4-fs: failed to create workqueue [ 403.052555][ T7443] EXT4-fs (loop0): mount failed [ 407.855230][ T7489] loop3: detected capacity change from 0 to 8 [ 407.867798][ T7495] loop4: detected capacity change from 0 to 64 [ 408.219814][ T7489] SQUASHFS error: zstd decompression failed, data probably corrupt [ 408.633092][ T7489] SQUASHFS error: Failed to read block 0x4ec: -5 [ 408.639589][ T7489] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 408.647005][ T7489] SQUASHFS error: Unable to read inode 0x2011f [ 410.360867][ T7512] loop0: detected capacity change from 0 to 64 [ 411.936750][ T7522] loop4: detected capacity change from 0 to 16 [ 411.944939][ T7522] erofs: (device loop4): mounted with root inode @ nid 36. [ 415.467751][ T7553] fuse: Bad value for 'group_id' [ 415.579106][ T7556] loop2: detected capacity change from 0 to 8 [ 415.611078][ T7556] SQUASHFS error: zstd decompression failed, data probably corrupt [ 415.619194][ T7556] SQUASHFS error: Failed to read block 0x4ec: -5 [ 415.625882][ T7556] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 415.633332][ T7556] SQUASHFS error: Unable to read inode 0x2011f [ 416.258873][ T7555] loop0: detected capacity change from 0 to 512 [ 416.490350][ T7555] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.560398][ T7555] EXT4-fs: Ignoring removed bh option [ 416.633544][ T7555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.718725][ T7555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.856470][ T7555] EXT4-fs (loop0): 1 truncate cleaned up [ 416.911934][ T7555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 417.216746][ T7571] loop3: detected capacity change from 0 to 8 [ 417.275596][ T7571] SQUASHFS error: zstd decompression failed, data probably corrupt [ 417.283689][ T7571] SQUASHFS error: Failed to read block 0x4ec: -5 [ 417.290071][ T7571] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 417.297460][ T7571] SQUASHFS error: Unable to read inode 0x2011f [ 417.382294][ T7572] loop4: detected capacity change from 0 to 64 [ 421.450529][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 421.474306][ T7600] loop4: detected capacity change from 0 to 64 [ 422.769723][ T7612] loop2: detected capacity change from 0 to 16 [ 423.014550][ T7612] erofs: (device loop2): mounted with root inode @ nid 36. [ 423.477886][ T7617] loop4: detected capacity change from 0 to 8 [ 423.489406][ T7621] fuse: Bad value for 'group_id' [ 423.623748][ T7617] SQUASHFS error: zstd decompression failed, data probably corrupt [ 423.733287][ T7617] SQUASHFS error: Failed to read block 0x4ec: -5 [ 423.862876][ T7617] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 424.320493][ T7617] SQUASHFS error: Unable to read inode 0x2011f [ 425.982391][ T7637] loop0: detected capacity change from 0 to 8 [ 425.992952][ T7637] SQUASHFS error: zstd decompression failed, data probably corrupt [ 426.001142][ T7637] SQUASHFS error: Failed to read block 0x4ec: -5 [ 426.007604][ T7637] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 426.015029][ T7637] SQUASHFS error: Unable to read inode 0x2011f [ 426.094665][ T4354] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.292064][ T7639] loop1: detected capacity change from 0 to 64 [ 426.749775][ T7644] loop3: detected capacity change from 0 to 16 [ 426.815350][ T7644] erofs: (device loop3): mounted with root inode @ nid 36. [ 426.905085][ T4266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 426.917640][ T7644] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 426.960303][ T27] audit: type=1800 audit(1750333630.293:29): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.897" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 427.538640][ T7650] loop2: detected capacity change from 0 to 512 [ 427.579487][ T7650] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.642834][ T7650] EXT4-fs: Ignoring removed bh option [ 427.744712][ T7650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 427.861451][ T7650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 427.883691][ T7650] EXT4-fs (loop2): 1 truncate cleaned up [ 427.891574][ T7650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.595327][ T7693] loop0: detected capacity change from 0 to 16 [ 432.612185][ T7693] erofs: (device loop0): mounted with root inode @ nid 36. [ 432.798633][ T7697] loop3: detected capacity change from 0 to 8 [ 432.844791][ T7697] SQUASHFS error: zstd decompression failed, data probably corrupt [ 432.852973][ T7697] SQUASHFS error: Failed to read block 0x4ec: -5 [ 432.889302][ T7697] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 432.939805][ T7700] loop1: detected capacity change from 0 to 64 [ 432.953833][ T7697] SQUASHFS error: Unable to read inode 0x2011f [ 433.387697][ T7702] loop4: detected capacity change from 0 to 8 [ 433.397874][ T7702] SQUASHFS error: zstd decompression failed, data probably corrupt [ 433.405953][ T7702] SQUASHFS error: Failed to read block 0x4ec: -5 [ 433.412329][ T7702] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 433.419735][ T7702] SQUASHFS error: Unable to read inode 0x2011f [ 433.558765][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 436.041860][ T7725] loop2: detected capacity change from 0 to 8 [ 436.056325][ T7725] SQUASHFS error: zstd decompression failed, data probably corrupt [ 436.064848][ T7725] SQUASHFS error: Failed to read block 0x4ec: -5 [ 436.071208][ T7725] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 436.078584][ T7725] SQUASHFS error: Unable to read inode 0x2011f [ 439.708047][ T7744] random: crng reseeded on system resumption [ 439.816234][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.822584][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.585780][ T7753] loop2: detected capacity change from 0 to 64 [ 440.828789][ T7751] loop3: detected capacity change from 0 to 512 [ 440.841487][ T7751] EXT4-fs: Ignoring removed mblk_io_submit option [ 440.880148][ T7751] EXT4-fs: Ignoring removed bh option [ 441.005023][ T7751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 441.230640][ T7751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 441.376594][ T7751] EXT4-fs (loop3): 1 truncate cleaned up [ 441.384524][ T7751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 445.046164][ T7790] loop4: detected capacity change from 0 to 8 [ 445.272834][ T7790] SQUASHFS error: zstd decompression failed, data probably corrupt [ 445.600762][ T7790] SQUASHFS error: Failed to read block 0x4ec: -5 [ 445.757326][ T7793] xt_hashlimit: size too large, truncated to 1048576 [ 445.897006][ T7790] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 446.070633][ T7790] SQUASHFS error: Unable to read inode 0x2011f [ 446.368556][ T7800] loop2: detected capacity change from 0 to 8 [ 446.516986][ T1043] block nbd0: Attempted send on invalid socket [ 446.523525][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 446.534328][ T7803] efs: cannot read volume header [ 447.289458][ T7800] SQUASHFS error: zstd decompression failed, data probably corrupt [ 447.323109][ T7800] SQUASHFS error: Failed to read block 0x4ec: -5 [ 447.329519][ T7800] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 447.418639][ T7800] SQUASHFS error: Unable to read inode 0x2011f [ 450.886642][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 451.257893][ T7823] loop3: detected capacity change from 0 to 64 [ 452.771821][ T7831] loop3: detected capacity change from 0 to 8 [ 452.813641][ T7831] SQUASHFS error: zstd decompression failed, data probably corrupt [ 452.821709][ T7831] SQUASHFS error: Failed to read block 0x4ec: -5 [ 452.828171][ T7831] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 452.835542][ T7831] SQUASHFS error: Unable to read inode 0x2011f [ 452.927556][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.044063][ T1043] block nbd0: Attempted send on invalid socket [ 455.050307][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.063115][ T7839] efs: cannot read volume header [ 455.582107][ T7848] loop3: detected capacity change from 0 to 8 [ 455.769878][ T7848] SQUASHFS error: zstd decompression failed, data probably corrupt [ 455.837542][ T7848] SQUASHFS error: Failed to read block 0x4ec: -5 [ 455.869557][ T7848] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 455.883788][ T7848] SQUASHFS error: Unable to read inode 0x2011f [ 456.084619][ T27] audit: type=1326 audit(1750333659.423:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.175953][ T27] audit: type=1326 audit(1750333659.423:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.230903][ T27] audit: type=1326 audit(1750333659.423:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.260968][ T27] audit: type=1326 audit(1750333659.423:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.291067][ T27] audit: type=1326 audit(1750333659.433:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.320344][ T27] audit: type=1326 audit(1750333659.433:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.343296][ T27] audit: type=1326 audit(1750333659.433:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.366534][ T27] audit: type=1326 audit(1750333659.433:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.389642][ T27] audit: type=1326 audit(1750333659.433:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.416703][ T27] audit: type=1326 audit(1750333659.433:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc7c7d8e929 code=0x7ffc0000 [ 456.576018][ T7859] loop2: detected capacity change from 0 to 64 [ 458.861523][ T7874] loop0: detected capacity change from 0 to 1024 [ 458.932938][ T7874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 459.754065][ T52] block nbd2: Attempted send on invalid socket [ 459.760458][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 459.770139][ T7884] efs: cannot read volume header [ 460.518929][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 460.599606][ T7892] loop4: detected capacity change from 0 to 16 [ 460.613545][ T7892] erofs: (device loop4): mounted with root inode @ nid 36. [ 460.889848][ T7894] loop0: detected capacity change from 0 to 512 [ 461.094891][ T7894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 461.203298][ T7894] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.335822][ T4257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.346877][ T4257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.355744][ T4257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.369381][ T4257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.383677][ T4257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 461.391051][ T4257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.425394][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.433414][ T4266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.440895][ T4266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.450499][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.459898][ T4266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 461.467468][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.674409][ T7903] lo speed is unknown, defaulting to 1000 [ 463.685326][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 464.933402][ T7903] chnl_net:caif_netlink_parms(): no params data found [ 465.331110][ T4989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.588837][ T4989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.615784][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 465.752800][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 466.125684][ T4989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.073043][ T7950] loop0: detected capacity change from 0 to 16 [ 467.094492][ T7950] erofs: (device loop0): mounted with root inode @ nid 36. [ 467.191704][ T4989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.831468][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 467.862200][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 467.862217][ T27] audit: type=1326 audit(1750333671.193:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3442f8e929 code=0x0 [ 468.900748][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.917011][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.942706][ T7903] device bridge_slave_0 entered promiscuous mode [ 469.135495][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.157776][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.177602][ T7903] device bridge_slave_1 entered promiscuous mode [ 469.893494][ T4257] Bluetooth: hci5: command 0x0419 tx timeout [ 469.992774][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.064027][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.427671][ T7903] team0: Port device team_slave_0 added [ 470.461352][ T7903] team0: Port device team_slave_1 added [ 470.624972][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.631991][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.721133][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.811162][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.821549][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.898070][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.994417][ T7973] loop0: detected capacity change from 0 to 32768 [ 471.043509][ T7973] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.988 (7973) [ 471.138551][ T7973] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 471.180825][ T7973] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 471.207409][ T7903] device hsr_slave_0 entered promiscuous mode [ 471.234976][ T7973] BTRFS info (device loop0): force zlib compression, level 3 [ 471.263121][ T7973] BTRFS info (device loop0): force clearing of disk cache [ 471.270503][ T7973] BTRFS info (device loop0): setting nodatasum [ 471.277678][ T7903] device hsr_slave_1 entered promiscuous mode [ 471.277973][ T7975] loop2: detected capacity change from 0 to 32768 [ 471.310522][ T7903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.319001][ T7973] BTRFS info (device loop0): enabling disk space caching [ 471.326478][ T7903] Cannot create hsr debugfs directory [ 471.343925][ T7975] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.987 (7975) [ 471.364473][ T7973] BTRFS info (device loop0): disk space caching is enabled [ 471.423644][ T7975] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.465204][ T7975] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 471.512533][ T7975] BTRFS info (device loop2): setting nodatacow, compression disabled [ 471.559408][ T7975] BTRFS info (device loop2): max_inline at 0 [ 471.598710][ T7975] BTRFS info (device loop2): enabling disk space caching [ 471.670369][ T7975] BTRFS info (device loop2): turning off barriers [ 471.716033][ T7975] BTRFS info (device loop2): turning on flush-on-commit [ 471.730082][ T7975] BTRFS info (device loop2): doing ref verification [ 471.745423][ T7975] BTRFS info (device loop2): force clearing of disk cache [ 471.803100][ T7975] BTRFS info (device loop2): enabling ssd optimizations [ 471.805204][ T7973] BTRFS info (device loop0): enabling ssd optimizations [ 471.823144][ T7975] BTRFS info (device loop2): max_inline at 4096 [ 471.829668][ T7975] BTRFS info (device loop2): disk space caching is enabled [ 471.912618][ T7973] BTRFS info (device loop0): rebuilding free space tree [ 472.123594][ T7975] BTRFS info (device loop2): rebuilding free space tree [ 472.144479][ T7973] BTRFS info (device loop0): disabling free space tree [ 472.151626][ T7973] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 472.203140][ T7973] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 472.226666][ T7975] BTRFS info (device loop2): disabling free space tree [ 472.249993][ T7975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 472.310111][ T7975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 472.439176][ T4252] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 472.693722][ T4323] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop0 scanned by udevd (4323) [ 473.691158][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 473.705680][ T8041] loop4: detected capacity change from 0 to 64 [ 474.424369][ T7903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.474072][ T7903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.577701][ T7903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.694994][ T7903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.654638][ T8060] loop2: detected capacity change from 0 to 256 [ 475.771992][ T8060] FAT-fs (loop2): Directory bread(block 64) failed [ 475.809562][ T4989] device hsr_slave_0 left promiscuous mode [ 475.823646][ T4989] device hsr_slave_1 left promiscuous mode [ 475.823659][ T8060] FAT-fs (loop2): Directory bread(block 65) failed [ 475.864570][ T8060] FAT-fs (loop2): Directory bread(block 66) failed [ 475.883650][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.891339][ T4989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.891672][ T8060] FAT-fs (loop2): Directory bread(block 67) failed [ 475.975585][ T8060] FAT-fs (loop2): Directory bread(block 68) failed [ 475.983224][ T8060] FAT-fs (loop2): Directory bread(block 69) failed [ 476.002737][ T8060] FAT-fs (loop2): Directory bread(block 70) failed [ 476.022934][ T8060] FAT-fs (loop2): Directory bread(block 71) failed [ 476.029978][ T8060] FAT-fs (loop2): Directory bread(block 72) failed [ 476.047048][ T8060] FAT-fs (loop2): Directory bread(block 73) failed [ 476.068844][ T4989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.104497][ T4989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.013101][ T52] block nbd4: Attempted send on invalid socket [ 477.019338][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 477.028964][ T8067] efs: cannot read volume header [ 477.042124][ T4989] device bridge_slave_1 left promiscuous mode [ 477.052290][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.182150][ T4989] device bridge_slave_0 left promiscuous mode [ 477.193389][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.258556][ T8076] loop4: detected capacity change from 0 to 16 [ 477.281272][ T8076] erofs: (device loop4): mounted with root inode @ nid 36. [ 477.899447][ T4989] device veth1_macvtap left promiscuous mode [ 477.943864][ T4989] device veth0_macvtap left promiscuous mode [ 477.993123][ T4989] device veth1_vlan left promiscuous mode [ 478.031432][ T4989] device veth0_vlan left promiscuous mode [ 478.054125][ T8081] loop4: detected capacity change from 0 to 64 [ 479.352089][ T8094] loop4: detected capacity change from 0 to 128 [ 480.397304][ T8099] syz.0.1005 (8099): drop_caches: 2 [ 480.578934][ T8101] loop4: detected capacity change from 0 to 64 [ 480.608216][ T8103] loop0: detected capacity change from 0 to 16 [ 480.659331][ T8103] erofs: (device loop0): mounted with root inode @ nid 36. [ 481.035143][ T8105] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 481.044620][ T8105] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 481.053890][ T8105] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 481.063550][ T8105] syz.0.1007: attempt to access beyond end of device [ 481.063550][ T8105] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 481.077925][ T8105] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 481.100049][ T27] audit: type=1800 audit(1750333684.433:44): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1007" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 481.787638][ T4989] team0 (unregistering): Port device team_slave_1 removed [ 481.840145][ T4989] team0 (unregistering): Port device team_slave_0 removed [ 481.888361][ T4989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.952421][ T4989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.411787][ T8109] loop4: detected capacity change from 0 to 40427 [ 482.431095][ T8109] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 482.438949][ T8109] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 482.450468][ T8109] F2FS-fs (loop4): invalid crc value [ 482.502207][ T8109] F2FS-fs (loop4): Found nat_bits in checkpoint [ 482.598739][ T8109] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 482.605986][ T8109] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 484.020114][ T8118] loop0: detected capacity change from 0 to 2048 [ 484.412799][ T8118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.114951][ T4989] bond0 (unregistering): Released all slaves [ 485.267242][ T8071] device vlan2 entered promiscuous mode [ 485.282195][ T8071] device dummy0 entered promiscuous mode [ 485.557183][ T8125] loop4: detected capacity change from 0 to 16 [ 485.602962][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.641201][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.671309][ T8125] erofs: (device loop4): mounted with root inode @ nid 36. [ 485.727402][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.679271][ T8130] loop2: detected capacity change from 0 to 4096 [ 486.716828][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.735052][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 486.804252][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.868286][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.875600][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.940123][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.991527][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.009858][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.084979][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.092151][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.122071][ T27] audit: type=1800 audit(1750333690.453:45): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1013" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 487.163608][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.188709][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.454811][ T8148] loop4: detected capacity change from 0 to 8 [ 487.502239][ T8148] SQUASHFS error: zstd decompression failed, data probably corrupt [ 487.510405][ T8148] SQUASHFS error: Failed to read block 0x4ec: -5 [ 487.516873][ T8148] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 487.524211][ T8148] SQUASHFS error: Unable to read inode 0x2011f [ 488.068881][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.164691][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.186970][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.235648][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.287758][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.348781][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.379798][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.454484][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.544086][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.578914][ T8155] loop0: detected capacity change from 0 to 40427 [ 488.587526][ T8155] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 488.595496][ T8155] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 488.607051][ T8155] F2FS-fs (loop0): invalid crc value [ 488.622539][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.680317][ T8164] device vlan2 entered promiscuous mode [ 488.689163][ T8155] F2FS-fs (loop0): Found nat_bits in checkpoint [ 488.725130][ T8164] device dummy0 entered promiscuous mode [ 488.758378][ T8155] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 488.765557][ T8155] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 489.012390][ T8170] loop4: detected capacity change from 0 to 1024 [ 490.218309][ T4454] hfsplus: b-tree write err: -5, ino 4 [ 492.132545][ T8198] loop2: detected capacity change from 0 to 256 [ 492.308199][ T8198] FAT-fs (loop2): Directory bread(block 64) failed [ 492.350392][ T8198] FAT-fs (loop2): Directory bread(block 65) failed [ 492.357827][ T8198] FAT-fs (loop2): Directory bread(block 66) failed [ 492.364673][ T8198] FAT-fs (loop2): Directory bread(block 67) failed [ 492.371430][ T8198] FAT-fs (loop2): Directory bread(block 68) failed [ 492.415098][ T8198] FAT-fs (loop2): Directory bread(block 69) failed [ 492.424696][ T8198] FAT-fs (loop2): Directory bread(block 70) failed [ 492.432490][ T8198] FAT-fs (loop2): Directory bread(block 71) failed [ 492.472714][ T1043] block nbd3: Attempted send on invalid socket [ 492.479056][ T1043] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 492.488986][ T8205] efs: cannot read volume header [ 492.512219][ T8204] loop4: detected capacity change from 0 to 128 [ 492.597011][ T8198] FAT-fs (loop2): Directory bread(block 72) failed [ 492.845812][ T8198] FAT-fs (loop2): Directory bread(block 73) failed [ 493.446486][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.658319][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.744249][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.216114][ T8217] 9pnet: Unknown protocol version 9p200 [ 496.502086][ T8251] loop4: detected capacity change from 0 to 1024 [ 496.932304][ T8256] loop2: detected capacity change from 0 to 40427 [ 497.043590][ T8256] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 497.051437][ T8256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 497.463726][ T8256] F2FS-fs (loop2): invalid crc value [ 497.503360][ T8251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 497.516691][ T8256] F2FS-fs (loop2): Found nat_bits in checkpoint [ 497.621083][ T8256] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 497.628320][ T8256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 500.195622][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 501.029870][ T8282] loop4: detected capacity change from 0 to 47 [ 501.151817][ T27] audit: type=1804 audit(1750333704.483:46): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1044" name="/newroot/217/file1/file1" dev="loop4" ino=8 res=1 errno=0 [ 501.303479][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.309863][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.412556][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.442857][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.567353][ T8289] loop0: detected capacity change from 0 to 16 [ 501.579751][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.594095][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.051470][ T8289] erofs: (device loop0): mounted with root inode @ nid 36. [ 502.106302][ T7903] device veth0_vlan entered promiscuous mode [ 502.189027][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.349693][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.520410][ T7903] device veth1_vlan entered promiscuous mode [ 502.549824][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.694121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.714409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.727784][ T7903] device veth0_macvtap entered promiscuous mode [ 502.752721][ T7903] device veth1_macvtap entered promiscuous mode [ 502.831411][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.909674][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.960652][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.001470][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.045622][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.056461][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.066773][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.078779][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.096947][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.106853][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.183704][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.364307][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.575840][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.773965][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.863227][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.950092][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.978525][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.019252][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.053328][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.065475][ T8310] loop4: detected capacity change from 0 to 2048 [ 504.083063][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.088911][ T8310] EXT4-fs: Ignoring removed bh option [ 504.113013][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.156434][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.186134][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.224335][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.241201][ T7903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.251535][ T8310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 504.336881][ T7903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.347468][ T7903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.356450][ T7903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.713476][ T8310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 504.764752][ T8310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 504.793424][ T8331] loop2: detected capacity change from 0 to 2048 [ 505.579216][ T8310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 505.579216][ T8310] [ 505.591691][ T8310] EXT4-fs (loop4): Total free blocks count 0 [ 505.635455][ T8310] EXT4-fs (loop4): Free/Dirty block details [ 505.648001][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.653221][ T8331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 505.667283][ T8310] EXT4-fs (loop4): free_blocks=2415919104 [ 505.673738][ T8331] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.685711][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.698074][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.709925][ T8310] EXT4-fs (loop4): dirty_blocks=48 [ 505.744848][ T8310] EXT4-fs (loop4): Block reservation details [ 505.893339][ T8310] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 505.926997][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.993872][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.072409][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.694062][ T4565] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 506.910156][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 507.026256][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 507.085731][ T8346] loop4: detected capacity change from 0 to 16 [ 507.103244][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 507.144839][ T8349] loop2: detected capacity change from 0 to 16 [ 507.164070][ T8346] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 80, please upgrade kernel version [ 507.226048][ T8349] erofs: (device loop2): mounted with root inode @ nid 36. [ 510.181018][ T8371] loop4: detected capacity change from 0 to 8 [ 510.191428][ T8371] SQUASHFS error: zstd decompression failed, data probably corrupt [ 510.199514][ T8371] SQUASHFS error: Failed to read block 0x4ec: -5 [ 510.205974][ T8371] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 510.213333][ T8371] SQUASHFS error: Unable to read inode 0x2011f [ 512.373287][ T8393] loop0: detected capacity change from 0 to 16 [ 512.435230][ T8396] loop3: detected capacity change from 0 to 16 [ 512.482680][ T8393] erofs: (device loop0): mounted with root inode @ nid 36. [ 512.495139][ T8396] erofs: (device loop3): mounted with root inode @ nid 36. [ 514.099868][ T8386] loop4: detected capacity change from 0 to 32768 [ 514.868992][ T8386] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 515.589069][ T8424] loop3: detected capacity change from 0 to 8 [ 515.600285][ T8424] SQUASHFS error: zstd decompression failed, data probably corrupt [ 515.608945][ T8424] SQUASHFS error: Failed to read block 0x4ec: -5 [ 515.615468][ T8424] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 515.622853][ T8424] SQUASHFS error: Unable to read inode 0x2011f [ 517.516160][ T8443] loop5: detected capacity change from 0 to 64 [ 517.901565][ T4354] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 521.141783][ T8476] loop2: detected capacity change from 0 to 32768 [ 521.157483][ T8476] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 521.233105][ T4354] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 523.602003][ T8496] loop0: detected capacity change from 0 to 64 [ 524.753947][ T8509] loop3: detected capacity change from 0 to 128 [ 525.217167][ T8515] syz.3.1105: attempt to access beyond end of device [ 525.217167][ T8515] loop3: rw=3, sector=145, nr_sectors = 7 limit=128 [ 525.273198][ T8515] syz.3.1105: attempt to access beyond end of device [ 525.273198][ T8515] loop3: rw=2051, sector=152, nr_sectors = 889 limit=128 [ 526.219732][ T8528] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 526.219810][ T8528] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 526.431824][ T8530] loop5: detected capacity change from 0 to 16 [ 526.456300][ T8530] erofs: (device loop5): mounted with root inode @ nid 36. [ 527.093555][ T8536] loop0: detected capacity change from 0 to 2048 [ 527.200655][ T8536] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 527.319476][ T4354] udevd[4354]: incorrect nilfs2 checksum on /dev/loop0 [ 527.380148][ T8544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.681870][ T8564] loop3: detected capacity change from 0 to 2048 [ 529.883525][ T8564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.925741][ T8568] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 530.274991][ T8568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.714304][ T8574] netlink: 'syz.5.1121': attribute type 10 has an invalid length. [ 530.879744][ T8564] Process accounting resumed [ 532.393812][ T8574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 532.538408][ T8592] loop2: detected capacity change from 0 to 256 [ 532.696251][ T8592] FAT-fs (loop2): Directory bread(block 64) failed [ 532.696295][ T8592] FAT-fs (loop2): Directory bread(block 65) failed [ 532.696373][ T8592] FAT-fs (loop2): Directory bread(block 66) failed [ 532.696495][ T8592] FAT-fs (loop2): Directory bread(block 67) failed [ 532.696566][ T8592] FAT-fs (loop2): Directory bread(block 68) failed [ 532.696625][ T8592] FAT-fs (loop2): Directory bread(block 69) failed [ 532.696693][ T8592] FAT-fs (loop2): Directory bread(block 70) failed [ 532.696720][ T8592] FAT-fs (loop2): Directory bread(block 71) failed [ 532.696788][ T8592] FAT-fs (loop2): Directory bread(block 72) failed [ 532.696822][ T8592] FAT-fs (loop2): Directory bread(block 73) failed [ 534.114213][ T8612] loop3: detected capacity change from 0 to 16 [ 534.239816][ T8612] erofs: (device loop3): mounted with root inode @ nid 36. [ 535.350690][ T8611] loop5: detected capacity change from 0 to 16384 [ 536.553223][ T8630] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.887824][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'. [ 538.229224][ T8650] 9pnet_fd: Insufficient options for proto=fd [ 540.345033][ T8659] loop4: detected capacity change from 0 to 256 [ 540.510086][ T8659] FAT-fs (loop4): Directory bread(block 64) failed [ 540.529373][ T8659] FAT-fs (loop4): Directory bread(block 65) failed [ 540.559944][ T8659] FAT-fs (loop4): Directory bread(block 66) failed [ 540.587528][ T8659] FAT-fs (loop4): Directory bread(block 67) failed [ 540.620749][ T8659] FAT-fs (loop4): Directory bread(block 68) failed [ 540.653116][ T8659] FAT-fs (loop4): Directory bread(block 69) failed [ 540.653121][ T8664] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 540.666694][ T8664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.670107][ T8659] FAT-fs (loop4): Directory bread(block 70) failed [ 540.701767][ T8659] FAT-fs (loop4): Directory bread(block 71) failed [ 540.737937][ T8659] FAT-fs (loop4): Directory bread(block 72) failed [ 540.760610][ T8664] vhci_hcd vhci_hcd.0: Device attached [ 540.772471][ T8659] FAT-fs (loop4): Directory bread(block 73) failed [ 540.913141][ T6255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 542.446648][ T8677] loop2: detected capacity change from 0 to 8 [ 542.456585][ T8677] SQUASHFS error: zstd decompression failed, data probably corrupt [ 542.466707][ T8677] SQUASHFS error: Failed to read block 0x4ec: -5 [ 542.473148][ T8677] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 542.480471][ T8677] SQUASHFS error: Unable to read inode 0x2011f [ 542.503087][ T5343] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 542.515049][ T4323] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 542.593090][ T6255] usb 6-1: Using ep0 maxpacket: 16 [ 542.734215][ T6255] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 542.753955][ T6255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.762027][ T6255] usb 6-1: Product: syz [ 542.827186][ T6255] usb 6-1: Manufacturer: syz [ 542.850051][ T6255] usb 6-1: SerialNumber: syz [ 542.869249][ T6255] usb 6-1: config 0 descriptor?? [ 542.940137][ T6255] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 542.984656][ T6255] usb 6-1: Detected FT232H [ 543.364801][ T6255] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 543.394988][ T8665] vhci_hcd: connection closed [ 543.401140][ T4381] vhci_hcd: stop threads [ 543.451087][ T6255] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 543.475849][ T4381] vhci_hcd: release socket [ 543.701539][ T6255] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 543.811040][ T4381] vhci_hcd: disconnect device [ 544.195874][ T6255] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 544.266368][ T8698] loop4: detected capacity change from 0 to 128 [ 544.277233][ T8698] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 544.303440][ T8698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.323091][ T5343] vhci_hcd: vhci_device speed not set [ 544.323214][ T6255] usb 6-1: USB disconnect, device number 2 [ 544.495895][ T6255] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 544.531549][ T8700] loop0: detected capacity change from 0 to 512 [ 544.538756][ T8700] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.545386][ T8700] EXT4-fs: Ignoring removed bh option [ 544.575683][ T8700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 544.587614][ T8700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 544.620707][ T6255] ftdi_sio 6-1:0.0: device disconnected [ 544.661800][ T8700] EXT4-fs (loop0): 1 truncate cleaned up [ 544.667927][ T8700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 545.647871][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 545.757290][ T8720] loop3: detected capacity change from 0 to 16 [ 545.863668][ T8720] erofs: (device loop3): mounted with root inode @ nid 36. [ 545.961843][ T8728] loop4: detected capacity change from 0 to 256 [ 546.021987][ T8728] FAT-fs (loop4): Directory bread(block 64) failed [ 546.090645][ T8728] FAT-fs (loop4): Directory bread(block 65) failed [ 546.189318][ T8732] loop2: detected capacity change from 0 to 2048 [ 546.215358][ T8732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.229811][ T8728] FAT-fs (loop4): Directory bread(block 66) failed [ 546.353939][ T8728] FAT-fs (loop4): Directory bread(block 67) failed [ 546.455715][ T8728] FAT-fs (loop4): Directory bread(block 68) failed [ 546.577474][ T8728] FAT-fs (loop4): Directory bread(block 69) failed [ 546.698661][ T8728] FAT-fs (loop4): Directory bread(block 70) failed [ 546.822783][ T8728] FAT-fs (loop4): Directory bread(block 71) failed [ 546.949002][ T8728] FAT-fs (loop4): Directory bread(block 72) failed [ 547.014359][ T8728] FAT-fs (loop4): Directory bread(block 73) failed [ 547.267002][ T8737] loop0: detected capacity change from 0 to 8 [ 547.292889][ T8737] SQUASHFS error: zstd decompression failed, data probably corrupt [ 547.301004][ T8737] SQUASHFS error: Failed to read block 0x4ec: -5 [ 547.307643][ T8737] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 547.315093][ T8737] SQUASHFS error: Unable to read inode 0x2011f [ 547.386645][ T4323] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 548.365346][ T8754] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 548.380025][ T8754] ubi31: attaching mtd0 [ 548.399687][ T8754] ubi31: scanning is finished [ 548.404516][ T8754] ubi31: empty MTD device detected [ 549.101177][ T8754] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 549.466366][ T8762] loop2: detected capacity change from 0 to 512 [ 549.882055][ T8766] loop4: detected capacity change from 0 to 512 [ 549.883836][ T8766] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.883881][ T8766] EXT4-fs: Ignoring removed bh option [ 550.231582][ T8766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 550.231613][ T8766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 550.389931][ T8762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 550.390049][ T8762] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.427247][ T8766] EXT4-fs (loop4): 1 truncate cleaned up [ 550.461409][ T8766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 551.367093][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 551.434743][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 552.506158][ T8793] loop5: detected capacity change from 0 to 2048 [ 552.533553][ T8793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.635464][ T8799] loop4: detected capacity change from 0 to 8 [ 553.899759][ T8799] SQUASHFS error: zstd decompression failed, data probably corrupt [ 553.908312][ T8799] SQUASHFS error: Failed to read block 0x4ec: -5 [ 553.914865][ T8799] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 553.922243][ T8799] SQUASHFS error: Unable to read inode 0x2011f [ 554.224194][ T8804] loop3: detected capacity change from 0 to 128 [ 554.254982][ T8804] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 554.354050][ T8812] loop5: detected capacity change from 0 to 64 [ 554.667318][ T8816] loop4: detected capacity change from 0 to 256 [ 554.706550][ T4255] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 554.742782][ T4255] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 555.549799][ T8830] loop4: detected capacity change from 0 to 8 [ 555.560434][ T8830] SQUASHFS error: zstd decompression failed, data probably corrupt [ 555.560478][ T8830] SQUASHFS error: Failed to read block 0x4ec: -5 [ 555.577338][ T8830] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 555.577360][ T8830] SQUASHFS error: Unable to read inode 0x2011f [ 555.602097][ T8831] loop2: detected capacity change from 0 to 64 [ 557.239950][ T4354] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 559.001611][ T4565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.335478][ T4565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.578130][ T8853] loop2: detected capacity change from 0 to 2048 [ 559.590564][ T8853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.819079][ T8860] loop0: detected capacity change from 0 to 16 [ 559.948147][ T8860] erofs: (device loop0): mounted with root inode @ nid 36. [ 559.965910][ T4257] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 559.989790][ T8858] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 560.093277][ T27] audit: type=1800 audit(1750333763.343:47): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1193" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 560.238681][ T4565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.480666][ T4565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.502550][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.513990][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.522904][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.534544][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.542180][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.549930][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.752057][ T8873] lo speed is unknown, defaulting to 1000 [ 561.750887][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 562.787094][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.787179][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.414888][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.422069][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.521184][ T8873] device bridge_slave_0 entered promiscuous mode [ 563.605539][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.627008][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.681339][ T8873] device bridge_slave_1 entered promiscuous mode [ 563.778976][ T8929] loop5: detected capacity change from 0 to 16 [ 563.797511][ T8929] erofs: (device loop5): mounted with root inode @ nid 36. [ 563.807909][ T4257] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 563.819387][ T8929] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 563.923524][ T27] audit: type=1800 audit(1750333767.163:48): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1204" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 564.165715][ T8932] loop2: detected capacity change from 0 to 2048 [ 564.208442][ T8932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.273489][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.679211][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.028478][ T8944] loop5: detected capacity change from 0 to 8 [ 565.064541][ T8944] SQUASHFS error: zstd decompression failed, data probably corrupt [ 565.072900][ T8944] SQUASHFS error: Failed to read block 0x4ec: -5 [ 565.079393][ T8944] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 565.086795][ T8944] SQUASHFS error: Unable to read inode 0x2011f [ 565.753229][ T4323] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.806266][ T8873] team0: Port device team_slave_0 added [ 566.015106][ T8873] team0: Port device team_slave_1 added [ 566.039200][ T8949] loop4: detected capacity change from 0 to 512 [ 566.087625][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.103782][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.169611][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.170839][ T8949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 566.239787][ T8949] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.298985][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.316139][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.451675][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.380359][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 568.161016][ T8873] device hsr_slave_0 entered promiscuous mode [ 568.345267][ T8873] device hsr_slave_1 entered promiscuous mode [ 568.437713][ T8873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.437831][ T8873] Cannot create hsr debugfs directory [ 569.166994][ T8986] loop2: detected capacity change from 0 to 16 [ 569.183450][ T8986] erofs: (device loop2): mounted with root inode @ nid 36. [ 569.199579][ T4257] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 569.211162][ T8986] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 569.313044][ T27] audit: type=1800 audit(1750333772.553:49): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1218" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 570.021821][ T4565] device hsr_slave_0 left promiscuous mode [ 570.138928][ T4565] device hsr_slave_1 left promiscuous mode [ 570.321543][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.459397][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.692120][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.741756][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.801519][ T4565] device bridge_slave_1 left promiscuous mode [ 570.817527][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.132016][ T4565] device veth1_macvtap left promiscuous mode [ 571.142151][ T4565] device veth0_macvtap left promiscuous mode [ 571.199848][ T4565] device veth1_vlan left promiscuous mode [ 571.209125][ T4565] device veth0_vlan left promiscuous mode [ 574.025032][ T4565] team0 (unregistering): Port device team_slave_1 removed [ 574.479517][ T9030] loop4: detected capacity change from 0 to 16 [ 574.505123][ T9030] erofs: (device loop4): mounted with root inode @ nid 36. [ 574.535542][ T4257] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 574.548660][ T9030] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 574.578784][ T27] audit: type=1800 audit(1750333777.893:50): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1232" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 574.850455][ T4565] team0 (unregistering): Port device team_slave_0 removed [ 575.082711][ T4565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.192503][ T4565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.132848][ T9041] loop4: detected capacity change from 0 to 128 [ 576.786177][ T4565] bond0 (unregistering): Released all slaves [ 579.201421][ T9070] 9pnet_fd: Insufficient options for proto=fd [ 579.674032][ T52] block nbd0: Attempted send on invalid socket [ 579.680295][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 579.693105][ T9069] efs: cannot read volume header [ 580.016258][ T8873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 580.102003][ T8873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 580.256519][ T8873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 580.298259][ T8873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 580.649965][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.724473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.741234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.774133][ T9091] loop2: detected capacity change from 0 to 16 [ 580.815985][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.852319][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.868741][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.878770][ T9091] erofs: (device loop2): mounted with root inode @ nid 36. [ 580.897793][ T4565] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.905103][ T4565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.958731][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 581.096158][ T9095] loop4: detected capacity change from 0 to 128 [ 581.119317][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 581.191835][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.217085][ T4565] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.224381][ T4565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.672073][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 581.882977][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.233767][ T8873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.296295][ T8873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.308609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.398823][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.419617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.444496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.463857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 582.484329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.503702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 582.520245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.554050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.581717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.017264][ T9116] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 584.445413][ T1043] block nbd4: Attempted send on invalid socket [ 584.451775][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 584.462135][ T9133] efs: cannot read volume header [ 584.533727][ T9134] 9pnet_fd: Insufficient options for proto=fd [ 584.719502][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.130706][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.157019][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.367161][ T9141] loop0: detected capacity change from 0 to 128 [ 586.928964][ T9162] loop2: detected capacity change from 0 to 40427 [ 586.973238][ T9162] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 586.981076][ T9162] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 587.837921][ T9162] F2FS-fs (loop2): invalid crc value [ 587.914741][ T9162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 587.973482][ T9162] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 587.980647][ T9162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 589.412357][ T9178] loop4: detected capacity change from 0 to 2048 [ 589.428907][ T9178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.761253][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.798458][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.916239][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.951485][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.090363][ T8873] device veth0_vlan entered promiscuous mode [ 590.132561][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.159665][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.284484][ T8873] device veth1_vlan entered promiscuous mode [ 590.502718][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 590.534449][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 590.601960][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.679817][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.760698][ T8873] device veth0_macvtap entered promiscuous mode [ 590.792437][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 590.904079][ T8873] device veth1_macvtap entered promiscuous mode [ 591.079332][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.143175][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.178873][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.231619][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.257342][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.302995][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.353974][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.404782][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.456829][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.499225][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.540446][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.577029][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.616410][ T9204] loop0: detected capacity change from 0 to 16 [ 591.638760][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.650790][ T9204] erofs: (device loop0): mounted with root inode @ nid 36. [ 591.690748][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.732883][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.777677][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.802049][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.828117][ T8873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.000438][ T8873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.022295][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.045828][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 592.075169][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 592.134558][ T1043] block nbd5: Attempted send on invalid socket [ 592.140879][ T1043] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 592.151579][ T9212] efs: cannot read volume header [ 592.220194][ T9213] 9pnet_fd: Insufficient options for proto=fd [ 592.877043][ T8873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.027441][ T8873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.073048][ T8873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.073328][ T9219] loop5: detected capacity change from 0 to 128 [ 593.098930][ T8873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.419117][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.448557][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.506417][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 593.537281][ T4989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.561662][ T4989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.610271][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.132517][ T9233] netlink: 'syz.6.1190': attribute type 4 has an invalid length. [ 594.147479][ T9234] loop4: detected capacity change from 0 to 512 [ 594.159334][ T9235] loop5: detected capacity change from 0 to 512 [ 594.261504][ T9235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 594.275671][ T9235] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.304420][ T9234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 594.343278][ T9234] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.888856][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 599.088343][ T7903] EXT4-fs (loop5): unmounting filesystem. [ 599.131996][ T9270] loop0: detected capacity change from 0 to 16 [ 599.139537][ T9270] erofs: (device loop0): mounted with root inode @ nid 36. [ 599.149297][ T4257] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 599.160550][ T9270] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 599.172073][ T27] audit: type=1800 audit(1750333802.513:51): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1280" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 599.331160][ T9276] loop2: detected capacity change from 0 to 256 [ 600.156342][ T9276] FAT-fs (loop2): Directory bread(block 64) failed [ 600.315833][ T9276] FAT-fs (loop2): Directory bread(block 65) failed [ 600.326686][ T9276] FAT-fs (loop2): Directory bread(block 66) failed [ 600.357058][ T9276] FAT-fs (loop2): Directory bread(block 67) failed [ 600.377539][ T9276] FAT-fs (loop2): Directory bread(block 68) failed [ 600.408016][ T9276] FAT-fs (loop2): Directory bread(block 69) failed [ 600.426259][ T9279] loop5: detected capacity change from 0 to 2048 [ 600.456726][ T9276] FAT-fs (loop2): Directory bread(block 70) failed [ 600.593235][ T9287] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.463375][ T9276] FAT-fs (loop2): Directory bread(block 71) failed [ 601.963810][ T9276] FAT-fs (loop2): Directory bread(block 72) failed [ 601.970355][ T9276] FAT-fs (loop2): Directory bread(block 73) failed [ 602.013457][ T9292] device dummy0 entered promiscuous mode [ 602.130217][ T9279] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 602.785651][ T9279] Remounting filesystem read-only [ 602.797894][ T9279] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 602.940694][ T7903] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 603.161779][ T9314] loop2: detected capacity change from 0 to 64 [ 605.053170][ T9337] loop5: detected capacity change from 0 to 16 [ 605.088637][ T9337] erofs: (device loop5): mounted with root inode @ nid 36. [ 605.133181][ T4257] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 605.145514][ T9337] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 605.172518][ T27] audit: type=1800 audit(1750333808.493:52): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1294" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 608.076288][ T9367] loop6: detected capacity change from 0 to 64 [ 614.002824][ T9402] loop6: detected capacity change from 0 to 256 [ 614.131518][ T9402] FAT-fs (loop6): Directory bread(block 64) failed [ 614.270745][ T9402] FAT-fs (loop6): Directory bread(block 65) failed [ 614.277922][ T9402] FAT-fs (loop6): Directory bread(block 66) failed [ 614.284833][ T9402] FAT-fs (loop6): Directory bread(block 67) failed [ 614.291811][ T9402] FAT-fs (loop6): Directory bread(block 68) failed [ 614.303034][ T9402] FAT-fs (loop6): Directory bread(block 69) failed [ 614.310195][ T9402] FAT-fs (loop6): Directory bread(block 70) failed [ 614.373306][ T9402] FAT-fs (loop6): Directory bread(block 71) failed [ 614.383344][ T9402] FAT-fs (loop6): Directory bread(block 72) failed [ 614.390038][ T9402] FAT-fs (loop6): Directory bread(block 73) failed [ 614.435909][ T9412] loop2: detected capacity change from 0 to 64 [ 615.115392][ T9418] loop4: detected capacity change from 0 to 512 [ 615.869658][ T9418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 615.903145][ T9418] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.744865][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 621.022199][ T9470] loop4: detected capacity change from 0 to 64 [ 621.324459][ T9477] fuse: Unknown parameter 'use00000000000000000000' [ 622.819408][ T9493] loop4: detected capacity change from 0 to 512 [ 624.311002][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317461][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.338425][ T9493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 624.347596][ T9493] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.447552][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 626.765015][ T9532] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 627.416368][ T9540] loop2: detected capacity change from 0 to 2048 [ 627.451133][ T9540] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 627.482217][ T9540] NILFS (loop2): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 627.492759][ T9540] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2) [ 627.671026][ T27] audit: type=1326 audit(1750333831.003:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.2.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x0 [ 630.180838][ T9555] loop4: detected capacity change from 0 to 2048 [ 630.192846][ T9555] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 630.229005][ T9555] NILFS (loop4): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 630.320167][ T9555] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 630.377532][ T27] audit: type=1326 audit(1750333833.713:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.4.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f902ab8e929 code=0x0 [ 631.647115][ T9565] loop5: detected capacity change from 0 to 2048 [ 631.983165][ T9565] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 632.000051][ T9565] NILFS (loop5): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 632.009149][ T9565] NILFS (loop5): error -5 while loading last checkpoint (checkpoint number=2) [ 632.037785][ T27] audit: type=1326 audit(1750333835.373:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4d9d8e929 code=0x0 [ 632.092110][ T9562] loop6: detected capacity change from 0 to 2048 [ 632.196317][ T9574] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 633.077664][ T9562] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 633.212831][ T9562] NILFS (loop6): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 633.283388][ T9562] NILFS (loop6): error -5 while loading last checkpoint (checkpoint number=2) [ 633.473994][ T9579] loop4: detected capacity change from 0 to 2048 [ 635.961232][ T9579] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 635.997330][ T9579] NILFS (loop4): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 636.008434][ T9579] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 636.075163][ T27] audit: type=1326 audit(1750333839.413:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.4.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f902ab8e929 code=0x0 [ 636.257715][ T4354] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 637.664238][ T9591] loop2: detected capacity change from 0 to 128 [ 638.728807][ T9608] loop2: detected capacity change from 0 to 2048 [ 638.747135][ T9608] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 638.785160][ T9608] NILFS (loop2): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 638.798529][ T9608] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2) [ 638.918870][ T27] audit: type=1326 audit(1750333842.253:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7c7d8e929 code=0x0 [ 640.835244][ T9621] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 643.617712][ T9643] loop6: detected capacity change from 0 to 2048 [ 643.631084][ T9643] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 643.663217][ T9643] NILFS (loop6): bad btree root (ino=6): level = 0, flags = 0x7, nchildren = 0 [ 643.673461][ T9643] NILFS (loop6): error -5 while loading last checkpoint (checkpoint number=2) [ 643.914361][ T27] audit: type=1326 audit(1750333847.253:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9638 comm="syz.6.1363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3bf8e929 code=0x0 [ 644.372184][ T9651] loop6: detected capacity change from 0 to 128 [ 644.613303][ C1] ================================================================== [ 644.621448][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 644.629042][ C1] Read of size 2 at addr ffff88803004302a by task swapper/1/0 [ 644.636545][ C1] [ 644.638906][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0 [ 644.646922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.657407][ C1] Call Trace: [ 644.660982][ C1] [ 644.663862][ C1] dump_stack_lvl+0x168/0x22e [ 644.668699][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 644.673848][ C1] ? show_regs_print_info+0x12/0x12 [ 644.679174][ C1] ? load_image+0x3b0/0x3b0 [ 644.683974][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 644.689487][ C1] ? __virt_addr_valid+0x188/0x540 [ 644.694683][ C1] ? __virt_addr_valid+0x465/0x540 [ 644.699823][ C1] ? rose_timer_expiry+0x470/0x490 [ 644.705044][ C1] print_report+0xa8/0x220 [ 644.709759][ C1] kasan_report+0x10b/0x140 [ 644.714415][ C1] ? rose_timer_expiry+0x470/0x490 [ 644.719568][ C1] rose_timer_expiry+0x470/0x490 [ 644.725510][ C1] call_timer_fn+0x1a0/0x670 [ 644.730145][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 644.735210][ C1] ? call_timer_fn+0xc1/0x670 [ 644.740089][ C1] ? __run_timers+0x7c0/0x7c0 [ 644.744923][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 644.751373][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 644.757102][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 644.762368][ C1] __run_timers+0x525/0x7c0 [ 644.766915][ C1] ? detach_timer+0x350/0x350 [ 644.771637][ C1] ? lock_chain_count+0x20/0x20 [ 644.776533][ C1] run_timer_softirq+0x63/0xf0 [ 644.781361][ C1] handle_softirqs+0x2a1/0x920 [ 644.786179][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 644.791072][ C1] ? do_softirq+0x200/0x200 [ 644.795606][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 644.800836][ C1] __irq_exit_rcu+0x12f/0x220 [ 644.805604][ C1] ? irq_exit_rcu+0x20/0x20 [ 644.810414][ C1] irq_exit_rcu+0x5/0x20 [ 644.814697][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 644.820390][ C1] [ 644.823350][ C1] [ 644.826302][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 644.832319][ C1] RIP: 0010:sched_core_balance+0x151/0xdc0 [ 644.838170][ C1] Code: 6b 8a e8 72 d0 09 00 4c 89 7c 24 38 4c 89 6c 24 28 e9 f4 0b 00 00 48 8b 7c 24 40 e8 99 d0 bf 08 e8 24 69 2d 00 fb 41 83 fd 08 <0f> 83 c1 0b 00 00 4e 8d 34 fd 70 09 3d 8c 4c 89 f0 48 c1 e8 03 48 [ 644.857911][ C1] RSP: 0018:ffffc90000177a60 EFLAGS: 00000297 [ 644.864103][ C1] RAX: 3fcb6c3bd822bf00 RBX: ffff8880b8f3b7c8 RCX: 3fcb6c3bd822bf00 [ 644.872272][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360 [ 644.880266][ C1] RBP: ffffc90000177bc8 R08: dffffc0000000000 R09: ffffed10171c7551 [ 644.888264][ C1] R10: ffffed10171c7551 R11: 1ffff110171c7550 R12: dffffc0000000000 [ 644.896258][ C1] R13: 0000000000000001 R14: ffffffff8159c7e0 R15: 0000000000000001 [ 644.904359][ C1] ? put_prev_task_balance+0x120/0x120 [ 644.909866][ C1] ? sched_core_balance+0xc3/0xdc0 [ 644.915006][ C1] ? read_lock_is_recursive+0x10/0x10 [ 644.920412][ C1] ? put_prev_task_balance+0x120/0x120 [ 644.925901][ C1] ? put_prev_task_balance+0x120/0x120 [ 644.931384][ C1] finish_task_switch+0x39d/0x8f0 [ 644.936563][ C1] __schedule+0x10f1/0x40d0 [ 644.941113][ C1] ? lock_chain_count+0x20/0x20 [ 644.946011][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 644.952162][ C1] ? flush_smp_call_function_queue+0x120/0x340 [ 644.958365][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 644.965760][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 644.971859][ C1] schedule_idle+0x4a/0x90 [ 644.976312][ C1] do_idle+0x525/0x570 [ 644.980502][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 644.985838][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 644.991279][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 644.997753][ C1] ? schedule_idle+0x57/0x90 [ 645.002413][ C1] cpu_startup_entry+0x3f/0x60 [ 645.007227][ C1] start_secondary+0xe4/0xf0 [ 645.012069][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 645.018278][ C1] [ 645.021319][ C1] [ 645.023662][ C1] Allocated by task 8873: [ 645.028100][ C1] kasan_set_track+0x4b/0x70 [ 645.032772][ C1] __kasan_kmalloc+0x8e/0xa0 [ 645.037586][ C1] __kmalloc_node_track_caller+0xae/0x230 [ 645.043424][ C1] __alloc_skb+0x22a/0x7e0 [ 645.047877][ C1] netlink_sendmsg+0x645/0xbc0 [ 645.052673][ C1] __sys_sendto+0x44f/0x5c0 [ 645.057202][ C1] __x64_sys_sendto+0xda/0xf0 [ 645.061920][ C1] do_syscall_64+0x4c/0xa0 [ 645.066465][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.072398][ C1] [ 645.074743][ C1] The buggy address belongs to the object at ffff888030043000 [ 645.074743][ C1] which belongs to the cache kmalloc-512 of size 512 [ 645.088905][ C1] The buggy address is located 42 bytes inside of [ 645.088905][ C1] 512-byte region [ffff888030043000, ffff888030043200) [ 645.102110][ C1] [ 645.104456][ C1] The buggy address belongs to the physical page: [ 645.110884][ C1] page:ffffea0000c01000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888030041c00 pfn:0x30040 [ 645.122356][ C1] head:ffffea0000c01000 order:2 compound_mapcount:0 compound_pincount:0 [ 645.131605][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 645.140111][ C1] raw: 00fff00000010200 ffffea00008d3f08 ffffea0001581808 ffff888017441c80 [ 645.148849][ C1] raw: ffff888030041c00 000000000010000a 00000001ffffffff 0000000000000000 [ 645.157468][ C1] page dumped because: kasan: bad access detected [ 645.163913][ C1] page_owner tracks the page as allocated [ 645.169666][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3312, tgid 3312 (kworker/u4:4), ts 12722439566, free_ts 0 [ 645.190212][ C1] post_alloc_hook+0x173/0x1a0 [ 645.195035][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 645.200617][ C1] __alloc_pages+0x1df/0x4e0 [ 645.205232][ C1] alloc_slab_page+0x5d/0x160 [ 645.209940][ C1] new_slab+0x87/0x2c0 [ 645.214033][ C1] ___slab_alloc+0xbc6/0x1220 [ 645.218732][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 645.224316][ C1] kmalloc_trace+0x26/0xe0 [ 645.228782][ C1] alloc_bprm+0x56/0x730 [ 645.233065][ C1] kernel_execve+0x94/0x9c0 [ 645.237785][ C1] call_usermodehelper_exec_async+0x207/0x350 [ 645.243902][ C1] ret_from_fork+0x1f/0x30 [ 645.248364][ C1] page_owner free stack trace missing [ 645.253745][ C1] [ 645.256104][ C1] Memory state around the buggy address: [ 645.261759][ C1] ffff888030042f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 645.269860][ C1] ffff888030042f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 645.277962][ C1] >ffff888030043000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.286042][ C1] ^ [ 645.291633][ C1] ffff888030043080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.299764][ C1] ffff888030043100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.307980][ C1] ================================================================== [ 645.316173][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 645.323387][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.141-syzkaller #0 [ 645.331125][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.341353][ C1] Call Trace: [ 645.344675][ C1] [ 645.347561][ C1] dump_stack_lvl+0x168/0x22e [ 645.352281][ C1] ? memcpy+0x3c/0x60 [ 645.356296][ C1] ? show_regs_print_info+0x12/0x12 [ 645.361525][ C1] ? load_image+0x3b0/0x3b0 [ 645.366052][ C1] panic+0x2c9/0x710 [ 645.369968][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 645.376164][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 645.380688][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 645.386709][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 645.392734][ C1] ? _raw_spin_unlock+0x40/0x40 [ 645.397638][ C1] check_panic_on_warn+0x80/0xa0 [ 645.402614][ C1] ? rose_timer_expiry+0x470/0x490 [ 645.407840][ C1] end_report+0x66/0x110 [ 645.412116][ C1] kasan_report+0x118/0x140 [ 645.416735][ C1] ? rose_timer_expiry+0x470/0x490 [ 645.421873][ C1] rose_timer_expiry+0x470/0x490 [ 645.426848][ C1] call_timer_fn+0x1a0/0x670 [ 645.431560][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 645.436633][ C1] ? call_timer_fn+0xc1/0x670 [ 645.441349][ C1] ? __run_timers+0x7c0/0x7c0 [ 645.446060][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 645.451289][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 645.456518][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 645.461578][ C1] __run_timers+0x525/0x7c0 [ 645.466287][ C1] ? detach_timer+0x350/0x350 [ 645.471016][ C1] ? lock_chain_count+0x20/0x20 [ 645.475923][ C1] run_timer_softirq+0x63/0xf0 [ 645.480831][ C1] handle_softirqs+0x2a1/0x920 [ 645.485816][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 645.490701][ C1] ? do_softirq+0x200/0x200 [ 645.495237][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 645.500489][ C1] __irq_exit_rcu+0x12f/0x220 [ 645.505257][ C1] ? irq_exit_rcu+0x20/0x20 [ 645.509802][ C1] irq_exit_rcu+0x5/0x20 [ 645.514076][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 645.519915][ C1] [ 645.522872][ C1] [ 645.525824][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 645.531840][ C1] RIP: 0010:sched_core_balance+0x151/0xdc0 [ 645.537669][ C1] Code: 6b 8a e8 72 d0 09 00 4c 89 7c 24 38 4c 89 6c 24 28 e9 f4 0b 00 00 48 8b 7c 24 40 e8 99 d0 bf 08 e8 24 69 2d 00 fb 41 83 fd 08 <0f> 83 c1 0b 00 00 4e 8d 34 fd 70 09 3d 8c 4c 89 f0 48 c1 e8 03 48 [ 645.557583][ C1] RSP: 0018:ffffc90000177a60 EFLAGS: 00000297 [ 645.563684][ C1] RAX: 3fcb6c3bd822bf00 RBX: ffff8880b8f3b7c8 RCX: 3fcb6c3bd822bf00 [ 645.571699][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360 [ 645.579808][ C1] RBP: ffffc90000177bc8 R08: dffffc0000000000 R09: ffffed10171c7551 [ 645.588076][ C1] R10: ffffed10171c7551 R11: 1ffff110171c7550 R12: dffffc0000000000 [ 645.596093][ C1] R13: 0000000000000001 R14: ffffffff8159c7e0 R15: 0000000000000001 [ 645.604086][ C1] ? put_prev_task_balance+0x120/0x120 [ 645.609606][ C1] ? sched_core_balance+0xc3/0xdc0 [ 645.614740][ C1] ? read_lock_is_recursive+0x10/0x10 [ 645.620145][ C1] ? put_prev_task_balance+0x120/0x120 [ 645.625629][ C1] ? put_prev_task_balance+0x120/0x120 [ 645.631109][ C1] finish_task_switch+0x39d/0x8f0 [ 645.636278][ C1] __schedule+0x10f1/0x40d0 [ 645.640828][ C1] ? lock_chain_count+0x20/0x20 [ 645.645713][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 645.651730][ C1] ? flush_smp_call_function_queue+0x120/0x340 [ 645.658017][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 645.665349][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 645.671828][ C1] schedule_idle+0x4a/0x90 [ 645.676306][ C1] do_idle+0x525/0x570 [ 645.680416][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 645.686087][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 645.691342][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 645.697563][ C1] ? schedule_idle+0x57/0x90 [ 645.702199][ C1] cpu_startup_entry+0x3f/0x60 [ 645.706998][ C1] start_secondary+0xe4/0xf0 [ 645.711617][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 645.717543][ C1] [ 645.720890][ C1] Kernel Offset: disabled [ 645.725208][ C1] Rebooting in 86400 seconds..