last executing test programs: 3m6.244868617s ago: executing program 1 (id=350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$urandom(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 3m4.116482511s ago: executing program 1 (id=359): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) 3m2.956985385s ago: executing program 1 (id=363): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0xda2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80000000], [0x10003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) 3m2.879115596s ago: executing program 1 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@debug}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$eJzs3EtvG1UbAOB3Jpf26+VLKOXSUiBQLhGXpEkLdMGmCKRukJBgUZYhTatSt0FNkGhVkcCiLFF/ASCxQeIXsKIbBKxAbGGPkCrUDYUFMhp7bFw7No4vdVs/jzTxnJkzM+edmWOfOcdOAENrKvuTROyIiJ8jYiIiRuozTJVfrl+7uPjntYuLSRSLr/+eZJvFH9cuLlayJvnr9jwxnVYXNVg5f+H0QqGwdC5Pz66eeWd25fyFZ0+dWTi5dHLp7Pzhw4cOzr3w/PxzPYlzZ1bWve8v79tz9M3Lry4eu/zWd19mhduRr6+No2yy62NOxVTTE/B413u/tezMX5tecG5JWV0fjYixUv2fiJFSqmwiXvlwoIUD+qpYLBa3NCyttgDWi8AdLIlBlwAYjMoHffb8W5luYvNj4K4eKT8AZXFfz6fymtFI8zxjNc+3vTYVEcfW//okm2LDfggAgN76Omv/PLNR+y+Ne2vyFdfKY0OTEXFXROyKiLsjYndE3BNRyntfRNy/yeNP1aUb2z8//q+jwNp09UgkL+ZjWze2/yqtv5gcyVM7S/GPJSdOFZYORMT/I2I6xrZk6bkWx7jy8k8fN1tX2/7Lpuz4lbZgXo7fRus66I4vrC50E3Otqx+U+gDXGuNPqiMBSUTsiYi9Hex/a0SceuqLfQ0ragaKbog/oi7+FkY7KFCd4mcRT5av/3rUxV9b1Bbjk7Nbo7B0YLZyVzT6/odLrzU7fqvr39cbP5dd/20b3v/V+CeT2vHalc0f49IvHzV9pun0/h9P3ijNj+fL3ltYXT03FzGerDcun/9320q6kj+Lf3r/xvV/V8Tfn+bbPRAR2U38YEQ8FBEP52V/JCIejYj9LeL/9qXH3u48/v7K4j++qeu/+ZmR09981ez47V3/Q6W56XxJO+9/7Rawm3MHAAAAt4u09B34JJ2pzqfpzEz5O/y7Y1taWF5ZffrE8rtnj5e/Kz8ZY2mlp2uipj90Lu8brqTn69IH877ATJaeWVwu9GtMHWjP9ib1P/PryKBLB/TdpsbR/MIL7ig9GEcHblPqPwwv9R+Gl/oPw2uj+r8WcX0ARQFuMp//MLzUfxhe6j8ML/UfhlI3v+tvNbPraL/2fDvOXImIZnlGBlrCJ7Z3unmkhT3jt8bp/c+Zsfxury5Ju9jh5/n/RepZCbdERLuZ16JxVdqXUzfIdyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+ScAAP//bl3ebg==") 3m2.577737569s ago: executing program 1 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000ab2f5b280cb858e5ea35c9ab03a55b7e0bb2baf70393dc96f1fa6ab94c7261496ea34e5a307feb58b39cb0de7711d664b2c20b3d61e7711efae87761a5d309f1a81e796c00da6c29f98b2e10e9330aa7285bfba274ad381528de4fc5e52ee7ff0745ccb8e9f29d739401b00060554d17cf873d5074d27859dd0247d978a700"/168], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3m2.356151122s ago: executing program 2 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x10004c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@check_strict}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@map_acorn}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@nojoliet}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x1a}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f00000009c0)="$eJzs3U9vG2kZAPBn3Jhms6tul3a3aTjsaNugUEFqu2pL1Qtp7KRenBglqbQrLgGaRVUjFrEglRWHIiFOVHBAHODWI6eKvewJ5VNw4NIPwKXilFtWM3Yap7HjNErjbPr7SePxzDzzPs/4Hc+r/LEn+Drb2NjIp30u3/nnYRbL0XOr+vTxk0fZ9PuH8Y04EVeTLyOGIyKNGIqI0YjidHWhOdenofsRyxGxFpFExMlozfdkOZI/x1tby2uR/CPLy6u3wWtt0OcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcRcl0tVQqJ9Goz9/5KO0tvwX4Lts322sWssdCs2/eiCSbYnh481bfo2e2Nr+bPXwQ51pL5/IbksdwfP7me6dvnhkqbO6/S0GH4rPffn7/J6urK78adCEDMlubry8263NTs7W0vthMb1y7Vrp8e2Yxnak3aosfLy7V5tLphdrUUnMhnZj+Tlq+ceNKWpv8uHlnfrY61ahtrrz+vUqpdC39cPJHtamFxeb85Q8nF6dv1xuN+vxsHpNtzmKuZyfiD+tL6VJtai5NP7m3unKlX5FZUHkvQZV+QZVSpVIuVyrla1dvXL1eKg3tWFF6QeyIGPxJy2Ad+DUc9mujPf4DAAAAx1eS/449+/m/mP8ePomZeqNWGnRZAAAAwAHK//J/LpsVI+KN9lo//wMAAMBx0v8zdn0jku/G+VbE+but+d12xL9O5hEjM/VGbXK62bhZjm8//7Rf99aK+b8fXIqxVtTYSGs+0o5qf3JwOIsqFzoP5FsTF7LZhYkukZXJm+W4FO1P3qS7RF7JIgHguPugz3i8l/H/Uoy3IsbHssE0hsa6jKwlIysAHBXPv8HmFT4Z9DECANsZpQEAAAAAAAAAAAAAAAAAAAAAAAAAAODgHcb3/3viiSdftyeDvjIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyekogT3dYXIk5GRCkiLh9+Va/Ow0EXMGDJeqzHgzg16DoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6b9vf/F6I1f7O1KoYKEeMRsRwRPx50jfvS9a4GEeuHXcdgDb+4ouP7/7M+j40khlrdHklxurrQnMu6P7/3Q+Hp4yePsmk/ibMGsgzbuqGdofde7+R7jVRXPrv/609/mVZv5UXeWpppVOdmF36wFfhe8kVEGq1p02a9vxv/9192dn/yRXake8s7k+et7sx7rtvenXl7H1s391ZXKlmmpdpHS7/5xb0HHZu+GWMRFyYiJrZn+nk29cg0FsXdsiXPkj8mp+JvsZz3f/ZqJBtJ1kVv58f/xif3Vlcmf/bp6t1tNW21eTpGI+Lu9tOqT02j+fWkq/ysKxSzrKU8KHs426e9XXW0WO7xur4T5yNi5KWO4XzvY8j1ed3bFV3pUdGZeP+le/r9Phm7Sp4l/01ux3/iDx33/yhk/T8ee3l3ZjF5ZMeZ0jOy0IrMj7yya5s935XsT2G3jX+Kn8b3n/d/oeP63+6rw7kedWQ8pPdFPiKdfWFEal99eu3TrvNsK6pHne/GxYihsZe6olzsc0XZuX9xr8fZW/Is+XsyEf+Ph+7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHH1JxIlu6wsR4xFxOiLezpbTiI2DyFcYSeJ/pw6ipf15OLjUR0KyHuvxIAbYAwAAAAAAAAAcpFvVp4+fPMqmJFs8EReTLyOGW3/pH4qI08lfi9PVheZcn4aKEcsRsbaPGrL94q2t5bVsaXQfDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGx9FQAA///j1rXV") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x5}, 0x5}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r4, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m2.157944584s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = memfd_create(&(0x7f0000000780)='\xa9\xc6\xeb\x18\xbb\x11Z', 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xd0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @private2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x21}}}}, @CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xd0}}, 0x44800) ftruncate(r0, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001072dbd3d5b0fe0df2500000000", @ANYRES32=0x0, @ANYBLOB="0402000081010600140012800b0001006272696467650000040002800500100005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00&'], 0x3c}, 0x1, 0x0, 0x0, 0xd0000}, 0x4000804) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 3m1.772909089s ago: executing program 32 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = memfd_create(&(0x7f0000000780)='\xa9\xc6\xeb\x18\xbb\x11Z', 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xd0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @private2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x21}}}}, @CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xd0}}, 0x44800) ftruncate(r0, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001072dbd3d5b0fe0df2500000000", @ANYRES32=0x0, @ANYBLOB="0402000081010600140012800b0001006272696467650000040002800500100005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00&'], 0x3c}, 0x1, 0x0, 0x0, 0xd0000}, 0x4000804) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 3m0.144070388s ago: executing program 2 (id=382): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000001100)='./file2\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0x0, 0x6cb, &(0x7f0000001840)="$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") 2m59.725723672s ago: executing program 2 (id=386): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x6d210ab41c1a4c77) 2m59.456880466s ago: executing program 2 (id=387): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 2m58.672964445s ago: executing program 2 (id=388): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f00000000c0)=0x812) 2m58.001028262s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xe000202b}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) 2m57.403811529s ago: executing program 33 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xe000202b}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) 1m47.620603121s ago: executing program 5 (id=566): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080080f34803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1m47.389122473s ago: executing program 5 (id=568): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) 1m43.718567276s ago: executing program 5 (id=579): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 1m42.438371201s ago: executing program 5 (id=582): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@fat=@nocase}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@quiet}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@shortname_winnt}]}, 0x0, 0x2b5, &(0x7f00000012c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m41.896486147s ago: executing program 5 (id=584): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr(0x0, &(0x7f0000000300)=@random={'osx.', 'cpuacct.usage_sys\x00'}, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/168, 0xa8) 1m40.328969155s ago: executing program 5 (id=587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000"], 0x3f9, 0x0) 1m39.197068389s ago: executing program 34 (id=587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000"], 0x3f9, 0x0) 1m34.089723257s ago: executing program 0 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) pipe2$9p(0x0, 0x84000) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x10004c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@check_strict}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@map_acorn}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@nojoliet}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x1a}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f00000009c0)="$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") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x5}, 0x5}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.956689602s ago: executing program 0 (id=603): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x400}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}], [{@seclabel}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4c4ac000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x1000, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000100)={0x88, 0x18, '\x00', [@generic={0x0, 0xc3, "3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf061530b5e0f1"}]}, 0xd0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80200) writev(r3, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000940)) 1m29.386989032s ago: executing program 0 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc906, &(0x7f0000000300)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@errors_remount}, {@acl}, {@journal_ioprio}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x501, &(0x7f0000000900)="$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") syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000300)={0x0, 0xd47870137cfab7ea, 0x1, "06"}, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m27.936374889s ago: executing program 0 (id=612): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x240000, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x9, 0x6, 0x9}}, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000100000009"], 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) eventfd2(0x3, 0x80800) socket$netlink(0x10, 0x3, 0x0) 1m27.03704895s ago: executing program 0 (id=614): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) 1m26.488940546s ago: executing program 0 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x10004c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@check_strict}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@map_acorn}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@nojoliet}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x1a}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f00000009c0)="$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") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x5}, 0x5}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.048594231s ago: executing program 35 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x10004c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@check_strict}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@map_acorn}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@nojoliet}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x1a}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f00000009c0)="$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") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x5}, 0x5}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.686804126s ago: executing program 6 (id=794): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0xc, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$eJzslc+q00AUxr+Z1KQVn8CNCy94XZgmqYqbC3XjyoXgn+JCsNi0VFMrbRa2IOITuHfnwscQ6taHkCqIguhGXY/MnyRjaYTW1iw8P+jJN5npmTNn4AsIgvhv+fD+51L8OPpUB3ACB/DM+89OsYZb69/Vvz15c/VK5/mdV2+9pd/4PZu38f41AIvLDlIzFkIIe/7APG+A5/omOM4a3QGDb/RdcNwyOgbDbaPvW3os1/t+f5jE/r1x0pMikCGUIZKhtVrf12cMPas+Zs1PZ/MH3SSJJ3sU6zu3+JLXVweOrPrs+/Khqw2s/oXgCI1ugeG60ZfgZb3RLbHOf7JW5Hf+eH4Xf3nsjwCKN/19dtaVW231d4D9k7vfs3CgRHajldezc4HazhIKD6j6OCXidVvfX17qUz3eLE+7ZMrdMI/pfO6f4iXDGcuftJW8UB+LZjp61JzO5ueGo+4gHsQPo6h1MTgfBBeipjIiHddboMrfUP50vMjfKFvrMhePu2k6CXXMx5GO6xyXK//jODyNY3Is3dRdyfsdQLYpMz+unlIdOqXFEwRBVMgpMOXJypczYb4m+YQQ0bWK6yQIgiAIgiAIgiAIYnt+BQAA//9We18t") r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x13, r0, 0x2000) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 21.598988389s ago: executing program 6 (id=797): socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) 18.716759083s ago: executing program 6 (id=807): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 17.760999464s ago: executing program 6 (id=809): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x400}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}], [{@seclabel}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4c4ac000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x1000, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000100)={0x88, 0x18, '\x00', [@generic={0x0, 0xc3, "3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf061530b5e0f1"}]}, 0xd0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80200) writev(r3, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000940)) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 10.645058317s ago: executing program 6 (id=832): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 6.07706527s ago: executing program 3 (id=853): capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) times(&(0x7f0000000300)) 5.836128342s ago: executing program 3 (id=855): unshare(0x2000400) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x1, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x9, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.712900664s ago: executing program 4 (id=856): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x1, 0x1, 0x35d, 0x3, 0x8, 0xd, 0x80000000, 0x9, 0x2, 0x3ff, 0x3, 0x2, 0x6, 0x1ff}) 5.618794165s ago: executing program 3 (id=857): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 5.067170831s ago: executing program 4 (id=858): rename(0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 4.920983433s ago: executing program 4 (id=859): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x35) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0xe05, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x44010) 3.5032322s ago: executing program 3 (id=863): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) 3.43695292s ago: executing program 4 (id=864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x11) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = fanotify_init(0x20, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000f40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2.846395577s ago: executing program 7 (id=865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.56070666s ago: executing program 7 (id=866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x48, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) 2.207532084s ago: executing program 7 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) pipe2$9p(0x0, 0x84000) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x10004c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@check_strict}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@map_acorn}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@showassoc}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@nojoliet}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x1a}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f00000009c0)="$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") write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x5}, 0x5}}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r5, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.392915774s ago: executing program 4 (id=868): r0 = syz_open_dev$loop(&(0x7f00000025c0), 0x9, 0xa2840) setuid(0xee01) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 1.365463874s ago: executing program 3 (id=869): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) open(0x0, 0x24842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 1.213372526s ago: executing program 7 (id=870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 885.0032ms ago: executing program 4 (id=871): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') exit(0x5) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 262.210867ms ago: executing program 7 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) 175.958378ms ago: executing program 3 (id=873): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0xc96, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 85.005349ms ago: executing program 6 (id=874): unlink(0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000180)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000700)='./file1\x00', 0x0, 0x194) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000380)={0x5, 0xcd, 0x1, 0x3}) sched_setscheduler(r2, 0x0, &(0x7f0000000180)=0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) write$P9_RAUTH(r3, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x20, 0x3, 0x7}}, 0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="c0a33397b2a111b129e539ea770c028ea82a1a2c24f83561be970b7a69cb73ffde046d0693128cfecffc7b42f61264671d1418ac1b24a6303ddb3c97222966651457287f338d13fddf6958afd300d5a64b7d24b92b9d678ed93169491d6966e2ea8d2ea7219fec37694bf1bd93d3aa17e0505827a0be1c0634d7f663ff65d3ab7c0f4879f1e84b69135f7fb7602bfbb495b172d91343f20af5de79218339003d441a48faf9e6bfc2ea3b10bde13fbb02defebc2100d069aa3b2f5bb19e9e117812c4b832f0dd75ea1ef56431edf8f7", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRESOCT], 0x1, 0x17d, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0xfb) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=875): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) kernel console output (not intermixed with test programs): pacity change from 0 to 128 [ 118.403566][ T6187] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.430582][ T6187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.469122][ T6183] EXT4-fs: Ignoring removed nobh option [ 118.543928][ T6183] ext4: Unknown parameter 'seclabel' [ 119.143160][ T6183] loop1: detected capacity change from 0 to 1024 [ 119.250686][ T28] audit: type=1800 audit(1777907483.335:4): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.103" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 119.312514][ T6189] syz.3.103: attempt to access beyond end of device [ 119.312514][ T6189] loop3: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 119.831598][ T28] audit: type=1800 audit(1777907483.935:5): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 120.391377][ T6203] loop1: detected capacity change from 0 to 512 [ 120.777383][ T5771] Bluetooth: Wrong link type (-22) [ 121.292663][ T6203] EXT4-fs: Ignoring removed nobh option [ 121.338931][ T6203] ext4: Unknown parameter 'seclabel' [ 121.607187][ T6210] loop2: detected capacity change from 0 to 512 [ 122.341163][ T6224] loop0: detected capacity change from 0 to 128 [ 122.507131][ T5771] Bluetooth: Wrong link type (-22) [ 122.513050][ T5771] Bluetooth: hci1: link tx timeout [ 122.519132][ T5771] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 122.543765][ T6224] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 122.565349][ T6224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.011197][ T6226] loop1: detected capacity change from 0 to 128 [ 123.306024][ T6231] loop0: detected capacity change from 0 to 512 [ 123.313618][ T6231] EXT4-fs: Ignoring removed nobh option [ 123.320997][ T6231] ext4: Unknown parameter 'seclabel' [ 123.452775][ T6232] syz.1.115: attempt to access beyond end of device [ 123.452775][ T6232] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 123.470248][ T28] audit: type=1800 audit(1777907487.505:6): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.115" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 123.976017][ T6231] loop0: detected capacity change from 0 to 1024 [ 124.190223][ T6234] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.583193][ T28] audit: type=1800 audit(1777907488.465:7): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.117" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 124.623535][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 124.786522][ T51] Bluetooth: Wrong link type (-22) [ 125.266711][ T6244] loop1: detected capacity change from 0 to 512 [ 125.273864][ T6244] EXT4-fs: Ignoring removed nobh option [ 125.286816][ T6244] ext4: Unknown parameter 'seclabel' [ 125.352041][ T5760] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.111541][ T6244] loop1: detected capacity change from 0 to 1024 [ 126.111776][ T5760] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.419200][ T6255] loop0: detected capacity change from 0 to 512 [ 126.491257][ T28] audit: type=1800 audit(1777907490.575:8): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.122" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 126.932328][ T6262] loop3: detected capacity change from 0 to 128 [ 126.979235][ T6262] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 126.996686][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.730694][ T6269] loop1: detected capacity change from 0 to 128 [ 127.983292][ T6273] loop3: detected capacity change from 0 to 128 [ 128.544697][ T28] audit: type=1800 audit(1777907492.205:9): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.127" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 128.700047][ T6273] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 128.716096][ T6275] syz.1.127: attempt to access beyond end of device [ 128.716096][ T6275] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 128.773237][ T6273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.444815][ T5778] Bluetooth: Wrong link type (-22) [ 130.576010][ T5778] Bluetooth: Wrong link type (-22) [ 130.581379][ T5778] Bluetooth: hci2: link tx timeout [ 130.587694][ T5778] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 130.872891][ T6295] loop0: detected capacity change from 0 to 512 [ 130.895090][ T6295] EXT4-fs: Ignoring removed nobh option [ 130.900767][ T6295] ext4: Unknown parameter 'seclabel' [ 131.151847][ T6301] loop1: detected capacity change from 0 to 128 [ 131.873712][ T6301] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 131.901913][ T6301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.276153][ T6304] loop0: detected capacity change from 0 to 512 [ 132.409159][ T6306] netlink: 110 bytes leftover after parsing attributes in process `syz.2.138'. [ 132.504690][ T6311] loop1: detected capacity change from 0 to 128 [ 132.522498][ T6311] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 132.545003][ T6311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.624512][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 132.959447][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.976360][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.435233][ T6319] loop1: detected capacity change from 0 to 128 [ 133.495773][ T6322] loop2: detected capacity change from 0 to 8 [ 133.511265][ T6322] SQUASHFS error: lzo decompression failed, data probably corrupt [ 133.522515][ T6322] SQUASHFS error: Failed to read block 0x91: -5 [ 133.543036][ T6322] SQUASHFS error: Unable to read metadata cache entry [8f] [ 133.578859][ T6322] SQUASHFS error: Unable to read inode 0x11f [ 133.689405][ T5760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.871333][ T6330] syz.1.141: attempt to access beyond end of device [ 134.871333][ T6330] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 134.984616][ T28] audit: type=1800 audit(1777907497.905:10): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.141" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 135.372459][ T6335] loop2: detected capacity change from 0 to 512 [ 135.383612][ T6335] EXT4-fs: Ignoring removed nobh option [ 135.409165][ T6335] ext4: Unknown parameter 'seclabel' [ 135.684546][ T6339] loop0: detected capacity change from 0 to 128 [ 136.394938][ T6339] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 136.425417][ T6339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.187466][ T6352] loop2: detected capacity change from 0 to 128 [ 137.209251][ T6352] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 137.225848][ T6352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.356020][ T5778] Bluetooth: Wrong link type (-22) [ 137.362512][ T5778] Bluetooth: hci3: link tx timeout [ 137.368950][ T5778] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.017729][ T6355] loop1: detected capacity change from 0 to 128 [ 138.129261][ T6357] loop0: detected capacity change from 0 to 512 [ 138.381861][ T28] audit: type=1800 audit(1777907502.475:11): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 138.478845][ T6364] syz.1.154: attempt to access beyond end of device [ 138.478845][ T6364] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 139.131631][ T6369] loop2: detected capacity change from 0 to 512 [ 139.160743][ T6369] EXT4-fs: Ignoring removed nobh option [ 139.194907][ T6369] ext4: Unknown parameter 'seclabel' [ 140.391766][ T6374] loop1: detected capacity change from 0 to 128 [ 140.498747][ T6376] loop3: detected capacity change from 0 to 2364 [ 140.513899][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 141.064734][ T6374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 141.087364][ T6374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.317207][ T6369] loop2: detected capacity change from 0 to 1024 [ 142.028589][ T6394] hfsplus: xattr searching failed [ 142.034408][ T6395] hfsplus: xattr searching failed [ 142.046578][ T6392] loop1: detected capacity change from 0 to 2364 [ 142.390757][ T28] audit: type=1800 audit(1777907506.145:12): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.156" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 142.933097][ T6396] loop3: detected capacity change from 0 to 128 [ 142.990330][ T6396] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.012438][ T6396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.034168][ T28] audit: type=1800 audit(1777907506.155:13): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.156" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 143.156861][ T6398] loop2: detected capacity change from 0 to 128 [ 143.299630][ T6402] loop1: detected capacity change from 0 to 512 [ 143.864747][ T5778] Bluetooth: Wrong link type (-22) [ 143.871306][ T5778] Bluetooth: hci0: link tx timeout [ 143.877449][ T5778] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 143.893479][ T5778] Bluetooth: hci0: link tx timeout [ 143.903950][ T5778] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.016370][ T28] audit: type=1800 audit(1777907508.085:14): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.165" name="file1" dev="loop2" ino=1048618 res=0 errno=0 [ 144.042568][ T6405] syz.2.165: attempt to access beyond end of device [ 144.042568][ T6405] loop2: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 144.438514][ T6415] loop0: detected capacity change from 0 to 128 [ 144.495341][ T6415] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 144.512664][ T6415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.041887][ T6417] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 145.049760][ T6417] netlink: 17 bytes leftover after parsing attributes in process `syz.3.168'. [ 145.294299][ C0] sched: RT throttling activated [ 145.683549][ T6422] loop2: detected capacity change from 0 to 2364 [ 145.986712][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 146.451152][ T6418] tty tty23: ldisc open failed (-12), clearing slot 22 [ 147.611542][ T6433] process 'syz.1.175' launched './file0' with NULL argv: empty string added [ 148.066703][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 148.571534][ T6442] loop1: detected capacity change from 0 to 128 [ 148.580556][ T6442] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 148.596126][ T6442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.168258][ T28] audit: type=1326 audit(1777907514.285:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.2.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f634bb9cdd9 code=0x0 [ 150.233003][ T6452] loop2: detected capacity change from 0 to 512 [ 150.331137][ T6454] loop3: detected capacity change from 0 to 512 [ 150.358044][ T6454] EXT4-fs: Ignoring removed nobh option [ 150.373953][ T6454] ext4: Unknown parameter 'seclabel' [ 150.379426][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.379547][ T6452] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.586851][ T6461] loop1: detected capacity change from 0 to 128 [ 150.730021][ T6461] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.755226][ T6461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.926112][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 151.827621][ T6466] loop1: detected capacity change from 0 to 512 [ 151.875233][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.007509][ T6491] warning: `syz.1.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.722980][ T28] audit: type=1326 audit(1777907518.835:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5485f9cdd9 code=0x0 [ 155.149928][ T6500] loop1: detected capacity change from 0 to 512 [ 155.305716][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.410336][ T6507] loop3: detected capacity change from 0 to 512 [ 155.421857][ T6500] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.672143][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 155.967025][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.974411][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.118494][ T6516] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.254369][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 156.289942][ T5883] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 156.369945][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.435992][ T5883] usb 3-1: Product: syz [ 156.471871][ T5883] usb 3-1: Manufacturer: syz [ 156.512767][ T5883] usb 3-1: SerialNumber: syz [ 156.607508][ T6523] loop0: detected capacity change from 0 to 128 [ 156.679943][ T5883] usb 3-1: config 0 descriptor?? [ 156.703953][ T5883] usb-storage 3-1:0.0: USB Mass Storage device detected [ 156.776892][ T6523] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 156.812134][ T6523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.924491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 157.946395][ T5883] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 157.994370][ T5883] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 157.994370][ T5883] Please send a copy of this message to and [ 158.113960][ T6530] netlink: 9 bytes leftover after parsing attributes in process `syz.3.201'. [ 158.152930][ T6530] gretap0: entered promiscuous mode [ 158.214970][ T5883] usb 3-1: USB disconnect, device number 3 [ 158.234466][ T6531] netlink: 5 bytes leftover after parsing attributes in process `syz.3.201'. [ 158.263428][ T6531] 0ªî{X¹¦: renamed from gretap0 [ 158.276075][ T6531] 0ªî{X¹¦: left promiscuous mode [ 158.374520][ T6531] 0ªî{X¹¦: entered allmulticast mode [ 158.388569][ T6531] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.336007][ T28] audit: type=1326 audit(1777907523.455:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.0.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27db79cdd9 code=0x0 [ 159.445649][ T6546] loop0: detected capacity change from 0 to 512 [ 159.544190][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.614669][ T6546] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.762856][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 160.020430][ T6556] loop3: detected capacity change from 0 to 512 [ 160.177900][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.607792][ T6571] loop2: detected capacity change from 0 to 128 [ 161.617843][ T6571] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 161.641970][ T6571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.935528][ T6574] loop3: detected capacity change from 0 to 8 [ 162.562218][ T6582] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 162.570015][ T6582] netlink: 17 bytes leftover after parsing attributes in process `syz.3.214'. [ 163.357761][ T28] audit: type=1326 audit(1777907527.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5485f9cdd9 code=0x0 [ 164.534098][ T6591] loop1: detected capacity change from 0 to 512 [ 164.710221][ T6591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.724560][ T6591] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.060350][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.216'. [ 165.809900][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.837450][ T6603] loop2: detected capacity change from 0 to 512 [ 166.734913][ T6619] loop2: detected capacity change from 0 to 128 [ 166.745231][ T6619] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 166.775911][ T6619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.500569][ T6627] loop1: detected capacity change from 0 to 512 [ 167.612933][ T6627] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.694861][ T6627] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 167.725106][ T6627] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.227: Corrupt directory, running e2fsck is recommended [ 167.782445][ T6627] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 167.794660][ T6627] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.227: corrupted in-inode xattr: invalid ea_ino [ 167.816339][ T6627] EXT4-fs (loop1): Remounting filesystem read-only [ 167.824171][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.999254][ T6639] loop2: detected capacity change from 0 to 2364 [ 168.048704][ T6637] loop3: detected capacity change from 0 to 128 [ 168.330575][ T6627] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.704646][ T6627] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 168.732568][ T6627] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.227: Corrupt directory, running e2fsck is recommended [ 168.843051][ T28] audit: type=1800 audit(1777907532.945:19): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 168.932729][ T6642] syz.3.230: attempt to access beyond end of device [ 168.932729][ T6642] loop3: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 168.976898][ T6627] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.121357][ T6627] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 169.194562][ T6627] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.227: Corrupt directory, running e2fsck is recommended [ 170.055339][ T6649] loop3: detected capacity change from 0 to 512 [ 170.058911][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.173537][ T6651] loop1: detected capacity change from 0 to 128 [ 171.588686][ T6670] loop2: detected capacity change from 0 to 128 [ 173.742238][ T6670] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 173.988708][ T6670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.882796][ T6689] loop0: detected capacity change from 0 to 128 [ 174.894028][ T6689] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 174.909600][ T6689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.686828][ T6699] loop3: detected capacity change from 0 to 512 [ 175.746820][ T6703] loop0: detected capacity change from 0 to 128 [ 177.814457][ T6720] loop1: detected capacity change from 0 to 128 [ 179.916449][ T6720] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 179.927800][ T6720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.680417][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.934555][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 181.946671][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.978505][ T8] usb 2-1: config 179 has no interface number 0 [ 181.986559][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 182.027220][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 182.057508][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 182.103441][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 182.124504][ T8] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.151639][ T8] usb 2-1: config 179 interface 65 has no altsetting 0 [ 182.174398][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 182.204370][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.274048][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 182.345684][ T5123] input input6: unable to receive magic message: -110 [ 182.403885][ T5123] input input6: unable to receive magic message: -32 [ 182.426255][ T5123] input input6: unable to receive magic message: -32 [ 182.452673][ T5123] input input6: unable to receive magic message: -32 [ 182.499657][ T5123] input input6: unable to receive magic message: -32 [ 182.570880][ T5123] input input6: unable to receive magic message: -32 [ 182.621630][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 182.621639][ T5807] usb 2-1: USB disconnect, device number 3 [ 182.635973][ T5807] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 182.867652][ T6736] loop0: detected capacity change from 0 to 2364 [ 184.112274][ T6738] loop2: detected capacity change from 0 to 128 [ 185.126707][ T6743] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 185.258536][ T6749] loop2: detected capacity change from 0 to 512 [ 185.310525][ T6749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.404130][ T6749] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.260: ea_inode file size=4 entry size=6 [ 185.424612][ T6749] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.467550][ T6749] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.260: corrupted inode contents [ 185.535356][ T6749] EXT4-fs (loop2): Remounting filesystem read-only [ 185.550196][ T6749] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -5) [ 185.645270][ T6749] EXT4-fs (loop2): 1 orphan inode deleted [ 185.651628][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.751449][ T6756] loop0: detected capacity change from 0 to 128 [ 186.826458][ T6756] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 186.838094][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.234922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 188.383323][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.879941][ T6769] loop1: detected capacity change from 0 to 128 [ 189.061871][ T6773] loop2: detected capacity change from 0 to 2364 [ 189.426919][ T28] audit: type=1800 audit(1777907553.395:20): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.267" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 189.478357][ T6776] syz.1.267: attempt to access beyond end of device [ 189.478357][ T6776] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 190.046801][ T6778] loop2: detected capacity change from 0 to 1024 [ 190.120412][ T6782] loop3: detected capacity change from 0 to 1024 [ 190.134833][ T6778] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 190.143470][ T6778] hfsplus: xattr searching failed [ 190.157554][ T6778] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 190.174561][ T6778] hfsplus: xattr search failed [ 190.190995][ T6778] hfsplus: b-tree write err: -5, ino 2 [ 190.217406][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.233911][ T6787] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 190.254236][ T6787] netlink: 17 bytes leftover after parsing attributes in process `syz.1.270'. [ 190.334706][ T1083] hfsplus: b-tree write err: -5, ino 25 [ 190.343544][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 190.347686][ T6782] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.271: empty directory 'file1' has too many links (111) [ 190.355940][ T1083] hfsplus: b-tree write err: -5, ino 2 [ 190.387672][ T1083] hfsplus: b-tree write err: -5, ino 23 [ 190.492312][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.601353][ T6793] loop2: detected capacity change from 0 to 128 [ 190.610635][ T6793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.622038][ T6793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.794918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.508981][ T6813] loop0: detected capacity change from 0 to 128 [ 193.710834][ T6818] loop1: detected capacity change from 0 to 2364 [ 193.840550][ T28] audit: type=1800 audit(1777907557.945:21): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.278" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 193.891785][ T6820] syz.0.278: attempt to access beyond end of device [ 193.891785][ T6820] loop0: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 194.059803][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 194.220339][ T6817] bridge_slave_1: left allmulticast mode [ 194.300306][ T6817] bridge_slave_1: left promiscuous mode [ 194.344503][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.399126][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405658][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.495841][ T6817] bridge_slave_0: left allmulticast mode [ 194.501543][ T6817] bridge_slave_0: left promiscuous mode [ 194.524766][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.679690][ T6825] loop0: detected capacity change from 0 to 128 [ 194.688811][ T6825] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 194.700319][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.887748][ T6842] netlink: 'syz.2.285': attribute type 4 has an invalid length. [ 195.903206][ T6841] loop1: detected capacity change from 0 to 512 [ 195.918449][ T6842] netlink: 17 bytes leftover after parsing attributes in process `syz.2.285'. [ 195.929283][ T6841] EXT4-fs: Ignoring removed nobh option [ 195.934966][ T6841] EXT4-fs: Ignoring removed oldalloc option [ 195.957746][ T6841] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 195.978598][ T6841] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.288: invalid indirect mapped block 256 (level 1) [ 196.018299][ T6841] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.288: invalid indirect mapped block 2683928664 (level 1) [ 196.097475][ T6841] EXT4-fs (loop1): 1 truncate cleaned up [ 196.110178][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.200509][ T6848] loop3: detected capacity change from 0 to 2364 [ 196.404403][ T5883] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 196.598406][ T5883] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 196.621448][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.638658][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 19968, setting to 64 [ 196.651308][ T5883] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 196.672791][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.692417][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.705085][ T5883] usb 2-1: SerialNumber: syz [ 196.716581][ T6841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.749137][ T5883] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 196.849133][ T6852] loop0: detected capacity change from 0 to 128 [ 196.850721][ T6851] loop2: detected capacity change from 0 to 512 [ 196.870996][ T6851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.887943][ T6851] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.932423][ T6851] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 196.978064][ T5883] usb 2-1: USB disconnect, device number 4 [ 197.008128][ T6851] EXT4-fs (loop2): 1 truncate cleaned up [ 197.018039][ T6851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.385244][ T28] audit: type=1800 audit(1777907561.465:22): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file1" dev="loop0" ino=1048625 res=0 errno=0 [ 197.768904][ T6859] syz.0.290: attempt to access beyond end of device [ 197.768904][ T6859] loop0: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 198.016976][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.040561][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.124447][ T6865] loop3: detected capacity change from 0 to 128 [ 198.135263][ T6865] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.164947][ T6865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.971614][ T6876] loop0: detected capacity change from 0 to 2364 [ 199.509312][ T6885] loop3: detected capacity change from 0 to 128 [ 199.540789][ T6886] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 199.556990][ T6886] netlink: 17 bytes leftover after parsing attributes in process `syz.2.299'. [ 199.867553][ T28] audit: type=1800 audit(1777907563.975:23): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="file1" dev="loop3" ino=1048626 res=0 errno=0 [ 199.906475][ T6890] syz.3.301: attempt to access beyond end of device [ 199.906475][ T6890] loop3: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 200.527727][ T6894] loop1: detected capacity change from 0 to 512 [ 200.537244][ T6894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.574018][ T6894] EXT4-fs (loop1): 1 truncate cleaned up [ 200.586306][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.655529][ T6900] loop3: detected capacity change from 0 to 512 [ 200.711357][ T6900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.779649][ T6900] EXT4-fs (loop3): 1 truncate cleaned up [ 200.836125][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.678334][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.995356][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.763601][ T6918] loop3: detected capacity change from 0 to 8 [ 202.806231][ T6918] SQUASHFS error: Failed to read block 0x636: -5 [ 202.821643][ T6918] SQUASHFS error: Unable to read metadata cache entry [634] [ 202.896646][ T6922] loop0: detected capacity change from 0 to 2364 [ 202.907833][ T6923] SQUASHFS error: Unable to read metadata cache entry [634] [ 203.008424][ T6918] SQUASHFS error: Unable to read metadata cache entry [634] [ 203.070599][ T6920] loop1: detected capacity change from 0 to 512 [ 203.084483][ T6923] SQUASHFS error: Unable to read metadata cache entry [634] [ 203.132210][ T6918] SQUASHFS error: Unable to read directory block [634:0] [ 203.175758][ T6424] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.187606][ T6923] SQUASHFS error: Unable to read directory block [629:0] [ 203.439090][ T6930] loop1: detected capacity change from 0 to 128 [ 203.676293][ T6933] loop3: detected capacity change from 0 to 4096 [ 203.712974][ T28] audit: type=1800 audit(1777907567.825:24): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.313" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 203.747004][ T6934] syz.1.313: attempt to access beyond end of device [ 203.747004][ T6934] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 203.817374][ T6933] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.836615][ T6933] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 203.854700][ T6933] System zones: 0-5 [ 203.861106][ T6933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.941815][ T6942] loop0: detected capacity change from 0 to 512 [ 203.971635][ T6942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.014038][ T6942] EXT4-fs (loop0): 1 truncate cleaned up [ 204.033415][ T6942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.209783][ T6947] loop2: detected capacity change from 0 to 512 [ 204.241867][ T6947] EXT4-fs: Ignoring removed nobh option [ 204.269434][ T6947] ext4: Unknown parameter 'seclabel' [ 204.743342][ T6947] loop2: detected capacity change from 0 to 1024 [ 205.015351][ T6933] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 205.065645][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.279753][ T28] audit: type=1800 audit(1777907569.255:25): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.318" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 205.812240][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.348501][ T6960] loop2: detected capacity change from 0 to 128 [ 206.389084][ T6964] netlink: 'syz.0.320': attribute type 4 has an invalid length. [ 206.627777][ T6966] loop3: detected capacity change from 0 to 256 [ 206.632910][ T6964] netlink: 17 bytes leftover after parsing attributes in process `syz.0.320'. [ 206.678325][ T6969] loop1: detected capacity change from 0 to 2364 [ 207.047980][ T6971] syz.2.321: attempt to access beyond end of device [ 207.047980][ T6971] loop2: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 207.098129][ T28] audit: type=1800 audit(1777907570.875:26): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.321" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 207.274106][ T6966] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 207.488475][ T6966] exFAT-fs (loop3): error, invalid size(size(4096) > aligned(9223372036854777344) [ 207.488475][ T6966] [ 207.542613][ T6966] exFAT-fs (loop3): Filesystem has been set read-only [ 207.563969][ T6974] exFAT-fs (loop3): error, invalid size(size(4096) > aligned(9223372036854777344) [ 207.563969][ T6974] [ 207.624593][ T6976] loop1: detected capacity change from 0 to 2048 [ 207.653525][ T6976] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 207.698278][ T6978] loop2: detected capacity change from 0 to 128 [ 207.715961][ T5760] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.013185][ T28] audit: type=1800 audit(1777907572.125:27): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="file1" dev="loop2" ino=1048631 res=0 errno=0 [ 208.044447][ T6982] syz.2.327: attempt to access beyond end of device [ 208.044447][ T6982] loop2: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 208.070534][ T6984] loop1: detected capacity change from 0 to 512 [ 208.081802][ T6984] EXT4-fs: Ignoring removed nobh option [ 208.089402][ T6984] ext4: Unknown parameter 'seclabel' [ 208.121551][ T6981] loop3: detected capacity change from 0 to 2364 [ 208.136947][ T6984] loop1: detected capacity change from 0 to 1024 [ 208.952431][ T6986] hfsplus: xattr searching failed [ 208.974958][ T28] audit: type=1800 audit(1777907573.075:28): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 209.197811][ T6990] loop2: detected capacity change from 0 to 512 [ 209.210567][ T6990] EXT4-fs: Ignoring removed nobh option [ 209.233773][ T6990] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.276253][ T6990] EXT4-fs (loop2): 1 truncate cleaned up [ 209.293837][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.413279][ T7000] loop1: detected capacity change from 0 to 2364 [ 209.538106][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.684929][ T7007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.721972][ T7007] EXT4-fs (loop2): 1 truncate cleaned up [ 209.766281][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.042280][ T7011] syz.1.338: attempt to access beyond end of device [ 210.042280][ T7011] loop1: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 210.058967][ T28] audit: type=1800 audit(1777907574.145:29): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="file1" dev="loop1" ino=1048632 res=0 errno=0 [ 210.519778][ T7016] exfat: Unknown parameter 'ÿÿÿ' [ 210.772183][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.453177][ T7038] set_capacity_and_notify: 5 callbacks suppressed [ 211.453206][ T7038] loop0: detected capacity change from 0 to 512 [ 211.492175][ T7038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.506644][ T7041] Zero length message leads to an empty skb [ 211.533150][ T7038] EXT4-fs (loop0): 1 truncate cleaned up [ 211.546845][ T7038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.396164][ T7049] loop2: detected capacity change from 0 to 512 [ 212.427457][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.455384][ T7049] EXT4-fs: Ignoring removed bh option [ 212.894563][ T7049] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 213.054717][ T7049] EXT4-fs (loop2): 1 truncate cleaned up [ 213.106102][ T7049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.199955][ T7061] loop3: detected capacity change from 0 to 2364 [ 213.382849][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.492995][ T7066] loop0: detected capacity change from 0 to 2364 [ 213.691686][ T7070] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 213.717606][ T7070] netlink: 17 bytes leftover after parsing attributes in process `syz.2.358'. [ 214.465661][ T7077] loop3: detected capacity change from 0 to 128 [ 214.479184][ T7077] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 214.518349][ T7077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.762447][ T7085] input: syz0 as /devices/virtual/input/input12 [ 214.941799][ T7087] loop1: detected capacity change from 0 to 512 [ 214.953409][ T7087] EXT4-fs: Ignoring removed nobh option [ 214.981068][ T7087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 214.991632][ T7087] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 215.002180][ T7087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.364: invalid indirect mapped block 256 (level 1) [ 215.020700][ T7087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.364: invalid indirect mapped block 2683928664 (level 1) [ 215.040410][ T7087] EXT4-fs (loop1): 1 truncate cleaned up [ 215.054244][ T7087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.169717][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.598039][ T7099] loop2: detected capacity change from 0 to 2364 [ 215.768100][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.889111][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.062547][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.202023][ T7112] loop3: detected capacity change from 0 to 128 [ 216.210146][ T7112] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 216.221816][ T7112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.243337][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.782997][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.804765][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.870609][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.947520][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.955439][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.962848][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.493138][ T7137] loop3: detected capacity change from 0 to 256 [ 217.508323][ T7137] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.519330][ T7137] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 217.564927][ T7137] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 217.785421][ T7144] loop2: detected capacity change from 0 to 1024 [ 217.876147][ T7144] hfsplus: failed to load attributes file [ 218.157381][ T7160] loop3: detected capacity change from 0 to 512 [ 218.160455][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 218.190419][ T7157] loop0: detected capacity change from 0 to 2364 [ 218.200542][ T7160] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.319675][ T7160] EXT4-fs (loop3): 1 truncate cleaned up [ 218.348679][ T7165] loop2: detected capacity change from 0 to 128 [ 218.365621][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.117347][ T5771] Bluetooth: hci3: command tx timeout [ 219.228787][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.355337][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.362527][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.398762][ T7120] bridge_slave_0: entered allmulticast mode [ 219.421770][ T7120] bridge_slave_0: entered promiscuous mode [ 219.545495][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.563719][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.594691][ T7120] bridge_slave_1: entered allmulticast mode [ 219.601960][ T7120] bridge_slave_1: entered promiscuous mode [ 219.638726][ T7180] loop3: detected capacity change from 0 to 2364 [ 219.892044][ T1094] hsr_slave_0: left promiscuous mode [ 219.913607][ T1094] hsr_slave_1: left promiscuous mode [ 219.928422][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.950218][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.003639][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.018709][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.045235][ T1094] bridge_slave_1: left allmulticast mode [ 220.050937][ T1094] bridge_slave_1: left promiscuous mode [ 220.088547][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.132696][ T1094] bridge_slave_0: left allmulticast mode [ 220.154756][ T1094] bridge_slave_0: left promiscuous mode [ 220.170479][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.277090][ T1094] veth1_macvtap: left promiscuous mode [ 220.286357][ T1094] veth0_macvtap: left promiscuous mode [ 220.296324][ T1094] veth1_vlan: left promiscuous mode [ 220.302939][ T1094] veth0_vlan: left promiscuous mode [ 220.824836][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 221.040519][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 221.049275][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.080210][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 221.099251][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.099857][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.122565][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.122877][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.144637][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.153578][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.163550][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.164516][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.183853][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.200059][ T5778] Bluetooth: hci3: command tx timeout [ 221.246728][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 221.256247][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.268195][ T5830] usb 1-1: config 0 descriptor?? [ 221.495705][ T7199] loop3: detected capacity change from 0 to 2364 [ 221.655584][ T5830] usb 1-1: USB disconnect, device number 2 [ 221.689872][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 221.762589][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 221.828041][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.866580][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.132379][ T1094] bond0 (unregistering): Released all slaves [ 222.311435][ T7203] loop3: detected capacity change from 0 to 512 [ 222.313700][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.331829][ T7203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.372528][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.395429][ T7203] EXT4-fs (loop3): 1 truncate cleaned up [ 222.402282][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.503163][ T7206] loop0: detected capacity change from 0 to 512 [ 222.526802][ T7206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 222.677841][ T7206] EXT4-fs (loop0): 1 truncate cleaned up [ 222.682075][ T7120] team0: Port device team_slave_0 added [ 222.761921][ T7206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.223617][ T7120] team0: Port device team_slave_1 added [ 223.268265][ T5771] Bluetooth: hci3: command tx timeout [ 223.401631][ T5771] Bluetooth: hci2: command tx timeout [ 223.764908][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.780266][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.867977][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.891735][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.935398][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.953432][ T7225] loop0: detected capacity change from 0 to 128 [ 225.104986][ T7229] syz.0.399: attempt to access beyond end of device [ 225.104986][ T7229] loop0: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 225.151185][ T28] audit: type=1800 audit(1777907589.095:30): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.399" name="file1" dev="loop0" ino=1048638 res=0 errno=0 [ 225.191023][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.204354][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.236222][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.311674][ T7120] hsr_slave_0: entered promiscuous mode [ 225.328553][ T7120] hsr_slave_1: entered promiscuous mode [ 225.424413][ T5778] Bluetooth: hci2: command tx timeout [ 225.424492][ T5771] Bluetooth: hci3: command tx timeout [ 226.634909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 227.050263][ T1094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.351561][ T1094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.447380][ T7255] loop3: detected capacity change from 0 to 512 [ 227.493060][ T7255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.507040][ T1094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.514369][ T5771] Bluetooth: hci2: command tx timeout [ 227.576989][ T7255] EXT4-fs (loop3): 1 truncate cleaned up [ 227.633598][ T7255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.659871][ T1094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.726485][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 227.902050][ T7265] loop0: detected capacity change from 0 to 2364 [ 228.571990][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.752236][ T7271] loop3: detected capacity change from 0 to 512 [ 228.778594][ T7271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.808942][ T7271] EXT4-fs (loop3): 1 truncate cleaned up [ 228.836552][ T7271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.848531][ T7276] loop0: detected capacity change from 0 to 1024 [ 228.936042][ T7120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.968011][ T7120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.024484][ T7276] hfsplus: invalid catalog max_key_len 715 [ 229.051733][ T7276] hfsplus: failed to load catalog file [ 229.069627][ T7120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.093810][ T7120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.614539][ T5771] Bluetooth: hci2: command tx timeout [ 229.732459][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.849688][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.860590][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.867851][ T7192] bridge_slave_0: entered allmulticast mode [ 229.874777][ T7192] bridge_slave_0: entered promiscuous mode [ 229.887420][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.894616][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.901779][ T7192] bridge_slave_1: entered allmulticast mode [ 229.909933][ T7192] bridge_slave_1: entered promiscuous mode [ 230.127341][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.147236][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.357350][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.451563][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.479089][ T7299] loop3: detected capacity change from 0 to 512 [ 231.503432][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.510595][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.528472][ T7299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.540305][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.547483][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.590364][ T7299] EXT4-fs (loop3): 1 truncate cleaned up [ 231.616207][ T7299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.820421][ T7192] team0: Port device team_slave_0 added [ 231.834193][ T7192] team0: Port device team_slave_1 added [ 232.040653][ T7120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.104018][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.111180][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.168627][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.181961][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.189228][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.216481][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.304168][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.381263][ T7314] loop0: detected capacity change from 0 to 512 [ 232.422761][ T7314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.456721][ T7314] EXT4-fs (loop0): 1 truncate cleaned up [ 232.492113][ T7314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.552598][ T7192] hsr_slave_0: entered promiscuous mode [ 232.560945][ T7192] hsr_slave_1: entered promiscuous mode [ 232.574247][ T7192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.596216][ T7192] Cannot create hsr debugfs directory [ 233.372060][ T7324] loop3: detected capacity change from 0 to 512 [ 233.400443][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.411340][ T7324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.477544][ T1094] hsr_slave_0: left promiscuous mode [ 233.484164][ T7324] EXT4-fs (loop3): 1 truncate cleaned up [ 233.491085][ T1094] hsr_slave_1: left promiscuous mode [ 233.515554][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.522980][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.535620][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.572264][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.664832][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.760023][ T1094] bridge_slave_1: left allmulticast mode [ 233.777336][ T1094] bridge_slave_1: left promiscuous mode [ 233.786876][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.804832][ T1094] bridge_slave_0: left allmulticast mode [ 233.810502][ T1094] bridge_slave_0: left promiscuous mode [ 233.816473][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.398725][ T1094] veth1_macvtap: left promiscuous mode [ 234.410240][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.414483][ T1094] veth0_macvtap: left promiscuous mode [ 234.426914][ T1094] veth1_vlan: left promiscuous mode [ 234.432274][ T1094] veth0_vlan: left promiscuous mode [ 236.267424][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 236.331334][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 236.403742][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.471737][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.738514][ T1094] bond0 (unregistering): Released all slaves [ 236.831554][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.087234][ T7361] loop0: detected capacity change from 0 to 128 [ 237.181685][ T7192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.245525][ T7192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.279005][ T7192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.298655][ T7192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.408800][ T48] kworker/u4:3: attempt to access beyond end of device [ 237.408800][ T48] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 237.529884][ T7374] loop3: detected capacity change from 0 to 512 [ 237.548529][ T7374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.613427][ T7374] EXT4-fs (loop3): 1 truncate cleaned up [ 237.642035][ T7374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.661690][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.718138][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.736555][ T7381] loop0: detected capacity change from 0 to 512 [ 237.758470][ T7120] veth0_vlan: entered promiscuous mode [ 237.786595][ T7381] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.805134][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.812275][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.851716][ T7381] EXT4-fs (loop0): 1 truncate cleaned up [ 237.860334][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.867500][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.936724][ T7381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.977151][ T7120] veth1_vlan: entered promiscuous mode [ 238.702952][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.722739][ T7192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.761956][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.788060][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.979536][ T7120] veth0_macvtap: entered promiscuous mode [ 239.050554][ T7120] veth1_macvtap: entered promiscuous mode [ 239.106348][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.176796][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.207984][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.260896][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.301709][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.045640][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.072408][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.104472][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.123983][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.136466][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.195125][ T7120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.203867][ T7120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.218806][ T7120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.228686][ T7120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.266781][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.453919][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.495825][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.563576][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.591605][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.605891][ T7419] loop0: detected capacity change from 0 to 512 [ 240.640962][ T7419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.713660][ T7419] EXT4-fs (loop0): 1 truncate cleaned up [ 240.736486][ T7419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.450163][ T7432] loop4: detected capacity change from 0 to 512 [ 241.521795][ T7432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.589766][ T7192] veth0_vlan: entered promiscuous mode [ 241.627175][ T7432] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.650435][ T7437] loop3: detected capacity change from 0 to 512 [ 241.653533][ T7192] veth1_vlan: entered promiscuous mode [ 241.666993][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.668445][ T7437] EXT4-fs: Ignoring removed nobh option [ 241.684168][ T7432] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 241.729935][ T7432] EXT4-fs (loop4): 1 truncate cleaned up [ 241.771406][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.791868][ T7192] veth0_macvtap: entered promiscuous mode [ 241.800302][ T7437] ext4: Unknown parameter 'seclabel' [ 241.847411][ T7192] veth1_macvtap: entered promiscuous mode [ 241.879007][ T7442] loop0: detected capacity change from 0 to 512 [ 241.916371][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.928134][ T7442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.941147][ T7437] loop3: detected capacity change from 0 to 1024 [ 241.965522][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.010111][ T7442] EXT4-fs (loop0): 1 truncate cleaned up [ 242.020907][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.049374][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.094423][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.134416][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.219584][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.232607][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.241725][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.787099][ T7447] hfsplus: xattr searching failed [ 242.803346][ T7449] hfsplus: xattr searching failed [ 242.911539][ T28] audit: type=1800 audit(1777907606.905:31): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 242.995939][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.029140][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.054369][ T28] audit: type=1800 audit(1777907606.925:32): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.427" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 243.081294][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.134256][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.160960][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.192370][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.224163][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.262373][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.305810][ T7192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.344101][ T7192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.364496][ T7192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.380149][ T7192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.402451][ T7462] loop0: detected capacity change from 0 to 512 [ 243.683477][ T5850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.730231][ T5850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.656003][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.692984][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.722282][ T7473] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 246.235212][ T7487] loop0: detected capacity change from 0 to 512 [ 246.259406][ T7487] EXT4-fs: Ignoring removed nobh option [ 246.280474][ T7487] ext4: Unknown parameter 'seclabel' [ 246.433125][ T7492] loop5: detected capacity change from 0 to 512 [ 246.553409][ T7492] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 246.672047][ T7492] EXT4-fs (loop5): 1 truncate cleaned up [ 246.891726][ T7492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.559736][ T7502] loop0: detected capacity change from 0 to 512 [ 247.879806][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.335147][ T7516] loop3: detected capacity change from 0 to 512 [ 248.370296][ T7516] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.410812][ T7516] EXT4-fs (loop3): 1 truncate cleaned up [ 248.489726][ T7516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.555321][ T7527] loop0: detected capacity change from 0 to 128 [ 249.043468][ T7533] loop5: detected capacity change from 0 to 128 [ 249.626968][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.836282][ T7537] loop3: detected capacity change from 0 to 512 [ 249.843430][ T7537] EXT4-fs: Ignoring removed nobh option [ 249.849555][ T7537] ext4: Unknown parameter 'seclabel' [ 250.123520][ T28] audit: type=1800 audit(1777907614.235:33): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.448" name="file1" dev="loop5" ino=1048647 res=0 errno=0 [ 250.160034][ T7540] syz.5.448: attempt to access beyond end of device [ 250.160034][ T7540] loop5: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 250.811351][ T7543] loop0: detected capacity change from 0 to 512 [ 250.826337][ T7543] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.933609][ T7543] EXT4-fs (loop0): 1 truncate cleaned up [ 251.669371][ T7543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.840444][ T7556] loop5: detected capacity change from 0 to 512 [ 252.540988][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.733197][ T7570] loop3: detected capacity change from 0 to 512 [ 252.750581][ T7572] netlink: 'syz.0.458': attribute type 30 has an invalid length. [ 252.796749][ T7570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 252.847289][ T7575] loop5: detected capacity change from 0 to 128 [ 252.906751][ T7570] EXT4-fs (loop3): 1 truncate cleaned up [ 252.924581][ T7570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.208403][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.513653][ T28] audit: type=1326 audit(1777907618.625:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.3.462" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1aa19cdd9 code=0x0 [ 254.868418][ T7605] loop5: detected capacity change from 0 to 2364 [ 255.701659][ T7612] loop3: detected capacity change from 0 to 512 [ 255.770400][ T7612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.840880][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847664][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.897411][ T7612] EXT4-fs (loop3): 1 truncate cleaned up [ 255.968616][ T7612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.735667][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.914700][ T7630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.103965][ T7635] loop0: detected capacity change from 0 to 512 [ 257.153244][ T7635] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.624488][ T1191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 257.977455][ T7635] EXT4-fs (loop0): 1 truncate cleaned up [ 258.004029][ T7635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.124408][ T1191] usb 4-1: Using ep0 maxpacket: 8 [ 258.189754][ T1191] usb 4-1: config 0 has no interfaces? [ 258.739425][ T7652] loop4: detected capacity change from 0 to 2364 [ 258.750465][ T1191] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 258.830320][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.831885][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.884970][ T1191] usb 4-1: config 0 descriptor?? [ 259.166775][ T7638] Bluetooth: MGMT ver 1.22 [ 259.173969][ T7638] Bluetooth: hci0: unsupported parameter 2055 [ 259.210871][ T7638] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 259.251260][ T5831] usb 4-1: USB disconnect, device number 2 [ 259.346648][ T7663] loop0: detected capacity change from 0 to 512 [ 259.518779][ T7663] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 260.218601][ T7663] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 260.317921][ T7663] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.476: corrupted inode contents [ 260.478119][ T7663] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #11: comm syz.0.476: mark_inode_dirty error [ 260.545278][ T7663] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.476: invalid indirect mapped block 1 (level 1) [ 260.690722][ T7663] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.476: corrupted inode contents [ 260.710287][ T7663] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 260.832390][ T7663] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.476: corrupted inode contents [ 260.857123][ T7663] EXT4-fs error (device loop0): ext4_truncate:4301: inode #11: comm syz.0.476: mark_inode_dirty error [ 260.895696][ T7663] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 260.989115][ T7663] EXT4-fs (loop0): 1 truncate cleaned up [ 261.067225][ T7663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.303494][ T7693] loop3: detected capacity change from 0 to 2364 [ 261.316114][ T7663] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.476: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 261.494185][ T7663] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.476: path /135/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 261.891665][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.457514][ T7712] loop5: detected capacity change from 0 to 128 [ 262.510732][ T7712] FAT-fs (loop5): bogus number of reserved sectors [ 262.538078][ T7712] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 262.574398][ T7712] FAT-fs (loop5): Can't find a valid FAT filesystem [ 262.658535][ T7710] loop0: detected capacity change from 0 to 2364 [ 262.876254][ T7719] loop5: detected capacity change from 0 to 1024 [ 262.995497][ T7719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.074674][ T7719] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.202689][ T7719] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.492: bg 0: block 112: padding at end of block bitmap is not set [ 263.287863][ T7719] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 263.354912][ T7719] EXT4-fs (loop5): This should not happen!! Data will be lost [ 263.354912][ T7719] [ 263.408655][ T7719] EXT4-fs (loop5): Total free blocks count 0 [ 263.411218][ T7730] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm syz.5.492: lblock 8 mapped to illegal pblock 8 (length 1) [ 263.444425][ T7719] EXT4-fs (loop5): Free/Dirty block details [ 263.450426][ T7719] EXT4-fs (loop5): free_blocks=0 [ 263.463607][ T7728] loop4: detected capacity change from 0 to 1024 [ 263.556436][ T7719] EXT4-fs (loop5): dirty_blocks=64 [ 263.561630][ T7719] EXT4-fs (loop5): Block reservation details [ 263.627008][ T7729] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.492: lblock 0 mapped to illegal pblock 0 (length 4) [ 263.659356][ T7719] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 263.816550][ T7729] EXT4-fs error (device loop5): ext4_ext_remove_space:2940: inode #15: comm syz.5.492: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 263.851550][ T7734] loop3: detected capacity change from 0 to 1024 [ 264.068749][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.420117][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 265.017950][ T7752] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 265.095230][ T7752] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 265.189306][ T7752] syz.4.499 (7752) used greatest stack depth: 20144 bytes left [ 266.548455][ T7783] loop0: detected capacity change from 0 to 256 [ 266.726311][ T7783] loop0: detected capacity change from 256 to 0 [ 266.885652][ T5766] syz-executor: attempt to access beyond end of device [ 266.885652][ T5766] loop0: rw=2049, sector=0, nr_sectors = 4 limit=0 [ 266.964795][ T5766] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 267.345657][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.554430][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 267.565719][ T9] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 267.877615][ T9] usb 6-1: config 0 has no interfaces? [ 267.948732][ T9] usb 6-1: config 0 has no interfaces? [ 268.224773][ T9] usb 6-1: config 0 has no interfaces? [ 268.257816][ T9] usb 6-1: config 0 has no interfaces? [ 268.291424][ T9] usb 6-1: config 0 has no interfaces? [ 268.414047][ T9] usb 6-1: config 0 has no interfaces? [ 268.474736][ T9] usb 6-1: config 0 has no interfaces? [ 268.580828][ T9] usb 6-1: config 0 has no interfaces? [ 268.645130][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.0a [ 268.654212][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=234 [ 268.720943][ T9] usb 6-1: Product: syz [ 268.751855][ T9] usb 6-1: Manufacturer: syz [ 268.764057][ T9] usb 6-1: SerialNumber: syz [ 268.791024][ T7809] loop4: detected capacity change from 0 to 2364 [ 268.795127][ T9] usb 6-1: config 0 descriptor?? [ 268.958132][ T7814] loop0: detected capacity change from 0 to 1024 [ 269.372681][ T5830] usb 6-1: USB disconnect, device number 2 [ 269.484365][ T7822] loop3: detected capacity change from 0 to 2364 [ 271.389989][ T7842] loop0: detected capacity change from 0 to 512 [ 271.516928][ T7842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 271.659669][ T7842] EXT4-fs (loop0): 1 truncate cleaned up [ 271.790198][ T7842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.813711][ T7861] loop4: detected capacity change from 0 to 512 [ 273.849555][ T7861] EXT4-fs: Ignoring removed nobh option [ 273.863336][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.957989][ T7861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.004660][ T7861] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.280867][ T7120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.558189][ T7887] loop0: detected capacity change from 0 to 128 [ 276.329749][ T7901] loop5: detected capacity change from 0 to 512 [ 276.349028][ T7896] loop4: detected capacity change from 0 to 2364 [ 276.410564][ T7901] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.904098][ T7901] EXT4-fs (loop5): 1 truncate cleaned up [ 277.916985][ T7901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.605425][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.625623][ T7917] loop3: detected capacity change from 0 to 512 [ 278.709187][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.058428][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.229433][ T7927] loop5: detected capacity change from 0 to 128 [ 279.467044][ T28] audit: type=1800 audit(1777907643.585:35): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.536" name="file1" dev="loop5" ino=1048650 res=0 errno=0 [ 279.524594][ T7927] syz.5.536: attempt to access beyond end of device [ 279.524594][ T7927] loop5: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 279.806784][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 281.818914][ T7954] capability: warning: `syz.3.542' uses 32-bit capabilities (legacy support in use) [ 282.181397][ T7960] loop3: detected capacity change from 0 to 2048 [ 282.205303][ T7960] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.211764][ T7960] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.296517][ T7963] loop0: detected capacity change from 0 to 1024 [ 282.379927][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.470962][ T7963] loop0: detected capacity change from 1024 to 64 [ 282.518441][ T7960] EXT4-fs (loop3): shut down requested (2) [ 282.531407][ T7969] syz.0.532: attempt to access beyond end of device [ 282.531407][ T7969] loop0: rw=0, sector=288, nr_sectors = 4 limit=64 [ 282.628368][ T7969] Buffer I/O error on dev loop0, logical block 72, async page read [ 282.646532][ T7969] syz.0.532: attempt to access beyond end of device [ 282.646532][ T7969] loop0: rw=0, sector=292, nr_sectors = 4 limit=64 [ 282.706310][ T7969] Buffer I/O error on dev loop0, logical block 73, async page read [ 282.720733][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.901537][ T5766] syz-executor: attempt to access beyond end of device [ 282.901537][ T5766] loop0: rw=2049, sector=1022, nr_sectors = 1 limit=64 [ 282.957986][ T7976] loop3: detected capacity change from 0 to 128 [ 283.038053][ T7980] loop5: detected capacity change from 0 to 512 [ 283.068472][ T7980] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 283.189366][ T28] audit: type=1800 audit(1777907647.305:36): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.545" name="file1" dev="loop3" ino=1048651 res=0 errno=0 [ 283.250097][ T7980] EXT4-fs (loop5): 1 truncate cleaned up [ 283.250881][ T7976] syz.3.545: attempt to access beyond end of device [ 283.250881][ T7976] loop3: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 283.301096][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.366205][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.022766][ T8028] loop0: detected capacity change from 0 to 4096 [ 287.092000][ T8036] loop5: detected capacity change from 0 to 512 [ 287.129653][ T8036] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.188203][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.248055][ T8036] EXT4-fs (loop5): 1 truncate cleaned up [ 287.306062][ T8036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.629199][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.301294][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.302714][ T8053] loop4: detected capacity change from 0 to 16 [ 289.379891][ T8054] loop3: detected capacity change from 0 to 512 [ 289.408496][ T8053] erofs: (device loop4): mounted with root inode @ nid 36. [ 289.431276][ T8054] EXT4-fs: Ignoring removed i_version option [ 289.507018][ T8054] EXT4-fs: Ignoring removed oldalloc option [ 289.514022][ T8053] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 289.538708][ T8054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 289.575059][ T8054] EXT4-fs (loop3): 1 truncate cleaned up [ 289.581952][ T8054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.586159][ T8055] syz.4.558: attempt to access beyond end of device [ 289.586159][ T8055] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 289.776834][ T8055] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 289.821537][ T28] audit: type=1800 audit(1777907653.935:37): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.552" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.136874][ T8068] loop5: detected capacity change from 0 to 128 [ 290.154111][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.250036][ T28] audit: type=1800 audit(1777907654.365:38): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name="file1" dev="loop5" ino=1048652 res=0 errno=0 [ 290.284143][ T8068] syz.5.566: attempt to access beyond end of device [ 290.284143][ T8068] loop5: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 291.162715][ T8073] loop0: detected capacity change from 0 to 512 [ 291.191825][ T8073] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.233863][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.244246][ T8073] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 291.353087][ T8083] syz_tun: entered allmulticast mode [ 291.378058][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.704650][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.935761][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 292.351782][ T5831] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 292.474707][ T5831] usb 6-1: config 0 has no interface number 0 [ 292.564398][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 292.596047][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.655445][ T5831] usb 6-1: Product: syz [ 292.685792][ T5831] usb 6-1: Manufacturer: syz [ 292.721527][ T5831] usb 6-1: SerialNumber: syz [ 292.759054][ T5831] usb 6-1: config 0 descriptor?? [ 293.051729][ T8081] syz_tun: left allmulticast mode [ 293.064685][ T5831] usb 6-1: USB disconnect, device number 3 [ 293.103973][ T8110] loop3: detected capacity change from 0 to 512 [ 293.185769][ T8110] EXT4-fs: Ignoring removed nobh option [ 293.191446][ T8110] ext4: Unknown parameter 'seclabel' [ 293.716073][ T8120] loop0: detected capacity change from 0 to 512 [ 293.998560][ T8120] EXT4-fs: Ignoring removed nobh option [ 294.004261][ T8120] ext4: Unknown parameter 'seclabel' [ 295.594067][ T8148] loop5: detected capacity change from 0 to 128 [ 295.624508][ T5883] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 295.644632][ T5831] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 295.826732][ T5831] usb 4-1: device descriptor read/64, error -71 [ 295.866314][ T5883] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 295.891816][ T5883] usb 1-1: config 0 has no interface number 0 [ 295.910836][ T5883] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.953777][ T5883] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 295.978479][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 295.996920][ T5883] usb 1-1: Manufacturer: syz [ 296.001532][ T5883] usb 1-1: SerialNumber: syz [ 296.044758][ T5883] usb 1-1: config 0 descriptor?? [ 296.114966][ T5831] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 296.294544][ T5831] usb 4-1: device descriptor read/64, error -71 [ 296.456064][ T5831] usb usb4-port1: attempt power cycle [ 296.705727][ T5883] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input13 [ 296.926789][ T5831] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 297.005406][ T5831] usb 4-1: device descriptor read/8, error -71 [ 297.020490][ T5804] usb 1-1: USB disconnect, device number 3 [ 297.294522][ T5831] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 297.335343][ T5831] usb 4-1: device descriptor read/8, error -71 [ 297.509034][ T5831] usb usb4-port1: unable to enumerate USB device [ 299.959721][ T5804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 300.062203][ T8202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.194406][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 300.205503][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.258822][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.291231][ T5804] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.324395][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.361949][ T5804] usb 1-1: config 0 descriptor?? [ 300.385714][ T5804] hub 1-1:0.0: USB hub found [ 300.457663][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.482310][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.490764][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.504895][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.514523][ T5831] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 300.524683][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 300.544777][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.585793][ T5804] hub 1-1:0.0: 1 port detected [ 300.734418][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 300.758539][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.804376][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.852575][ T5831] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.963177][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.097243][ T5831] usb 4-1: config 0 descriptor?? [ 301.193582][ T5804] hub 1-1:0.0: activate --> -90 [ 301.366802][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 301.579572][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.689650][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.720193][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.743246][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.756850][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.777727][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.787465][ T8208] bridge_slave_0: entered allmulticast mode [ 301.799343][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.809829][ T8208] bridge_slave_0: entered promiscuous mode [ 301.831784][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.856936][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.870563][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.899041][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.922088][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.954553][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 301.961561][ T8208] bridge_slave_1: entered allmulticast mode [ 301.961789][ T5831] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 302.007234][ T8208] bridge_slave_1: entered promiscuous mode [ 302.017057][ T8] usb 1-1: USB disconnect, device number 4 [ 302.074534][ T5831] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input14 [ 302.132250][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.182450][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.198508][ T5831] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 302.237635][ T5831] usb 4-1: USB disconnect, device number 7 [ 302.333984][ T8208] team0: Port device team_slave_0 added [ 302.363824][ T8208] team0: Port device team_slave_1 added [ 302.440007][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.442211][ T8244] fido_id[8244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 302.451898][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.511980][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.539986][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.594236][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.625314][ T5778] Bluetooth: hci2: command tx timeout [ 302.644834][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.960486][ T8248] loop0: detected capacity change from 0 to 2364 [ 303.060439][ T8253] syz.3.597 uses obsolete (PF_INET,SOCK_PACKET) [ 303.307506][ T8208] hsr_slave_0: entered promiscuous mode [ 303.412949][ T8208] hsr_slave_1: entered promiscuous mode [ 303.511509][ T8208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.540907][ T8208] Cannot create hsr debugfs directory [ 303.844635][ T8265] loop0: detected capacity change from 0 to 2364 [ 304.764413][ T5778] Bluetooth: hci2: command tx timeout [ 305.866633][ T8282] netlink: 'syz.4.602': attribute type 4 has an invalid length. [ 305.874993][ T8282] netlink: 17 bytes leftover after parsing attributes in process `syz.4.602'. [ 306.026866][ T8288] loop0: detected capacity change from 0 to 512 [ 306.037839][ T8288] EXT4-fs: Ignoring removed nobh option [ 306.052911][ T8288] ext4: Unknown parameter 'seclabel' [ 306.224737][ T8288] loop0: detected capacity change from 0 to 1024 [ 306.286893][ T8208] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.406987][ T8208] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.459945][ T8208] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.513873][ T8208] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.650979][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.718411][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.744419][ T5778] Bluetooth: hci2: command tx timeout [ 307.807176][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.814411][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.842856][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.850003][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.970604][ T28] audit: type=1800 audit(1777907672.085:39): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.603" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 308.594001][ T8325] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 308.609397][ T8324] loop0: detected capacity change from 0 to 512 [ 308.635501][ T8324] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.642518][ T8325] netlink: 17 bytes leftover after parsing attributes in process `syz.4.611'. [ 308.666655][ T8324] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.729659][ T8324] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 308.777839][ T8324] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 308.795429][ T8324] EXT4-fs (loop0): mount failed [ 308.816114][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.723074][ T8348] loop3: detected capacity change from 0 to 2364 [ 309.824523][ T5778] Bluetooth: hci2: command tx timeout [ 310.286762][ T8354] loop0: detected capacity change from 0 to 512 [ 310.355039][ T8208] veth0_vlan: entered promiscuous mode [ 310.383085][ T8208] veth1_vlan: entered promiscuous mode [ 310.480819][ T8208] veth0_macvtap: entered promiscuous mode [ 310.537668][ T8208] veth1_macvtap: entered promiscuous mode [ 310.570979][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.596303][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.616846][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.644366][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.674440][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.691635][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.701801][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.720184][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.732381][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.749741][ T8364] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 310.760268][ T8364] netlink: 17 bytes leftover after parsing attributes in process `syz.3.613'. [ 310.783800][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.832821][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.843126][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.853922][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.864757][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.881078][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.891305][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.902178][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.921131][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.990676][ T8208] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.002644][ T8208] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.021597][ T8208] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.034259][ T8208] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.239405][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.265274][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.352069][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.469039][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.515029][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.539876][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.670134][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.064979][ T8390] loop6: detected capacity change from 0 to 512 [ 313.079344][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.085488][ T8390] EXT4-fs: Ignoring removed nobh option [ 313.130300][ T8390] ext4: Unknown parameter 'seclabel' [ 313.224106][ T8390] loop6: detected capacity change from 0 to 1024 [ 313.312875][ T8395] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 313.320635][ T8395] netlink: 17 bytes leftover after parsing attributes in process `syz.4.622'. [ 314.303744][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.313441][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.324530][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.356207][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.365097][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.372422][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.432346][ T8413] netlink: 'syz.6.625': attribute type 4 has an invalid length. [ 314.440108][ T8413] netlink: 17 bytes leftover after parsing attributes in process `syz.6.625'. [ 316.635044][ T5771] Bluetooth: hci0: command tx timeout [ 316.805385][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.829930][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 316.850247][ T8451] loop3: detected capacity change from 0 to 16 [ 316.934643][ T8451] erofs: (device loop3): mounted with root inode @ nid 36. [ 316.965323][ T8451] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 317.027365][ T8451] syz.3.631: attempt to access beyond end of device [ 317.027365][ T8451] loop3: rw=0, sector=296, nr_sectors = 8 limit=16 [ 317.052175][ T8435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.074601][ T8451] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 317.146562][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 317.170889][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 317.178687][ T9] usb 7-1: can't read configurations, error -71 [ 317.284903][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291247][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.313801][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.321219][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.328437][ T8405] bridge_slave_0: entered allmulticast mode [ 317.335732][ T8405] bridge_slave_0: entered promiscuous mode [ 317.344098][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.351406][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.358997][ T8405] bridge_slave_1: entered allmulticast mode [ 317.367924][ T8405] bridge_slave_1: entered promiscuous mode [ 318.294551][ T48] hsr_slave_0: left promiscuous mode [ 318.366943][ T48] hsr_slave_1: left promiscuous mode [ 318.377914][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.403491][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.423305][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.441921][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.475478][ T48] bridge_slave_1: left allmulticast mode [ 318.481161][ T48] bridge_slave_1: left promiscuous mode [ 318.509414][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.532984][ T48] bridge_slave_0: left allmulticast mode [ 318.559286][ T48] bridge_slave_0: left promiscuous mode [ 318.569561][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.616710][ T48] veth1_macvtap: left promiscuous mode [ 318.622415][ T48] veth0_macvtap: left promiscuous mode [ 318.628511][ T48] veth1_vlan: left promiscuous mode [ 318.634013][ T48] veth0_vlan: left promiscuous mode [ 318.707674][ T5771] Bluetooth: hci0: command tx timeout [ 319.245063][ T48] team0 (unregistering): Port device team_slave_1 removed [ 319.291420][ T48] team0 (unregistering): Port device team_slave_0 removed [ 319.340198][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.383144][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.691535][ T48] bond0 (unregistering): Released all slaves [ 319.784891][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.794034][ T8473] netlink: 'syz.6.634': attribute type 4 has an invalid length. [ 319.801803][ T8473] netlink: 17 bytes leftover after parsing attributes in process `syz.6.634'. [ 319.812554][ T8479] netlink: 'syz.4.630': attribute type 4 has an invalid length. [ 319.823409][ T8479] netlink: 17 bytes leftover after parsing attributes in process `syz.4.630'. [ 319.917221][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.165676][ T5771] Bluetooth: hci0: command tx timeout [ 321.267306][ T8488] netlink: 88 bytes leftover after parsing attributes in process `syz.4.638'. [ 321.306298][ T8405] team0: Port device team_slave_0 added [ 321.335699][ T8405] team0: Port device team_slave_1 added [ 321.341672][ T8495] netlink: 7 bytes leftover after parsing attributes in process `syz.3.641'. [ 321.430571][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.449644][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.493185][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.520332][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.532104][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.595511][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.718026][ T8405] hsr_slave_0: entered promiscuous mode [ 321.836336][ T8405] hsr_slave_1: entered promiscuous mode [ 322.395263][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.435145][ T8405] Cannot create hsr debugfs directory [ 322.441568][ T8509] netlink: 'syz.4.644': attribute type 4 has an invalid length. [ 322.449350][ T8509] netlink: 17 bytes leftover after parsing attributes in process `syz.4.644'. [ 322.458668][ T8513] netlink: 'syz.3.645': attribute type 4 has an invalid length. [ 322.466454][ T8513] netlink: 17 bytes leftover after parsing attributes in process `syz.3.645'. [ 322.756862][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 323.214989][ T5771] Bluetooth: hci0: command tx timeout [ 323.749624][ T8529] pimreg: entered allmulticast mode [ 324.659339][ T8405] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.688760][ T8405] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.710216][ T8405] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.738870][ T8405] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.802725][ T8540] loop6: detected capacity change from 0 to 2364 [ 324.989438][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.056803][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.092812][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.099965][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.155753][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.163023][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.018679][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.752848][ T8576] netlink: 'syz.3.653': attribute type 4 has an invalid length. [ 327.760639][ T8576] netlink: 17 bytes leftover after parsing attributes in process `syz.3.653'. [ 327.772862][ T8575] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 327.780622][ T8575] netlink: 17 bytes leftover after parsing attributes in process `syz.4.654'. [ 328.731572][ T8600] loop6: detected capacity change from 0 to 512 [ 328.780169][ T8600] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 328.818512][ T8405] veth0_vlan: entered promiscuous mode [ 328.842335][ T8600] EXT4-fs (loop6): 1 truncate cleaned up [ 328.949899][ T8610] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 328.957860][ T8610] netlink: 17 bytes leftover after parsing attributes in process `syz.4.662'. [ 329.002895][ T8600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.129323][ T8405] veth1_vlan: entered promiscuous mode [ 329.630691][ T8612] netlink: 'syz.3.663': attribute type 4 has an invalid length. [ 329.638569][ T8612] netlink: 17 bytes leftover after parsing attributes in process `syz.3.663'. [ 330.058013][ T8405] veth0_macvtap: entered promiscuous mode [ 330.094746][ T8405] veth1_macvtap: entered promiscuous mode [ 330.118633][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.157282][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.168524][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.184427][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.199944][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.225844][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.254454][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.288589][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.306935][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.312412][ T8208] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.338044][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.381404][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.401771][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.422395][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.442563][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.469551][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.476043][ T8629] loop6: detected capacity change from 0 to 8 [ 330.489878][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.524938][ T8629] SQUASHFS error: Corrupted symlink [ 330.532240][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.573488][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.614180][ T8405] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.658291][ T8405] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.686761][ T8405] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.716709][ T8405] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.254905][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.262754][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.402262][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.454993][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.381205][ T8648] loop7: detected capacity change from 0 to 512 [ 332.592760][ T8648] EXT4-fs: Ignoring removed nobh option [ 332.664821][ T8648] ext4: Unknown parameter 'seclabel' [ 333.532855][ T8648] loop7: detected capacity change from 0 to 1024 [ 335.231565][ T28] audit: type=1800 audit(335.197:40): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.618" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 336.953561][ T8703] netlink: 'syz.6.672': attribute type 4 has an invalid length. [ 336.961332][ T8703] netlink: 17 bytes leftover after parsing attributes in process `syz.6.672'. [ 337.387541][ T8708] loop7: detected capacity change from 0 to 128 [ 337.585519][ T8708] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 337.704637][ T8708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.917899][ T8727] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 339.940164][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 340.259392][ T8749] netlink: 'syz.4.692': attribute type 4 has an invalid length. [ 340.267149][ T8749] netlink: 17 bytes leftover after parsing attributes in process `syz.4.692'. [ 342.722947][ T8785] IPv6: sit1: Disabled Multicast RS [ 344.126719][ T8797] loop6: detected capacity change from 0 to 16 [ 344.214710][ T8797] erofs: (device loop6): mounted with root inode @ nid 36. [ 344.294634][ T8797] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 344.368266][ T8797] syz.6.700: attempt to access beyond end of device [ 344.368266][ T8797] loop6: rw=0, sector=296, nr_sectors = 8 limit=16 [ 344.447365][ T8797] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 344.526789][ T8808] netlink: 'syz.7.703': attribute type 4 has an invalid length. [ 344.534722][ T8808] netlink: 17 bytes leftover after parsing attributes in process `syz.7.703'. [ 346.245361][ T8827] loop6: detected capacity change from 0 to 512 [ 346.298369][ T8827] EXT4-fs: Ignoring removed nobh option [ 346.384269][ T8827] ext4: Unknown parameter 'seclabel' [ 346.469956][ T8827] loop6: detected capacity change from 0 to 1024 [ 347.650143][ T28] audit: type=1800 audit(347.617:41): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.710" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 347.901750][ T8853] netlink: 'syz.4.713': attribute type 4 has an invalid length. [ 347.909703][ T8853] netlink: 17 bytes leftover after parsing attributes in process `syz.4.713'. [ 352.386315][ T8912] loop6: detected capacity change from 0 to 512 [ 352.424789][ T8912] EXT4-fs: Ignoring removed nobh option [ 352.430468][ T8912] ext4: Unknown parameter 'seclabel' [ 352.461897][ T8916] loop7: detected capacity change from 0 to 512 [ 352.497915][ T8916] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 352.714266][ T8916] EXT4-fs (loop7): 1 truncate cleaned up [ 352.721283][ T8916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.173098][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 355.253447][ T8405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.684783][ T8981] loop7: detected capacity change from 0 to 16 [ 355.747447][ T8981] erofs: (device loop7): mounted with root inode @ nid 36. [ 355.833450][ T8981] erofs: (device loop7): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 356.156032][ T8981] syz.7.742: attempt to access beyond end of device [ 356.156032][ T8981] loop7: rw=0, sector=296, nr_sectors = 8 limit=16 [ 356.420891][ T8981] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 357.052465][ T8998] loop7: detected capacity change from 0 to 512 [ 357.115923][ T8998] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 357.190470][ T9003] loop6: detected capacity change from 0 to 512 [ 357.202874][ T8998] EXT4-fs (loop7): 1 truncate cleaned up [ 357.219601][ T8998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.233079][ T9003] EXT4-fs: Ignoring removed nobh option [ 357.272383][ T9003] ext4: Unknown parameter 'seclabel' [ 357.725761][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 360.039300][ T9038] loop6: detected capacity change from 0 to 128 [ 360.067748][ T8405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.459802][ T9050] netlink: 'syz.4.759': attribute type 4 has an invalid length. [ 361.467593][ T9050] netlink: 17 bytes leftover after parsing attributes in process `syz.4.759'. [ 362.198715][ T28] audit: type=1800 audit(362.157:42): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.756" name="file1" dev="loop6" ino=1048659 res=0 errno=0 [ 362.225446][ T9064] syz.6.756: attempt to access beyond end of device [ 362.225446][ T9064] loop6: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 364.148966][ T9090] loop7: detected capacity change from 0 to 512 [ 364.190643][ T9090] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 364.254609][ T9090] EXT4-fs (loop7): 1 truncate cleaned up [ 364.262550][ T9090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.510371][ T9095] loop6: detected capacity change from 0 to 512 [ 364.590013][ T9095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.742056][ T8208] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.083825][ T9112] netlink: 'syz.6.769': attribute type 4 has an invalid length. [ 366.091655][ T9112] netlink: 17 bytes leftover after parsing attributes in process `syz.6.769'. [ 366.524967][ T8405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.517690][ T9128] mmap: syz.7.774 (9128): VmData 37490688 exceed data ulimit 3789. Update limits or use boot option ignore_rlimit_data. [ 372.705071][ T9198] netlink: 'syz.6.781': attribute type 4 has an invalid length. [ 372.712807][ T9198] netlink: 17 bytes leftover after parsing attributes in process `syz.6.781'. [ 375.169293][ T9220] loop6: detected capacity change from 0 to 16 [ 375.323176][ T9220] erofs: (device loop6): mounted with root inode @ nid 36. [ 375.430872][ T28] audit: type=1800 audit(375.387:43): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.794" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 378.716966][ T5831] hid-generic 0005:0006:5508.0002: item fetching failed at offset 3/5 [ 378.726038][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.732354][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.927100][ T5831] hid-generic: probe of 0005:0006:5508.0002 failed with error -22 [ 379.063602][ T6112] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.491011][ T9285] Bluetooth: MGMT ver 1.22 [ 379.923498][ T6112] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.087758][ T9291] loop6: detected capacity change from 0 to 512 [ 380.101096][ T9291] EXT4-fs: Ignoring removed nobh option [ 380.161520][ T6112] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.174482][ T9291] ext4: Unknown parameter 'seclabel' [ 380.258961][ T9088] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.335004][ T9291] loop6: detected capacity change from 0 to 1024 [ 380.362493][ T9088] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.453147][ T6112] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.177373][ T9310] loop7: detected capacity change from 0 to 16 [ 381.292601][ T9310] erofs: (device loop7): mounted with root inode @ nid 36. [ 382.126556][ T28] audit: type=1800 audit(382.027:44): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.809" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 382.276706][ T9326] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 385.729674][ T9356] loop7: detected capacity change from 0 to 1024 [ 387.101541][ T9370] loop2: detected capacity change from 0 to 7 [ 387.156924][ T9370] loop2: [ 387.162027][ T9370] loop2: partition table partially beyond EOD, truncated [ 387.618346][ T9381] loop7: detected capacity change from 0 to 512 [ 387.685453][ T9381] ext4: Unknown parameter 'nouser_xattr' [ 387.887841][ T6112] hsr_slave_0: left promiscuous mode [ 388.034423][ T6112] hsr_slave_1: left promiscuous mode [ 388.084624][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.134507][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.188059][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.248176][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.305465][ T6112] bridge_slave_1: left allmulticast mode [ 388.311144][ T6112] bridge_slave_1: left promiscuous mode [ 388.384700][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.525284][ T6112] bridge_slave_0: left allmulticast mode [ 388.551806][ T6112] bridge_slave_0: left promiscuous mode [ 388.581487][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.638716][ T9088] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.783527][ T9376] netlink: 'syz.6.832': attribute type 1 has an invalid length. [ 388.975775][ T6112] veth1_macvtap: left promiscuous mode [ 388.983940][ T6112] veth0_macvtap: left promiscuous mode [ 389.014719][ T6112] veth1_vlan: left promiscuous mode [ 389.014833][ T6112] veth0_vlan: left promiscuous mode [ 389.486244][ T9405] input: syz1 as /devices/virtual/input/input22 [ 390.384679][ T9422] loop7: detected capacity change from 0 to 1024 [ 390.431568][ T9422] EXT4-fs: Ignoring removed orlov option [ 390.471852][ T9422] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 392.518188][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 392.621333][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 392.861157][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.997030][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.017572][ T6112] bond0 (unregistering): Released all slaves [ 395.899197][ T9490] loop7: detected capacity change from 0 to 2364 [ 397.566470][ T9511] tap0: tun_chr_ioctl cmd 1074025677 [ 397.584770][ T9511] tap0: linktype set to 820 [ 397.705642][ T9517] loop6: detected capacity change from 0 to 16 [ 397.742643][ T9517] erofs: (device loop6): mounted with root inode @ nid 36. [ 397.794885][ T9517] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 426.944403][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 440.154613][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.160955][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.814322][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 502.821308][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9519/1:b..l [ 502.829547][ C1] rcu: (detected by 1, t=10502 jiffies, g=34757, q=199 ncpus=2) [ 502.837250][ C1] task:syz.7.875 state:R running task stack:26792 pid:9519 ppid:8405 flags:0x00004000 [ 502.848684][ C1] Call Trace: [ 502.851956][ C1] [ 502.854873][ C1] __schedule+0x1553/0x45a0 [ 502.859377][ C1] ? stack_trace_snprint+0xa0/0xf0 [ 502.864483][ C1] ? asan.module_dtor+0x20/0x20 [ 502.869346][ C1] ? mark_lock+0x94/0x320 [ 502.873660][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 502.879625][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 502.884891][ C1] preempt_schedule_irq+0xbf/0x150 [ 502.889991][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 502.895693][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 502.901480][ C1] irqentry_exit+0x67/0x70 [ 502.905877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 502.911842][ C1] RIP: 0010:mt_validate+0xb59/0x4400 [ 502.917115][ C1] Code: 89 e6 e8 ba 61 13 f7 48 89 5c 24 40 48 8d 83 80 b6 e9 8b 48 89 44 24 18 c7 44 24 28 01 00 00 00 4c 89 6c 24 50 45 31 f6 31 db <4c> 89 64 24 10 41 83 fc 03 76 7a 48 c7 c7 40 f3 72 8e 48 8b 74 24 [ 502.936701][ C1] RSP: 0018:ffffc90004c4f7e0 EFLAGS: 00000246 [ 502.942749][ C1] RAX: ffffffff8be9b683 RBX: 0000000000000000 RCX: 0000000000000000 [ 502.950700][ C1] RDX: ffff888064dc3c00 RSI: 0000000000000003 RDI: 0000000000000004 [ 502.958652][ C1] RBP: ffffc90004c4f990 R08: ffff888064dc3c00 R09: 0000000000000003 [ 502.966604][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 502.974556][ C1] R13: ffff8880265c2e08 R14: 0000000000000000 R15: dffffc0000000000 [ 502.982531][ C1] ? mt_validate+0x114/0x4400 [ 502.987194][ C1] ? mt_cache_shrink+0x20/0x20 [ 502.991945][ C1] ? perf_event_namespaces_output+0x650/0x650 [ 502.997998][ C1] validate_mm+0xc6/0x450 [ 503.002309][ C1] ? mas_nomem+0x1e0/0x1e0 [ 503.006706][ C1] ? down_write+0x16e/0x200 [ 503.011187][ C1] ? vm_stat_account+0x120/0x120 [ 503.016114][ C1] ? vma_set_page_prot+0x12e/0x3e0 [ 503.021211][ C1] mmap_region+0xe8d/0x2000 [ 503.025699][ C1] ? count_memcg_event_mm+0x8e/0x3c0 [ 503.030992][ C1] ? file_mmap_ok+0x170/0x170 [ 503.035655][ C1] ? cap_mmap_addr+0x169/0x2d0 [ 503.040405][ C1] do_mmap+0x92c/0x10a0 [ 503.044548][ C1] ? mlock_future_ok+0xf0/0xf0 [ 503.049293][ C1] ? down_write+0x200/0x200 [ 503.053779][ C1] vm_mmap_pgoff+0x1c4/0x3f0 [ 503.058354][ C1] ? account_locked_vm+0x210/0x210 [ 503.063446][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 503.068282][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 503.073023][ C1] do_syscall_64+0x55/0xa0 [ 503.077420][ C1] ? clear_bhb_loop+0x40/0x90 [ 503.082079][ C1] ? clear_bhb_loop+0x40/0x90 [ 503.086736][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.092635][ C1] RIP: 0033:0x7f4247b9cb42 [ 503.097039][ C1] RSP: 002b:00007ffe6f412c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 503.105439][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4247b9cb42 [ 503.113400][ C1] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 503.121363][ C1] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 503.129322][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe6f412d70 [ 503.137296][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 503.145261][ C1] [ 503.148263][ C1] rcu: rcu_preempt kthread starved for 10325 jiffies! g34757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 503.159435][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 503.169388][ C1] rcu: RCU grace-period kthread stack dump: [ 503.175257][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 503.186016][ C1] Call Trace: [ 503.189278][ C1] [ 503.192196][ C1] __schedule+0x1553/0x45a0 [ 503.196701][ C1] ? asan.module_dtor+0x20/0x20 [ 503.201537][ C1] ? enqueue_timer+0x23d/0x550 [ 503.206284][ C1] ? __mod_timer+0x984/0xdb0 [ 503.210862][ C1] schedule+0xbd/0x170 [ 503.214917][ C1] schedule_timeout+0x188/0x2d0 [ 503.219771][ C1] ? console_conditional_schedule+0x40/0x40 [ 503.225653][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 503.231529][ C1] ? update_process_times+0x1b0/0x1b0 [ 503.236888][ C1] ? prepare_to_swait_event+0x339/0x360 [ 503.242422][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 503.247262][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 503.253395][ C1] ? rcu_gp_init+0x1560/0x1560 [ 503.258138][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 503.262970][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.268151][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 503.273332][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 503.277933][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 503.283025][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 503.287948][ C1] ? __kthread_parkme+0x162/0x1c0 [ 503.292954][ C1] kthread+0x2fa/0x390 [ 503.297022][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 503.302112][ C1] ? kthread_blkcg+0xd0/0xd0 [ 503.306682][ C1] ret_from_fork+0x48/0x80 [ 503.311079][ C1] ? kthread_blkcg+0xd0/0xd0 [ 503.315650][ C1] ret_from_fork_asm+0x11/0x20 [ 503.320406][ C1] [ 503.323412][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 503.329712][ C1] Sending NMI from CPU 1 to CPUs 0: [ 503.334908][ C0] NMI backtrace for cpu 0 [ 503.334933][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 503.334947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.334956][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 503.334979][ C0] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 503.334992][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 503.335005][ C0] RAX: b95ba39b06bdfb00 RBX: ffffffff8162a8f1 RCX: b95ba39b06bdfb00 [ 503.335017][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 503.335027][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 503.335038][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 503.335049][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 503.335060][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 503.335072][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.335083][ C0] CR2: 00007fc4249f37e8 CR3: 000000002f2da000 CR4: 00000000003506f0 [ 503.335097][ C0] Call Trace: [ 503.335102][ C0] [ 503.335107][ C0] default_idle+0x13/0x20 [ 503.335125][ C0] default_idle_call+0x6c/0xa0 [ 503.335143][ C0] do_idle+0x221/0x590 [ 503.335162][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 503.335179][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 503.335205][ C0] cpu_startup_entry+0x43/0x60 [ 503.335222][ C0] rest_init+0x2e2/0x300 [ 503.335239][ C0] ? time_init+0x40/0x40 [ 503.335256][ C0] arch_call_rest_init+0xe/0x10 [ 503.335273][ C0] start_kernel+0x459/0x4e0 [ 503.335292][ C0] x86_64_start_reservations+0x2a/0x30 [ 503.335309][ C0] x86_64_start_kernel+0x60/0x60 [ 503.335323][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 503.335350][ C0]