last executing test programs: 9.700895407s ago: executing program 1 (id=747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffca, &(0x7f00000015c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xfc}}]}, 0x24}}, 0x0) 9.500425933s ago: executing program 1 (id=749): mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0) 9.319508348s ago: executing program 1 (id=755): mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) openat(r7, &(0x7f000000c380)='./file0\x00', 0x1d5046, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a0001f600000000000000000a008000", @ANYRES32=r11, @ANYBLOB="fdffffff"], 0x1c}}, 0x0) socket$inet6(0xa, 0x80803, 0x88) r12 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r12, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000200000000ac39a2d0000000"], 0x10}}, 0x0) 7.505515537s ago: executing program 4 (id=765): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0xff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x9fd, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x6, 0x9, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r4, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x8}}) 6.710127751s ago: executing program 3 (id=770): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {@order_strict}, {@norecovery}, {@norecovery}, {@discard}, {}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 6.011652928s ago: executing program 3 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb88a800008100000008060000004b39a6872fdd240006000000aaaaaaaaaa00aaaaaaaaaaaa"], 0x0) 4.875320921s ago: executing program 3 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) unshare(0xc040400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0xc, 0x2}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x68}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000000100)={[{@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@utf8}, {@utf8}]}, 0x2, 0x217, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xfea7) 4.744492242s ago: executing program 3 (id=774): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0x0, 0x1) r1 = getpid() syz_pidfd_open(0x0, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) r3 = dup2(r2, r2) openat$cgroup_int(r3, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x67fd, &(0x7f0000000100), 0x0, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) getpid() openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x12ac, &(0x7f0000000200)={@local, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x126e, 0x2b, 0x0, @private2, @local, {[@fragment={0x89, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x67}, @srh={0x3a, 0x8, 0x4, 0x4, 0x5, 0x0, 0x7, [@mcast1, @local, @local, @loopback]}, @srh={0x88, 0x12, 0x4, 0x9, 0xc, 0x28, 0x0, [@loopback, @remote, @rand_addr=' \x01\x00', @private1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private0]}, @srh={0x16, 0xa, 0x4, 0x5, 0x0, 0x0, 0x1000, [@initdev={0xfe, 0x88, '\x00', 0x7f, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x67, 0xa, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x8, [0x6ea, 0xc, 0x2, 0x28, 0x3, 0x9, 0xfffffffffffffffc, 0x709e, 0x4]}}]}, @fragment={0x14, 0x0, 0x4, 0x1, 0x0, 0x15, 0x68}, @dstopts={0x8a, 0x206, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0xf, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x9a}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x43}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @mcast1}]}], {0x0, 0x0, 0x86, 0x0, @opaque="502a5965c41a436bad5670a2fb6c8ee99c9e1d1a6207447ae313a91817dd62005474ef44f728e954e9cd0063e67661991c31d2ffb646a7d022a2a22f57b5be738668d7b37fa17144b29cb014b1614c28b07bd6f8d4c3625df98fe05340f73a333bf7adfe5e5bfb27e58df37c981fd6643162f5214b5a3ed0bb744e59df08"}}}}}}, 0x0) 4.583792205s ago: executing program 1 (id=776): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0xc4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x151}, 0x24000004) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0xfffffffb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000009000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}}, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getxattr(0x0, 0x0, 0x0, 0x0) close(r4) 4.328186366s ago: executing program 2 (id=778): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@grpquota}, {@nolazytime}, {@dioread_lock}, {@norecovery}, {@errors_remount}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x80}}, {@usrquota}, {@noauto_da_alloc}]}, 0x5, 0x579, &(0x7f00000007c0)="$eJzs3d9rW1UcAPDvTdP96nQdjKE+aGEPTubStfXHBB/mo+hwoO8ztFkZTZfRpGOtA7cH9+KLDEHEgfgH+O7j2D/gXzHQwZBR9MGHVW5606VL0p+ZzZrPB+56zr1n95xzzz0n5+QmJIC+NZL+k4t4NSK+SyKONB3LR3ZwZCXd0uMbk+mWxPLy538lkWT7GumT7O9QFnklIu5/E3Eq15pvdWFxplgul+ay+Ght9upodWHx9OXZ4nRpunRlfGLi7LsT4x+8/17X6vrWhX9+/Ozex2e/PbH0w68Pj95J4lwczo4112MHbjZHRmIkuyaDce6ZhGNdyKyXJLtdALZlIOvng5GOAUdiIOv1wN73dUQsA30q0f+hTzXmAY21fZfWwS+MRx+tLIBa659feW8kDtTXRoeWkjUro3S9O9yF/NM8fvvz7p10i+69DwGwoZu3IuJMPt86/iXZ+Ld9ZzaR5tk8Njv+eb8Rdu5eOv95u938J7c6/4k285+hNn13O1bPcSD729L/cw+7kE1H6fzvw7bz39WHVsMDWeyl+pxvMLl0uVxKx7aXI+JkDO5P4+s9zzm79GB1nh33j6w51jz/S7c0/8ZcMCvHw/z+teebKtaKO6545tGtiNfazn+T1fZP2rR/ej0ubDKP46W7r3c6tnH9n6/lXyLebNv+T19hkvWfT47W74fRxl3R6u/bx3/vlP9u1z9t/0Pr1384aX5eW916Hj8f+LfU6dh27/99yRf18L5s3/VirTY3FrEv+bR1//jT/9uIN9Kn9T95Yv3xr939fzAivtxk/W8fu92c9EnTsrsn2n9qS+2/9cCDT776qVP+m2v/d+qhk9me+vi3wQRwbSkaLy6tBdz+lQMAAAAAAIDek4uIw5HkCqvhXK5QWPl8x7E4lCtXqrVTlyrzV6ai/l3Z4RjMNZ50DzV9HmIs+zxsIz7+THwiIo5GxPcDB+vxwmSlPLXblQcAAAAAAAAAAAAAAAAAAIAeMdTh+/+pPwZ2u3TAc+cnv6F/PdkoQTd+6QnoSV7/oX/p/9C/9H/oX/o/9C/9H/qX/g/9S/+H/qX/AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddOH8+3ZaXHt+YTONT1xbmZyrXTk+VqjOF2fnJwmRl7mphulKZLpcKk5XZjc5XrlSujo3H/PXRWqlaG60uLF6crcxfqV28PFucLl0sDf4vtQIAAAAAAAAAAAAAAAAAAIAXS3VhcaZYLpfmdhZI8hHdOM9eDSzHnr0++d4oRq8G3oiIHijG1gO7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BQAA//+8czXk") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x200) 4.120819193s ago: executing program 0 (id=779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x83, &(0x7f0000000280)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000140)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x6, 0x0, {0xfffd, 0x9}, {0x0, 0xfe}, @ramp={0x0, 0x1, {0x0, 0xa6c8, 0x5, 0x5}}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000080)={@private0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="9b050000f56c88adf82d2422b1aea8ccd74d5100000000100095000000000000007efedee91b4b837debb5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x12}, 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x3f, 0x38, 0x0, 0x0, 0xff, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0x1b, 0x48, [@remote, @broadcast, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @cipso={0x86, 0x6}]}}}}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x3, &(0x7f00000001c0)='\x00\x9b\x88\xf3T\x9f;!e\xa3\xcc\x93v\xc3\xca\xa1\xe3\xdc\x8fr\xdb\xaa\xeb\xfe5\a\x8b\x97\xb4\x03\x95\x88\xe2K\xec\xa3\xb7\xb6\xcf\'\xca%\x00\xca\xe0\x92t\x87D\x93\xf2\x13\xfc\xdd\xee\xbbR\xb2\x8b\xf5\xf2\x0ec}m\xb9vY.\x12\xb6\xd4\xc3K\xe9\x14\xcb4\x11\xb6\xb5\x8ck\x1e\x9as.\xab\xf0Q\x1c\x98\x89\xe6\xa9\xe5\x832\xd2\x81(\x87\xd1\b\xbb\xfc\x9dF\xd8C,\xd2\xb6\xe3{i\xb0\xa5\xc0\x1d\xb8FX\xe8\xc34\x99\xa4\x93\xaf\n\xae\xfc\xd6\x02\x01-s\xb2\xd9)\xa3$\xab\xa6\xd7q\xcd\xf4\xf8J\xd9\xd7\xba\xc9VGB\x85\xb7\x14~\x1d\x7f\xc6Rs\xaf:\xbaj\x84\x83\xb8\xcaV\xb1\xbdin\fx\xcb\xe2\xf4[\xa7C\xe8\x9a\xf4\x15\xc3\\:#+\xafw\x87\xa8)\xe1\xb7\x1c;\x11\x9dL\xaa\xc66EX\xcc7\x1eG\xe5bz\xd0\xdd\xbd\xcf\xba\x1e\x97F\x0f', 0x0, 0x0) 4.044663389s ago: executing program 4 (id=781): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x20) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 3.739959024s ago: executing program 2 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b00000000009500000000000005a9180fad4db1fc11018f8a52680ff4e4306b07aa7898d361d92046b7cb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0xd, 0x0, 0x0, @prog_id=r9}, 0x20) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2e, r7}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x29) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x8, [{{@in=@empty}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x3) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a8"], 0xfdef) 3.739575994s ago: executing program 4 (id=784): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"a2933d8266971a69dcdb7f2225c5c048"}}}}, 0x118) 3.712113486s ago: executing program 4 (id=785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@mode}, {@uid={'uid', 0x3d, 0xee01}}]}) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 3.497765154s ago: executing program 0 (id=786): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x11, &(0x7f0000000740)=ANY=[], 0x5000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/93, 0x18) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) getdents(r4, &(0x7f00000009c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(r5, &(0x7f0000000200), 0xfdef) accept$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0, 0x2}}, 0x0) getdents(r0, &(0x7f0000000080)=""/50, 0x32) getdents(r0, 0xffffffffffffffff, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x228, 0x228, 0x0, 0x228, 0x3e8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4a8, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3e8}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e109"}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 3.353688136s ago: executing program 2 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) unshare(0xc040400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0xc, 0x2}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x68}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000000100)={[{@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@utf8}, {@utf8}]}, 0x2, 0x217, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xfea7) 3.232925795s ago: executing program 4 (id=788): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = epoll_create(0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000000c0)={0x40000004}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 3.151033492s ago: executing program 0 (id=789): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x2, 0xc04}, 0x48) 3.077552458s ago: executing program 2 (id=790): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x10400) read$FUSE(r0, &(0x7f000000bbc0)={0x2020}, 0x2020) 2.868166705s ago: executing program 0 (id=791): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818, &(0x7f0000000140)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x8}}, {@bh, 0x0}, {@noauto_da_alloc}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x9d}}, {@block_validity}, {}, {@noinit_itable}, {@noblock_validity}, {@noauto_da_alloc}, {@oldalloc}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@audit}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}], 0x2c}, 0x0, 0x4f9, &(0x7f0000000a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04be776ee9c0ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8ceeaee13ddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542f687", @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRES64], 0x1, 0x1cf, &(0x7f0000000fc0)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.667688632s ago: executing program 2 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_script(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x77}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0xfffffffffffffece) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r7, 0x2000000, 0x19, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0x1}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x0) 2.612911746s ago: executing program 4 (id=793): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername(r5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000580a740714e6e8886cbcd495088f0200000000000000000000010000000000009964128d"], 0x0, 0x2a}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r6, 0x38, 0x0}, 0x10) listen(0xffffffffffffffff, 0x0) r7 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xb0000000}) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r8, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x0, 0x0) 2.044296883s ago: executing program 2 (id=795): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) ftruncate(r0, 0x3af001) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f0000000340)='./file0\x00') 2.012163475s ago: executing program 0 (id=796): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000840)={[{@noblock_validity}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") 1.943632441s ago: executing program 1 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f0000000280)=r4}, 0x17) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x749c}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x3, &(0x7f00000006c0)={0x0, 0x2, 0x3ff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000600)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='jbd2_end_commit\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r10, @ANYBLOB="0106000000000400000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080005"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000040000000f000000180007800800020001"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x20) 852.80186ms ago: executing program 1 (id=798): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000020040)=ANY=[], 0x0, 0x6a7, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) alarm(0x3ce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a40)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), &(0x7f0000000b40)=@v2={0x0, 0x1, 0x5, 0xff, 0x6, "c5a45858d662"}, 0xf, 0x6) alarm(0x0) 852.57131ms ago: executing program 3 (id=799): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_dev$vbi(&(0x7f0000006480), 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x2e}], 0x10000000000000bf, 0x0, 0x0, 0x8100000}, 0x8800) recvmsg$kcm(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x101}], 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x13}}], 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) poll(&(0x7f0000000100)=[{r5}], 0x1, 0x1ff) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x0, r5}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/67, 0x43}], 0x1, 0x0, 0x0) pread64(r7, &(0x7f0000000180)=""/148, 0x94, 0xa02) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 851.15259ms ago: executing program 0 (id=807): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {@order_strict}, {@norecovery}, {@norecovery}, {@discard}, {}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 3 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.646098][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.660138][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.677997][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.688191][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.698736][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.708686][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.719320][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.730498][ T3948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.763547][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.776079][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.803560][ T3948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.812550][ T3948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.822163][ T3948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.831739][ T3948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856739][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.867876][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.876766][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.878902][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.893447][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.914800][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.925973][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.936180][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.946825][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.961484][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.972491][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.986274][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.001996][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.013240][ T3950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.027212][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.041492][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.050403][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.088495][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.103263][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.113425][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.124074][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.137063][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.148647][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.158531][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.169467][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.180912][ T3950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.196930][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.206005][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.225372][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.226701][ T3950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.237960][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.252986][ T3950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.261824][ T3950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.270879][ T3950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.291588][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.321748][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.335329][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.375241][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.417279][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.445544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.498861][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.517823][ T4007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.565545][ T4007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.615670][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.680088][ T4007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.701958][ T4007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.747922][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.757846][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.766502][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.778730][ T4034] input: syz1 as /devices/virtual/input/input6 [ 64.823037][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.869299][ T3931] Bluetooth: hci3: command 0x0419 tx timeout [ 64.893632][ T3931] Bluetooth: hci2: command 0x0419 tx timeout [ 64.927067][ T3931] Bluetooth: hci1: command 0x0419 tx timeout [ 64.939808][ T3964] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.959232][ T3931] Bluetooth: hci4: command 0x0419 tx timeout [ 65.118132][ T3931] Bluetooth: hci0: command 0x0419 tx timeout [ 65.197100][ T3964] usb 5-1: Using ep0 maxpacket: 8 [ 65.202778][ T1075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.338554][ T3964] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 65.357847][ T3964] usb 5-1: config 0 has no interface number 0 [ 65.393986][ T4065] loop3: detected capacity change from 0 to 128 [ 65.452651][ T4065] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 65.527546][ T3964] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 65.549509][ T26] audit: type=1804 audit(1723079247.093:2): pid=4065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.337" name="/newroot/5/file0/file0" dev="loop3" ino=1048624 res=1 errno=0 [ 65.571865][ T3964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.588057][ T1075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.599460][ T3964] usb 5-1: Product: syz [ 65.606197][ T3964] usb 5-1: Manufacturer: syz [ 65.614924][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 65.628758][ T3964] usb 5-1: SerialNumber: syz [ 65.648808][ T3964] usb 5-1: config 0 descriptor?? [ 65.655580][ T1075] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 65.689415][ T1075] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 65.720672][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.753154][ T1075] usb 1-1: config 0 descriptor?? [ 65.850508][ T4077] netlink: 'syz.1.342': attribute type 7 has an invalid length. [ 65.858727][ T4077] netlink: 'syz.1.342': attribute type 39 has an invalid length. [ 65.867783][ T4077] netlink: 'syz.1.342': attribute type 7 has an invalid length. [ 65.875732][ T4077] netlink: 'syz.1.342': attribute type 39 has an invalid length. [ 66.538840][ T7] usb 1-1: USB disconnect, device number 2 [ 66.570709][ T3964] usb 5-1: USB disconnect, device number 2 [ 66.695471][ T4007] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 67.119417][ T4107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.352'. [ 67.213312][ T4111] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.230298][ T4113] tmpfs: Bad value for 'mpol' [ 67.586183][ T4123] gfs2: gfs2 mount does not exist [ 67.600630][ T4123] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.354'. [ 68.354827][ T4133] autofs4:pid:4133:autofs_fill_super: pipe file descriptor does not contain proper ops [ 68.369418][ T4137] loop4: detected capacity change from 0 to 64 [ 68.456045][ T4137] hfs: unable to locate alternate MDB [ 68.462296][ T4137] hfs: continuing without an alternate MDB [ 68.694127][ T4147] netlink: 76 bytes leftover after parsing attributes in process `syz.0.368'. [ 68.954691][ T26] audit: type=1107 audit(1723079250.493:3): pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 68.980123][ T4168] Zero length message leads to an empty skb [ 69.179805][ T4178] syz.2.379 uses obsolete (PF_INET,SOCK_PACKET) [ 69.289115][ T4185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.382'. [ 69.300185][ T4185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'. [ 69.328589][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.587960][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 69.647469][ T3933] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.666140][ T4199] binder_alloc: 4198: binder_alloc_buf size 8 failed, no address space [ 69.682231][ T4199] binder_alloc: allocated: 8192 (num: 1 largest: 8192), free: 0 (num: 0 largest: 0) [ 69.717326][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.730897][ T4201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 69.736456][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.747149][ T4201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 69.763094][ T4201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.389'. [ 69.815061][ T4203] loop3: detected capacity change from 0 to 512 [ 69.907216][ T13] usb 5-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 69.933299][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.942664][ T13] usb 5-1: Product: syz [ 69.948021][ T13] usb 5-1: Manufacturer: syz [ 69.952739][ T13] usb 5-1: SerialNumber: syz [ 69.961643][ T13] usb 5-1: config 0 descriptor?? [ 69.979396][ T4205] loop3: detected capacity change from 0 to 256 [ 69.999644][ T13] usb-storage 5-1:0.0: USB Mass Storage device detected [ 70.032943][ T26] audit: type=1800 audit(1723079251.573:4): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.391" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 70.054209][ T3933] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 70.119742][ T4205] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 70.167699][ T3933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.181763][ T3933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.190135][ T3933] usb 1-1: SerialNumber: syz [ 70.244750][ T13] usb 5-1: USB disconnect, device number 3 [ 70.269285][ T3933] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 70.561618][ T4224] loop2: detected capacity change from 0 to 164 [ 70.845109][ T4224] rock: directory entry would overflow storage [ 70.851697][ T4224] rock: sig=0x4f50, size=4, remaining=3 [ 70.857407][ T4224] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.279552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 71.288634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.299146][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.305829][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.337810][ T4220] loop6: detected capacity change from 0 to 7 [ 71.401005][ T4220] Dev loop6: unable to read RDB block 7 [ 71.423068][ T4220] loop6: unable to read partition table [ 71.593765][ T4220] loop6: partition table beyond EOD, truncated [ 71.616794][ T4220] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 71.616794][ T4220] ) failed (rc=-5) [ 72.454763][ T4238] loop0: detected capacity change from 0 to 2048 [ 72.491480][ T4242] netlink: 'syz.4.402': attribute type 9 has an invalid length. [ 72.533472][ T4242] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.402'. [ 72.646690][ T4238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.817207][ T3933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.959582][ T4260] tmpfs: Unknown parameter 'hge' [ 72.988509][ T4268] block nbd3: shutting down sockets [ 73.058355][ T4265] loop0: detected capacity change from 0 to 2048 [ 73.186897][ T4260] capability: warning: `syz.2.411' uses 32-bit capabilities (legacy support in use) [ 73.247327][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.297065][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.306861][ T3933] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 73.370745][ T3933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.404336][ T3933] usb 2-1: config 0 descriptor?? [ 73.631683][ T4282] loop2: detected capacity change from 0 to 256 [ 73.725653][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'. [ 73.920442][ T4282] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 73.996363][ T4288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.042958][ T4295] loop4: detected capacity change from 0 to 8 [ 74.073987][ T3933] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 74.093416][ T3933] logitech 0003:046D:C294.0001: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 74.105256][ T3933] logitech 0003:046D:C294.0001: no inputs found [ 74.153506][ T4295] SQUASHFS error: xz decompression failed, data probably corrupt [ 74.207991][ T4295] SQUASHFS error: Failed to read block 0x108: -5 [ 74.215198][ T4295] SQUASHFS error: Unable to read metadata cache entry [106] [ 74.251805][ T4295] SQUASHFS error: Unable to read inode 0x0 [ 74.374884][ T3933] usb 2-1: USB disconnect, device number 2 [ 74.763645][ T4315] loop2: detected capacity change from 0 to 128 [ 74.791436][ T4315] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 75.111053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.120331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.602797][ T26] audit: type=1804 audit(1723079257.143:5): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.432" name="/newroot/33/file0/file0" dev="loop2" ino=1048629 res=1 errno=0 [ 76.207563][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.215151][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.249473][ T4332] dlm: no locking on control device [ 76.255457][ T4330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.336336][ T4335] loop2: detected capacity change from 0 to 256 [ 76.370085][ T4337] capability: warning: `syz.1.438' uses deprecated v2 capabilities in a way that may be insecure [ 76.392419][ T1078] cfg80211: failed to load regulatory.db [ 76.488247][ T26] audit: type=1800 audit(1723079258.033:6): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.437" name="file1" dev="loop2" ino=1048630 res=0 errno=0 [ 76.508875][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.602129][ T4335] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 77.188681][ T4365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 77.233501][ T4365] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 77.374662][ T1075] libceph: connect (1)[c::]:6789 error -101 [ 77.381879][ T1075] libceph: mon0 (1)[c::]:6789 connect error [ 77.504489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.530041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.539030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.548009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.556976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.679110][ T1075] libceph: connect (1)[c::]:6789 error -101 [ 77.686862][ T1075] libceph: mon0 (1)[c::]:6789 connect error [ 78.276692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 78.311470][ T4369] ceph: No mds server is up or the cluster is laggy [ 78.347671][ T1075] libceph: connect (1)[c::]:6789 error -101 [ 78.353718][ T1075] libceph: mon0 (1)[c::]:6789 connect error [ 78.518706][ T4390] loop0: detected capacity change from 0 to 512 [ 78.871602][ T4404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.460'. [ 79.177905][ T4416] tap0: tun_chr_ioctl cmd 1074025681 [ 79.287039][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.417065][ T3964] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.441736][ T4421] loop1: detected capacity change from 0 to 2048 [ 79.526895][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 79.549089][ T4421] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.560815][ T4421] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 79.566462][ T4425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 79.657442][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.722756][ T4429] loop6: detected capacity change from 0 to 7 [ 79.726641][ T4425] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 79.748927][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.784217][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.787348][ T4429] Dev loop6: unable to read RDB block 7 [ 79.795077][ T3964] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.812916][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.826010][ T3964] usb 3-1: config 0 has no interface number 0 [ 79.862919][ T3964] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 32, using maximum allowed: 30 [ 79.883319][ T3964] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 79.887977][ T4429] loop6: unable to read partition table [ 79.907487][ T3964] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 79.917379][ T3964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.926660][ T4429] loop6: partition table beyond EOD, truncated [ 79.936634][ T4429] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 79.936634][ T4429] ) failed (rc=-5) [ 79.947380][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.973733][ T3964] usb 3-1: config 0 descriptor?? [ 80.007189][ T7] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.024296][ T7] usb 4-1: Manufacturer: syz [ 80.056763][ T3964] cp210x 3-1:0.1: cp210x converter detected [ 80.074391][ T7] usb 4-1: config 0 descriptor?? [ 80.122474][ T4436] netlink: 1 bytes leftover after parsing attributes in process `syz.0.472'. [ 80.177239][ T4436] loop0: detected capacity change from 0 to 512 [ 80.225232][ T4442] loop4: detected capacity change from 0 to 256 [ 80.277639][ T26] audit: type=1800 audit(1723079261.823:7): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.474" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 80.348444][ T4442] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.372586][ T4436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.387390][ T4436] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 80.468088][ T3964] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 80.503421][ T4446] udc-core: couldn't find an available UDC or it's busy [ 80.527291][ T4446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 80.550801][ T7] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 80.567660][ T7] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 80.588625][ T7] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 80.732683][ T3964] usb 3-1: cp210x converter now attached to ttyUSB0 [ 80.842886][ T3933] usb 4-1: USB disconnect, device number 2 [ 80.941459][ T1078] usb 3-1: USB disconnect, device number 2 [ 80.952271][ T1078] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 80.975140][ T1078] cp210x 3-1:0.1: device disconnected [ 81.236686][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 81.553784][ T4473] loop0: detected capacity change from 0 to 64 [ 82.007041][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.027092][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 83.165579][ T4490] loop2: detected capacity change from 0 to 2048 [ 83.197451][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.245521][ T4490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.277326][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.298944][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.316899][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 83.494201][ T4504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 84.457102][ T21] usb 4-1: string descriptor 0 read error: -71 [ 84.463403][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.474356][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.527186][ T21] usb 4-1: can't set config #1, error -71 [ 84.531849][ T4518] udc-core: couldn't find an available UDC or it's busy [ 84.537260][ T21] usb 4-1: USB disconnect, device number 3 [ 84.579695][ T4518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.765854][ T3964] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.918323][ T4529] ======================================================= [ 85.918323][ T4529] WARNING: The mand mount option has been deprecated and [ 85.918323][ T4529] and is ignored by this kernel. Remove the mand [ 85.918323][ T4529] option from the mount to silence this warning. [ 85.918323][ T4529] ======================================================= [ 87.487867][ T3964] usb 3-1: Using ep0 maxpacket: 16 [ 87.850991][ T4538] loop0: detected capacity change from 0 to 8 [ 87.917256][ T3964] usb 3-1: device descriptor read/all, error -71 [ 87.949884][ T4538] SQUASHFS error: xz decompression failed, data probably corrupt [ 87.967429][ T4538] SQUASHFS error: Failed to read block 0x108: -5 [ 87.973842][ T4538] SQUASHFS error: Unable to read metadata cache entry [106] [ 87.995827][ T4542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 88.027127][ T4538] SQUASHFS error: Unable to read inode 0x0 [ 88.084124][ T4546] loop2: detected capacity change from 0 to 512 [ 88.179960][ T4546] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.511: invalid indirect mapped block 256 (level 2) [ 88.222863][ T4546] EXT4-fs (loop2): 2 truncates cleaned up [ 88.229110][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.267086][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.451586][ T4559] loop0: detected capacity change from 0 to 512 [ 88.627295][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.652317][ T4559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.682757][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 88.722043][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.735623][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 88.755222][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.803056][ T4549] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 88.824980][ T4568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 89.498915][ T4559] EXT4-fs (loop0): 1 orphan inode deleted [ 89.504740][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.609980][ T4546] 9pnet: p9_fd_create_tcp (4546): problem connecting socket to 127.0.0.1 [ 89.619086][ T4559] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 89.623490][ T7] usb 2-1: config 0 descriptor?? [ 89.891992][ T3931] usb 2-1: USB disconnect, device number 3 [ 89.927092][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.177064][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 90.297142][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.307366][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.527179][ T21] usb 4-1: New USB device found, idVendor=0e6f, idProduct=5b63, bcdDevice=c4.67 [ 90.542043][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.561495][ T4587] loop0: detected capacity change from 0 to 2048 [ 90.562773][ T21] usb 4-1: Product: syz [ 90.574938][ T21] usb 4-1: Manufacturer: syz [ 90.603872][ T21] usb 4-1: SerialNumber: syz [ 90.640347][ T21] usb 4-1: config 0 descriptor?? [ 90.654571][ T4587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.691899][ T4591] loop1: detected capacity change from 0 to 8 [ 90.895931][ T4591] SQUASHFS error: xz decompression failed, data probably corrupt [ 90.930775][ T4591] SQUASHFS error: Failed to read block 0x108: -5 [ 90.946662][ T4597] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 90.981649][ T4591] SQUASHFS error: Unable to read metadata cache entry [106] [ 91.025706][ T1075] usb 4-1: USB disconnect, device number 4 [ 91.041879][ T4591] SQUASHFS error: Unable to read inode 0x0 [ 91.073829][ T4599] loop2: detected capacity change from 0 to 1024 [ 91.090150][ T4600] udc-core: couldn't find an available UDC or it's busy [ 91.155674][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.360374][ T26] audit: type=1800 audit(1723079272.903:8): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.527" name="bus" dev="loop2" ino=25 res=0 errno=0 [ 91.396765][ T4605] loop1: detected capacity change from 0 to 1024 [ 91.415593][ T4599] attempt to access beyond end of device [ 91.415593][ T4599] loop2: rw=0, want=201326594, limit=1024 [ 91.442726][ T4599] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 91.453224][ T4599] attempt to access beyond end of device [ 91.453224][ T4599] loop2: rw=0, want=201326594, limit=1024 [ 91.470888][ T4599] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 91.615967][ T4126] hfsplus: b-tree write err: -5, ino 4 [ 91.677098][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.714389][ T4611] loop2: detected capacity change from 0 to 64 [ 92.876707][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 93.246195][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.557728][ T1078] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.647314][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 93.799204][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.003369][ T21] usb 5-1: Product: syz [ 94.013717][ T21] usb 5-1: Manufacturer: syz [ 94.028186][ T21] usb 5-1: SerialNumber: syz [ 94.029193][ T4635] loop0: detected capacity change from 0 to 128 [ 94.057592][ T21] usb 5-1: config 0 descriptor?? [ 94.095180][ T4637] loop2: detected capacity change from 0 to 512 [ 94.107480][ T4635] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 94.142106][ T26] audit: type=1804 audit(1723079275.683:9): pid=4635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.538" name="/newroot/43/file0/file0" dev="loop0" ino=1048636 res=1 errno=0 [ 94.363646][ T4637] EXT4-fs (loop2): 1 orphan inode deleted [ 94.373356][ T4637] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,auto_da_alloc=0x000000000000003f,dioread_lock,. Quota mode: writeback. [ 94.404081][ T4637] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff) [ 94.447453][ T1078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.461047][ T1078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 94.569974][ T21] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 94.687188][ T21] usb 5-1: No valid video chain found. [ 95.148026][ T1078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.161349][ T4125] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.173446][ T1078] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 95.183127][ T1078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.216604][ T1078] usb 4-1: config 0 descriptor?? [ 95.311396][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.331865][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.345417][ T4649] dlm: no locking on control device [ 95.351881][ T4648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.545335][ T3964] usb 4-1: USB disconnect, device number 5 [ 96.300176][ T4637] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #18: block 42: comm syz.2.539: lblock 1 mapped to illegal pblock 42 (length 1) [ 96.325730][ T4637] EXT4-fs (loop2): Remounting filesystem read-only [ 96.333817][ T4637] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 96.346224][ T4637] EXT4-fs error (device loop2): ext4_punch_hole:4101: inode #18: comm syz.2.539: mark_inode_dirty error [ 96.409044][ T3933] usb 5-1: USB disconnect, device number 4 [ 96.473081][ T3951] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 96.546758][ T4664] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.572263][ T4665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.960656][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 97.006864][ T4677] loop1: detected capacity change from 0 to 512 [ 97.024334][ T4007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.045176][ T4675] loop4: detected capacity change from 0 to 512 [ 97.110428][ T4675] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 97.110428][ T4675] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 97.110428][ T4675] [ 97.173964][ T4007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.197467][ T4677] EXT4-fs (loop1): 1 truncate cleaned up [ 97.203152][ T4677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.225143][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #3: comm syz.4.551: corrupted inode contents [ 97.267798][ T4675] EXT4-fs (loop4): Remounting filesystem read-only [ 97.312351][ T4675] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #3: comm syz.4.551: mark_inode_dirty error [ 97.313833][ T4677] overlayfs: failed to resolve './file0': -2 [ 97.360607][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #3: comm syz.4.551: corrupted inode contents [ 97.374399][ T4675] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.551: mark_inode_dirty error [ 97.397115][ T3964] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.405528][ T4675] Quota error (device loop4): write_blk: dquota write failed [ 97.415590][ T4675] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 97.418027][ T4007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.426296][ T4675] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.551: Failed to acquire dquot type 0 [ 97.451764][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 97.460061][ T4675] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 97.489233][ T4675] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038 (0x7fffffff) [ 97.598511][ T4007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.625474][ T4675] syz.4.551 (4675) used greatest stack depth: 19616 bytes left [ 97.767325][ T3964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.787148][ T3964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.800423][ T3964] usb 4-1: config 1 has no interface number 0 [ 97.816784][ T3964] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.855135][ T4685] chnl_net:caif_netlink_parms(): no params data found [ 97.997498][ T3964] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.011402][ T3964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.024741][ T3964] usb 4-1: Product: syz [ 98.029197][ T3964] usb 4-1: Manufacturer: syz [ 98.034038][ T3964] usb 4-1: SerialNumber: syz [ 98.088355][ T3964] usb 4-1: selecting invalid altsetting 1 [ 98.172439][ T4709] loop0: detected capacity change from 0 to 256 [ 98.267234][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.274974][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.275076][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.320984][ T4685] device bridge_slave_0 entered promiscuous mode [ 98.417109][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.430923][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.448131][ T4685] device bridge_slave_1 entered promiscuous mode [ 98.623046][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.668494][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.697278][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.716567][ T4722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.717413][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 98.774098][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.831114][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 98.839791][ T4685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.886318][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.918923][ T7] usb 5-1: config 0 descriptor?? [ 98.938326][ T4685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.947609][ T3964] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 98.947684][ T3964] cdc_ncm 4-1:1.1: bind() failure [ 98.953310][ T3964] usb 4-1: USB disconnect, device number 6 [ 99.057571][ T4685] team0: Port device team_slave_0 added [ 99.078561][ T4685] team0: Port device team_slave_1 added [ 99.105439][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.113546][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.140383][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.164734][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.172223][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.198164][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.220493][ T3933] usb 5-1: USB disconnect, device number 5 [ 99.231328][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.277159][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 99.306239][ T4685] device hsr_slave_0 entered promiscuous mode [ 99.315548][ T4685] device hsr_slave_1 entered promiscuous mode [ 99.324546][ T4685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.333864][ T4685] Cannot create hsr debugfs directory [ 99.515951][ T4007] device hsr_slave_0 left promiscuous mode [ 99.554373][ T4007] device hsr_slave_1 left promiscuous mode [ 99.569247][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.571973][ T4752] loop0: detected capacity change from 0 to 512 [ 99.576845][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.603113][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.611172][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.621664][ T4007] device bridge_slave_1 left promiscuous mode [ 99.629515][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.646483][ T4007] device bridge_slave_0 left promiscuous mode [ 99.656326][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.673520][ T4752] EXT4-fs (loop0): 1 truncate cleaned up [ 99.679469][ T4752] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.715237][ T4007] device veth1_macvtap left promiscuous mode [ 99.723278][ T4007] device veth0_macvtap left promiscuous mode [ 99.730665][ T4752] overlayfs: failed to resolve './file0': -2 [ 99.763984][ T4007] device veth1_vlan left promiscuous mode [ 99.819394][ T4007] device veth0_vlan left promiscuous mode [ 99.994958][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 100.192653][ T4007] team0 (unregistering): Port device team_slave_1 removed [ 100.207946][ T4007] team0 (unregistering): Port device team_slave_0 removed [ 100.226028][ T4007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.246836][ T4007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.324904][ T4007] bond0 (unregistering): Released all slaves [ 100.395983][ T4750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.569'. [ 100.412088][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 100.426517][ T4763] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 100.534817][ T4768] loop0: detected capacity change from 0 to 1024 [ 100.717731][ T4768] hfsplus: failed to load root directory [ 100.817754][ T4768] loop0: detected capacity change from 0 to 512 [ 100.933322][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 101.068206][ T4768] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 101.190224][ T4790] gfs2: gfs2 mount does not exist [ 101.348661][ T3933] Bluetooth: hci3: command 0x041b tx timeout [ 101.758699][ T4790] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.575'. [ 102.000156][ T4795] loop3: detected capacity change from 0 to 512 [ 102.649806][ T4778] loop4: detected capacity change from 0 to 512 [ 102.697228][ T4795] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.704730][ T4795] UDF-fs: Scanning with blocksize 512 failed [ 102.722630][ T4778] EXT4-fs (loop4): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 102.747730][ T3964] libceph: connect (1)[c::]:6789 error -101 [ 102.753738][ T3964] libceph: mon0 (1)[c::]:6789 connect error [ 102.763996][ T4795] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.784240][ T4795] UDF-fs: Scanning with blocksize 1024 failed [ 102.853507][ T4795] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.912159][ T4795] UDF-fs: Scanning with blocksize 2048 failed [ 102.923653][ T4796] ceph: No mds server is up or the cluster is laggy [ 103.038475][ T4795] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.111807][ T4795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.301872][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 103.314779][ T4816] Cannot find add_set index 0 as target [ 103.349399][ T4816] loop4: detected capacity change from 0 to 16 [ 103.360981][ T4685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.415619][ T4821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.432527][ T4685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.462786][ T4685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.507971][ T4824] udc-core: couldn't find an available UDC or it's busy [ 103.510152][ T4685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.557094][ T4824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.690659][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 103.712407][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 103.823476][ T4830] loop3: detected capacity change from 0 to 2048 [ 103.830373][ T3311] Bluetooth: hci3: command 0x040f tx timeout [ 103.882846][ T4830] UDF-fs: bad mount option "Uovrs" or missing value [ 103.968848][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.072218][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.094191][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.166889][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.190037][ T4838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.228788][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.254394][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.301575][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.308735][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.390039][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.419442][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.433524][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.451885][ T3933] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.459091][ T3933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.531431][ T4848] loop1: detected capacity change from 0 to 512 [ 104.539732][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.575263][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.587552][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.615986][ T4851] dlm: no locking on control device [ 104.631685][ T4850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.667922][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.690971][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.708125][ T4848] EXT4-fs (loop1): 1 orphan inode deleted [ 104.716913][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.730755][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.739509][ T4848] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff) [ 104.921040][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.809720][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.838241][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.859988][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.911536][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.945123][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.971046][ T3832] Bluetooth: hci3: command 0x0419 tx timeout [ 105.987680][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.072296][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.107749][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.110326][ T4868] loop1: detected capacity change from 0 to 128 [ 106.193916][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 106.279209][ T4868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.370202][ T4868] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 106.543128][ T4884] netlink: 'syz.4.597': attribute type 7 has an invalid length. [ 106.612329][ T4868] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz.1.595: No space for directory leaf checksum. Please run e2fsck -D. [ 106.636904][ T4884] netlink: 'syz.4.597': attribute type 39 has an invalid length. [ 106.714642][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.744005][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.746765][ T3949] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=0, rec_len=0, size=1024 fake=0 [ 106.780179][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 106.798178][ T4890] netlink: 'syz.4.597': attribute type 7 has an invalid length. [ 106.825579][ T4890] netlink: 'syz.4.597': attribute type 39 has an invalid length. [ 106.860907][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 106.903591][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.943882][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 106.975968][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.995549][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.024488][ T3949] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 107.074881][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.120582][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.144549][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 107.147413][ T4685] device veth0_vlan entered promiscuous mode [ 107.246583][ T4908] loop4: detected capacity change from 0 to 512 [ 107.259827][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 107.267515][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.305827][ T4906] loop3: detected capacity change from 0 to 2048 [ 107.320985][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 107.322849][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.376429][ T3949] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 107.440064][ T3949] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 107.531287][ T4906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.545749][ T4908] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.603: corrupted xattr block 8 [ 107.591783][ T4906] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 107.641769][ T4685] device veth1_vlan entered promiscuous mode [ 107.655029][ T4908] EXT4-fs (loop4): Remounting filesystem read-only [ 107.700963][ T4908] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 107.708483][ T4906] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 107.730813][ T4908] EXT4-fs (loop4): 1 orphan inode deleted [ 107.736661][ T4908] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback. [ 107.851959][ T4908] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 107.880379][ T4906] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.880379][ T4906] [ 107.977988][ T4906] EXT4-fs (loop3): Total free blocks count 0 [ 108.081906][ T4906] EXT4-fs (loop3): Free/Dirty block details [ 108.083611][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.103773][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.157849][ T4685] device veth0_macvtap entered promiscuous mode [ 108.167642][ T4906] EXT4-fs (loop3): free_blocks=66060288 [ 108.176281][ T4906] EXT4-fs (loop3): dirty_blocks=16 [ 108.202021][ T4906] EXT4-fs (loop3): Block reservation details [ 108.214816][ T4685] device veth1_macvtap entered promiscuous mode [ 108.308542][ T4906] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 108.481778][ T4924] netlink: 72 bytes leftover after parsing attributes in process `syz.4.604'. [ 108.930751][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.275879][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.286628][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.297956][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.309161][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.320649][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.331532][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.343483][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.368503][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.378536][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.432116][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.498879][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.715471][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.758197][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.552287][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.564175][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.583901][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.607400][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.637584][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.687031][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.730312][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.782295][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.807486][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.047700][ T4954] loop3: detected capacity change from 0 to 1024 [ 111.069649][ T4685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.117371][ T4685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.152980][ T4685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.196665][ T26] audit: type=1800 audit(1723079292.733:10): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.610" name="bus" dev="loop3" ino=25 res=0 errno=0 [ 111.217123][ T4685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.231097][ T4954] attempt to access beyond end of device [ 111.231097][ T4954] loop3: rw=0, want=201326594, limit=1024 [ 111.321488][ T4954] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 111.409753][ T4954] attempt to access beyond end of device [ 111.409753][ T4954] loop3: rw=0, want=201326594, limit=1024 [ 111.517496][ T4954] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 111.564709][ T4629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.595608][ T4629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.670399][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.713527][ T4629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.744188][ T4629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.821465][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.045524][ T4978] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.554'. [ 112.969096][ T4007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.126639][ T4007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.299312][ T4985] loop2: detected capacity change from 0 to 2048 [ 113.324128][ T4007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.384001][ T4992] udc-core: couldn't find an available UDC or it's busy [ 113.405085][ T4992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.457106][ T4985] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.535242][ T4007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.618629][ T4985] attempt to access beyond end of device [ 113.618629][ T4985] loop2: rw=524288, want=33554432, limit=2048 [ 113.637762][ T4996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.796113][ T4998] loop4: detected capacity change from 0 to 64 [ 113.896279][ T4985] attempt to access beyond end of device [ 113.896279][ T4985] loop2: rw=0, want=33554432, limit=2048 [ 113.973590][ T4985] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 114.067065][ T4985] NILFS (loop2): error -5 reading inode: ino=12 [ 114.179524][ T5000] attempt to access beyond end of device [ 114.179524][ T5000] loop2: rw=0, want=33554432, limit=2048 [ 114.236434][ T5000] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 114.277122][ T5000] NILFS (loop2): error -5 reading inode: ino=12 [ 114.513648][ T4986] chnl_net:caif_netlink_parms(): no params data found [ 115.071624][ T5013] loop4: detected capacity change from 0 to 1024 [ 115.246114][ T26] audit: type=1800 audit(1723079296.783:11): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.624" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 115.288485][ T5013] attempt to access beyond end of device [ 115.288485][ T5013] loop4: rw=0, want=201326594, limit=1024 [ 115.322321][ T5013] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 115.357810][ T5013] attempt to access beyond end of device [ 115.357810][ T5013] loop4: rw=0, want=201326594, limit=1024 [ 115.437364][ T3933] Bluetooth: hci1: command 0x0409 tx timeout [ 115.443744][ T5013] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 115.575661][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.657130][ T4986] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.703667][ T4986] device bridge_slave_0 entered promiscuous mode [ 115.771343][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.795871][ T4986] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.835645][ T4986] device bridge_slave_1 entered promiscuous mode [ 116.002915][ T4986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.050121][ T5038] loop4: detected capacity change from 0 to 512 [ 116.198050][ T4986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.244884][ T5038] EXT4-fs (loop4): 1 orphan inode deleted [ 116.289030][ T5038] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,auto_da_alloc=0x000000000000003f,dioread_lock,. Quota mode: writeback. [ 116.301703][ T5045] loop2: detected capacity change from 0 to 64 [ 116.338412][ T5038] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 116.405325][ T5038] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #16: block 42: comm syz.4.626: lblock 1 mapped to illegal pblock 42 (length 1) [ 116.420092][ T5038] EXT4-fs (loop4): Remounting filesystem read-only [ 116.426736][ T5038] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 116.445369][ T5038] EXT4-fs error (device loop4): ext4_punch_hole:4101: inode #16: comm syz.4.626: mark_inode_dirty error [ 116.510313][ T4986] team0: Port device team_slave_0 added [ 116.540807][ T5045] attempt to access beyond end of device [ 116.540807][ T5045] loop2: rw=2049, want=268435470, limit=64 [ 116.558854][ T3957] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 116.580419][ T4986] team0: Port device team_slave_1 added [ 116.588579][ T5045] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 116.599786][ T5048] loop0: detected capacity change from 0 to 256 [ 116.752260][ T5052] Cannot find add_set index 0 as target [ 116.799915][ T5052] loop3: detected capacity change from 0 to 16 [ 116.808073][ T4986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.815045][ T4986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.865599][ T4986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.911251][ T4986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.919456][ T4986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.946317][ T4986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.072505][ T4007] device hsr_slave_0 left promiscuous mode [ 117.086257][ T4007] device hsr_slave_1 left promiscuous mode [ 117.101959][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.136748][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.225269][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.266436][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.316448][ T4007] device bridge_slave_1 left promiscuous mode [ 117.337889][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.370346][ T4007] device bridge_slave_0 left promiscuous mode [ 117.384923][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.409110][ T4007] device veth1_macvtap left promiscuous mode [ 117.416540][ T4007] device veth0_macvtap left promiscuous mode [ 117.454258][ T4007] device veth1_vlan left promiscuous mode [ 117.484346][ T4007] device veth0_vlan left promiscuous mode [ 117.508273][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 118.071981][ T4007] team0 (unregistering): Port device team_slave_1 removed [ 118.100602][ T4007] team0 (unregistering): Port device team_slave_0 removed [ 118.136251][ T4007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.213275][ T4007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.479310][ T4007] bond0 (unregistering): Released all slaves [ 118.580968][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 118.602966][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 118.736694][ T4986] device hsr_slave_0 entered promiscuous mode [ 118.758330][ T4986] device hsr_slave_1 entered promiscuous mode [ 118.899781][ T5078] Cannot find add_set index 0 as target [ 119.020250][ T5078] loop0: detected capacity change from 0 to 16 [ 119.029330][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.079088][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.124911][ T5083] dlm: no locking on control device [ 119.147480][ T5081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.975339][ T4021] Bluetooth: hci1: command 0x040f tx timeout [ 120.267308][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 120.276485][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 120.560910][ T5106] loop3: detected capacity change from 0 to 1024 [ 120.838516][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 120.880497][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 120.901780][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 120.941835][ T5088] hfsplus: b-tree write err: -5, ino 4 [ 120.961640][ T5121] loop0: detected capacity change from 0 to 64 [ 121.153508][ T5124] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.397482][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.468097][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.476239][ T5086] device bridge_slave_0 entered promiscuous mode [ 121.551117][ T4986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.585339][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.599539][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.610033][ T5086] device bridge_slave_1 entered promiscuous mode [ 121.638812][ T4986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.692009][ T4986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.752853][ T4986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.784119][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.847136][ T1292] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.860870][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.015579][ T5086] team0: Port device team_slave_0 added [ 122.077300][ T1078] Bluetooth: hci4: command 0x0409 tx timeout [ 122.103683][ T5086] team0: Port device team_slave_1 added [ 122.147272][ T3933] Bluetooth: hci1: command 0x0419 tx timeout [ 122.255793][ T5152] loop0: detected capacity change from 0 to 512 [ 122.272269][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.287942][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.336439][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.407306][ T1292] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 122.432918][ T1292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.446380][ T5152] EXT4-fs error (device loop0): __ext4_iget:4861: inode #11: block 1: comm syz.0.652: invalid block [ 122.502127][ T5152] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.652: couldn't read orphan inode 11 (err -117) [ 122.514986][ T4986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.528444][ T1292] usb 3-1: Product: syz [ 122.538076][ T1292] usb 3-1: Manufacturer: syz [ 122.549694][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.565863][ T1292] usb 3-1: SerialNumber: syz [ 122.568126][ T5152] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue. Quota mode: writeback. [ 122.595004][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.595036][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.603312][ T4986] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.669465][ T1292] usb 3-1: config 0 descriptor?? [ 122.808037][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.823039][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.838115][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.879050][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.930601][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.937812][ T4021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.007532][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.059229][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.068640][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.075791][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.084102][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.093245][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.130676][ T5086] device hsr_slave_0 entered promiscuous mode [ 123.209682][ T5086] device hsr_slave_1 entered promiscuous mode [ 123.236685][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.244672][ T5086] Cannot create hsr debugfs directory [ 123.274171][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.295105][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.349952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.382938][ T5173] udc-core: couldn't find an available UDC or it's busy [ 123.396410][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.410533][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.437362][ T5173] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.448491][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.517774][ T1292] mos7840 3-1:0.0: required endpoints missing [ 123.532772][ T4986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.547187][ T1292] usb 3-1: USB disconnect, device number 5 [ 123.551346][ T4986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.580975][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.601748][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.624515][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.644648][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.734182][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.105920][ T5086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.157151][ T3933] Bluetooth: hci4: command 0x041b tx timeout [ 124.215770][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.218679][ T5190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.655'. [ 124.244075][ T3832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.272097][ T4986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.300442][ T5193] loop2: detected capacity change from 0 to 2048 [ 124.349085][ T5086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.413194][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.434877][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.462817][ T5193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.480924][ T5086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.488180][ T5193] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 124.608003][ T5086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.613037][ T5193] fs-verity: sha512 using implementation "sha512-avx2" [ 124.673778][ T4986] device veth0_vlan entered promiscuous mode [ 124.703193][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.727331][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.741578][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.764867][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.780831][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.801342][ T5217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 124.896335][ T4986] device veth1_vlan entered promiscuous mode [ 124.902718][ T5217] loop0: detected capacity change from 0 to 2048 [ 124.921089][ T5221] mmap: syz.2.661 (5221) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.001999][ T5217] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 125.018525][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.026746][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.044937][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.068028][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.079702][ T4986] device veth0_macvtap entered promiscuous mode [ 125.097312][ T13] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 125.114633][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.141713][ T4986] device veth1_macvtap entered promiscuous mode [ 125.157983][ T13] usb 4-1: config 0 descriptor?? [ 125.170792][ T5086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.210734][ T5086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.233242][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.251223][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.263278][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.282613][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.313100][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.335396][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.363792][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.382450][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.409428][ T4986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.419883][ T5086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.438502][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.446813][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.467888][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.476685][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.540818][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.552790][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.567781][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.609122][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.627123][ T13] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 125.655638][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.695090][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.722238][ T4986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.733848][ T4986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.746052][ T4986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.763251][ T5086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.780935][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.791728][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.944152][ T4986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.959879][ T4986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.968754][ T4986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.977487][ T4986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.293013][ T3832] Bluetooth: hci4: command 0x040f tx timeout [ 126.440611][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.482857][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.654407][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.662625][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.671320][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.680413][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.689578][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.696637][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.704553][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.713558][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.722053][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.729136][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.741604][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.749795][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.777931][ T5250] loop0: detected capacity change from 0 to 128 [ 126.797881][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.832404][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.850485][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.871149][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.871443][ T5250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.884748][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.958686][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.966740][ T5250] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.968919][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.013851][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.085183][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.104255][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.144870][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.166431][ T5250] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz.0.673: No space for directory leaf checksum. Please run e2fsck -D. [ 127.205943][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.233384][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.252827][ T3948] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=0, rec_len=0, size=1024 fake=0 [ 127.298568][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 127.337947][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.346822][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 127.377080][ T21] usb 4-1: USB disconnect, device number 7 [ 127.377816][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.393019][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.401356][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 127.432255][ T3948] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 127.447068][ T3942] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.455522][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 127.485896][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.524628][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 127.565814][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 127.636910][ T5275] loop3: detected capacity change from 0 to 1024 [ 127.651866][ T4007] device hsr_slave_0 left promiscuous mode [ 127.668013][ T4007] device hsr_slave_1 left promiscuous mode [ 127.674206][ T3948] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 127.692599][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.704638][ T3948] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 127.718872][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.726860][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.727373][ T3942] usb 3-1: Using ep0 maxpacket: 16 [ 127.744786][ T5275] hfsplus: failed to load root directory [ 127.754016][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.775591][ T4007] device bridge_slave_1 left promiscuous mode [ 127.817306][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.868981][ T4007] device bridge_slave_0 left promiscuous mode [ 127.875239][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.894599][ T5275] loop3: detected capacity change from 0 to 512 [ 127.925977][ T4007] device veth1_macvtap left promiscuous mode [ 127.949260][ T4007] device veth0_macvtap left promiscuous mode [ 127.973079][ T3942] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.973777][ T4007] device veth1_vlan left promiscuous mode [ 127.986765][ T4007] device veth0_vlan left promiscuous mode [ 128.059533][ T5275] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 128.102990][ T3942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.113465][ T3942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.122876][ T3942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.133342][ T5275] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 128.474651][ T1078] Bluetooth: hci4: command 0x0419 tx timeout [ 128.558377][ T3942] usb 3-1: string descriptor 0 read error: -22 [ 128.565115][ T3942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.583455][ T3942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.960926][ T3942] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 128.972806][ T3942] cdc_ncm 3-1:1.0: bind() failure [ 129.216060][ T7] usb 3-1: USB disconnect, device number 6 [ 129.343365][ T4007] team0 (unregistering): Port device team_slave_1 removed [ 129.356536][ T4007] team0 (unregistering): Port device team_slave_0 removed [ 129.373764][ T4007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.392858][ T4007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.465343][ T4007] bond0 (unregistering): Released all slaves [ 129.581738][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.593877][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.610687][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.798328][ T3948] syz-executor (3948) used greatest stack depth: 19320 bytes left [ 129.809008][ T3942] usb 1-1: USB disconnect, device number 3 [ 129.883322][ T5308] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 129.977157][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.013600][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.042331][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.151849][ T5086] device veth0_vlan entered promiscuous mode [ 130.196683][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.212940][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.271830][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.339761][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.381321][ T5320] loop2: detected capacity change from 0 to 64 [ 130.390119][ T5086] device veth1_vlan entered promiscuous mode [ 130.507334][ T7] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 130.551309][ T5086] device veth0_macvtap entered promiscuous mode [ 130.577176][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.585214][ T7] usb 4-1: Product: syz [ 130.643330][ T7] usb 4-1: Manufacturer: syz [ 130.656899][ T7] usb 4-1: SerialNumber: syz [ 130.669306][ T5086] device veth1_macvtap entered promiscuous mode [ 130.706688][ T7] usb 4-1: config 0 descriptor?? [ 130.727409][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.741610][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.770070][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.803740][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.835220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.862716][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.882770][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.905264][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.925247][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.935540][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.951489][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.977019][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.021248][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.051656][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.074434][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.118605][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.161033][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.202569][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.229146][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.255568][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.266372][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.277765][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.293850][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.306675][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.339548][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.358581][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.386027][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.400995][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.420776][ T5086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.442785][ T5086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.454468][ T5086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.464963][ T5086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.557271][ T7] mos7840 4-1:0.0: required endpoints missing [ 131.588746][ T7] usb 4-1: USB disconnect, device number 8 [ 131.790560][ T5317] chnl_net:caif_netlink_parms(): no params data found [ 131.897602][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.905801][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.952624][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.005749][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.051729][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.117184][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.130429][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.163565][ T5317] device bridge_slave_0 entered promiscuous mode [ 132.243707][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.279484][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.306759][ T5317] device bridge_slave_1 entered promiscuous mode [ 132.353684][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.387238][ T3832] Bluetooth: hci0: command 0x0409 tx timeout [ 133.157761][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164203][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240852][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.381422][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.562795][ T5317] team0: Port device team_slave_0 added [ 133.626912][ T5317] team0: Port device team_slave_1 added [ 133.648426][ T5356] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 133.805349][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.827347][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.911391][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.953377][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.967316][ T1078] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.063492][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.114204][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.252571][ T5317] device hsr_slave_0 entered promiscuous mode [ 134.272991][ T5317] device hsr_slave_1 entered promiscuous mode [ 134.296324][ T5317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.316508][ T5317] Cannot create hsr debugfs directory [ 134.467817][ T3933] Bluetooth: hci0: command 0x041b tx timeout [ 134.527440][ T1078] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 134.549231][ T1078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.584790][ T1078] usb 2-1: Product: syz [ 134.592787][ T1078] usb 2-1: Manufacturer: syz [ 134.598081][ T1078] usb 2-1: SerialNumber: syz [ 134.610099][ T1078] usb 2-1: config 0 descriptor?? [ 134.796699][ T5381] loop4: detected capacity change from 0 to 256 [ 134.879224][ T5317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.967991][ T5317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.065420][ T5381] loop4: detected capacity change from 0 to 512 [ 135.107642][ T5317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.282863][ T5317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.477248][ T1078] mos7840 2-1:0.0: required endpoints missing [ 135.504127][ T1078] usb 2-1: USB disconnect, device number 4 [ 135.713235][ T5317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.749292][ T5317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.817473][ T5317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.871672][ T5317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.206216][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.240378][ T5386] loop4: detected capacity change from 0 to 8192 [ 136.284339][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.296111][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.337619][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.360675][ T5386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.503276][ T5392] loop2: detected capacity change from 0 to 512 [ 136.528084][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.545143][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.559073][ T3942] Bluetooth: hci0: command 0x040f tx timeout [ 136.596866][ T5402] loop4: detected capacity change from 0 to 512 [ 136.605793][ T5392] EXT4-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 136.632195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.639407][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.807569][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.831178][ T5402] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.698: casefold flag without casefold feature [ 136.850370][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.030122][ T5402] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 137.223274][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.230429][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.248227][ T5408] netlink: 72 bytes leftover after parsing attributes in process `syz.3.699'. [ 137.341928][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.388724][ T4007] device hsr_slave_0 left promiscuous mode [ 137.429046][ T4007] device hsr_slave_1 left promiscuous mode [ 137.451141][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.460272][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.470561][ T5402] fscrypt (loop4, inode 18): Unsupported encryption flags (0x4c) [ 137.482016][ T4007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.493479][ T4007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.521368][ T4007] device bridge_slave_1 left promiscuous mode [ 137.539056][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.563969][ T4007] device bridge_slave_0 left promiscuous mode [ 137.593104][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.635047][ T4007] device veth1_macvtap left promiscuous mode [ 137.666889][ T4007] device veth0_macvtap left promiscuous mode [ 137.673091][ T4007] device veth1_vlan left promiscuous mode [ 137.697991][ T4007] device veth0_vlan left promiscuous mode [ 137.747433][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.007354][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 138.137868][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.148525][ T13] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 138.162865][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.189113][ T13] usb 4-1: config 0 descriptor?? [ 138.331157][ T4007] team0 (unregistering): Port device team_slave_1 removed [ 138.363720][ T4007] team0 (unregistering): Port device team_slave_0 removed [ 138.384044][ T4007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.405830][ T4007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.550382][ T4007] bond0 (unregistering): Released all slaves [ 138.627574][ T3933] Bluetooth: hci4: command 0x0401 tx timeout [ 138.634084][ T3933] Bluetooth: hci0: command 0x0419 tx timeout [ 138.658873][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.667740][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.676738][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.685834][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.695351][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.704181][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.713144][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.723709][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.735418][ T5419] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 138.745624][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 138.819583][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.845918][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.853156][ T5436] loop2: detected capacity change from 0 to 512 [ 138.858718][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.869136][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.901595][ T1078] usb 4-1: USB disconnect, device number 9 [ 138.901714][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.988643][ T5436] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 139.017906][ T5436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.092924][ T5436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 139.119468][ T5436] System zones: 1-12 [ 139.128962][ T26] audit: type=1326 audit(1723079320.673:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.4.712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f78ef09f9 code=0x0 [ 139.170432][ T5436] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.710: corrupted in-inode xattr [ 139.184946][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.193070][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.203592][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.212591][ T5436] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.710: couldn't read orphan inode 15 (err -117) [ 139.225165][ T5436] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 139.239671][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.274754][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.314483][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.324579][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.345818][ T5317] device veth0_vlan entered promiscuous mode [ 139.368169][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.376312][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.394396][ T5317] device veth1_vlan entered promiscuous mode [ 139.446391][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.467945][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.485575][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.506424][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.519421][ T5317] device veth0_macvtap entered promiscuous mode [ 139.535116][ T5317] device veth1_macvtap entered promiscuous mode [ 139.610105][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.685180][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.714900][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.737274][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.759734][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.774507][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.798432][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.815433][ T5451] loop3: detected capacity change from 0 to 512 [ 139.837705][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.865138][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.890945][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.910089][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.952685][ T5451] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 139.989813][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.033384][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.072495][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.111524][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.122994][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.145524][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.188366][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.202768][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.219163][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.388132][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.406494][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.414623][ T5464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 140.845696][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.865258][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.920993][ T5317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.936993][ T5317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.957776][ T5317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.987182][ T5317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.239259][ T5482] Cannot find add_set index 0 as target [ 141.258448][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.269748][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.306827][ T5482] loop2: detected capacity change from 0 to 16 [ 141.344534][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.369790][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.382597][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.404657][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.513872][ T5485] loop3: detected capacity change from 0 to 512 [ 141.520725][ T1078] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.594985][ T5485] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 141.739553][ T5485] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 141.849784][ T5490] loop0: detected capacity change from 0 to 256 [ 143.180016][ T5488] sched: RT throttling activated [ 143.207309][ T1078] usb 5-1: Using ep0 maxpacket: 16 [ 143.207940][ T5490] exfat: Deprecated parameter 'utf8' [ 143.217838][ T5490] exfat: Bad value for 'gid' [ 143.659156][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 143.672441][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 143.672939][ T5485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 143.721436][ T5485] System zones: 1-12 [ 143.737624][ T1078] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.798037][ T5485] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.734: corrupted in-inode xattr [ 143.877110][ T1078] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.897838][ T1078] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.906812][ T1078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 143.919238][ T5485] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.734: couldn't read orphan inode 15 (err -117) [ 143.941644][ T5485] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 143.982648][ T5496] loop0: detected capacity change from 0 to 2048 [ 144.029989][ T5499] loop2: detected capacity change from 0 to 128 [ 144.101422][ T5499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.116272][ T5496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.167508][ T1078] usb 5-1: string descriptor 0 read error: -71 [ 144.174085][ T1078] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.187773][ T5499] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 144.213986][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.227168][ T1075] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.263295][ T5496] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 144.267387][ T1078] usb 5-1: can't set config #1, error -71 [ 144.332858][ T1078] usb 5-1: USB disconnect, device number 6 [ 144.333393][ T5496] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 144.444680][ T5496] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.444680][ T5496] [ 144.498906][ T1075] usb 2-1: Using ep0 maxpacket: 8 [ 144.536177][ T5496] EXT4-fs (loop0): Total free blocks count 0 [ 144.608906][ T5496] EXT4-fs (loop0): Free/Dirty block details [ 144.617544][ T1075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.644254][ T1075] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 144.658667][ T5496] EXT4-fs (loop0): free_blocks=66060288 [ 144.685780][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.707553][ T5496] EXT4-fs (loop0): dirty_blocks=16 [ 144.712727][ T5496] EXT4-fs (loop0): Block reservation details [ 144.737486][ T1075] usb 2-1: config 0 descriptor?? [ 144.787376][ T5496] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 144.822471][ T5516] device syzkaller1 entered promiscuous mode [ 145.154678][ T1078] usb 2-1: USB disconnect, device number 5 [ 145.516262][ T5521] Illegal XDP return value 606067008, expect packet loss! [ 146.622547][ T5535] loop1: detected capacity change from 0 to 24 [ 146.707714][ T5527] loop0: detected capacity change from 0 to 512 [ 146.789221][ T5527] EXT4-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 146.931890][ T5535] overlayfs: './file0' not a directory [ 147.368196][ T5539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.481750][ T5542] Cannot find add_set index 0 as target [ 147.551090][ T5544] loop1: detected capacity change from 0 to 16 [ 147.825126][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 147.864512][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 148.461811][ T5550] loop3: detected capacity change from 0 to 256 [ 149.031198][ T5550] exfat: Deprecated parameter 'utf8' [ 149.037026][ T5550] exfat: Bad value for 'gid' [ 149.548760][ T5561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.024803][ T5571] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 150.242457][ T26] audit: type=1326 audit(1723079331.783:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.327626][ T1078] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.367594][ T26] audit: type=1326 audit(1723079331.783:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.393934][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.493542][ T5590] loop4: detected capacity change from 0 to 2048 [ 150.525042][ T26] audit: type=1326 audit(1723079331.813:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525089][ T26] audit: type=1326 audit(1723079331.813:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525127][ T26] audit: type=1326 audit(1723079331.813:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525163][ T26] audit: type=1326 audit(1723079331.823:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525199][ T26] audit: type=1326 audit(1723079331.823:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525236][ T26] audit: type=1326 audit(1723079331.823:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525272][ T26] audit: type=1326 audit(1723079331.823:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.525572][ T26] audit: type=1326 audit(1723079332.053:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cc89e9f9 code=0x7ffc0000 [ 150.567302][ T1078] usb 3-1: Using ep0 maxpacket: 16 [ 150.578201][ T5590] UDF-fs: bad mount option "dmode=000¬Â(éæU¡WÝú„00000000000000000000" or missing value [ 150.625987][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.732370][ T1078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.732407][ T1078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.732444][ T1078] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 150.732470][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.736653][ T1078] usb 3-1: config 0 descriptor?? [ 150.780507][ T5590] input: syz0 as /devices/virtual/input/input8 [ 151.015167][ T5596] loop4: detected capacity change from 0 to 2048 [ 151.104916][ T5596] GPT:first_usable_lbas don't match. [ 151.110485][ T5596] GPT:34 != 290 [ 151.114855][ T5596] GPT: Use GNU Parted to correct GPT errors. [ 151.122361][ T5596] loop4: p1 p2 p3 [ 151.190098][ T1078] ntrig 0003:1B96:0008.0003: unbalanced delimiter at end of report description [ 151.210257][ T1078] ntrig 0003:1B96:0008.0003: parse failed [ 151.218886][ T1078] ntrig: probe of 0003:1B96:0008.0003 failed with error -22 [ 151.401160][ T5599] loop3: detected capacity change from 0 to 2048 [ 151.411880][ T1075] usb 3-1: USB disconnect, device number 7 [ 151.455884][ T5599] loop3: p1 p2 < > p3 p4 < p5 > [ 151.465213][ T5599] loop3: partition table partially beyond EOD, truncated [ 151.487866][ T5599] loop3: p1 start 2305 is beyond EOD, truncated [ 151.494641][ T5599] loop3: p2 start 4294902784 is beyond EOD, truncated [ 151.508114][ T5599] loop3: p3 start 4278191616 is beyond EOD, truncated [ 151.528479][ T5599] loop3: p5 start 2305 is beyond EOD, truncated [ 151.600523][ T3026] loop3: p1 p2 < > p3 p4 < p5 > [ 151.627650][ T3026] loop3: partition table partially beyond EOD, truncated [ 151.647719][ T3026] loop3: p1 start 2305 is beyond EOD, truncated [ 151.654263][ T3026] loop3: p2 start 4294902784 is beyond EOD, truncated [ 151.663809][ T3026] loop3: p3 start 4278191616 is beyond EOD, truncated [ 151.679281][ T3026] loop3: p5 start 2305 is beyond EOD, truncated [ 151.815141][ T4029] udevd[4029]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 152.022446][ T5611] loop2: detected capacity change from 0 to 512 [ 152.148626][ T5611] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.767: casefold flag without casefold feature [ 152.173387][ T5611] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.767: missing EA_INODE flag [ 152.193010][ T5611] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.767: error while reading EA inode 12 err=-117 [ 152.232082][ T5611] EXT4-fs (loop2): 1 orphan inode deleted [ 152.239053][ T5611] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 152.712692][ T5626] loop2: detected capacity change from 0 to 2048 [ 152.735346][ T5628] loop3: detected capacity change from 0 to 2048 [ 152.809633][ T5626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.820008][ T5628] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.873963][ T5628] attempt to access beyond end of device [ 152.873963][ T5628] loop3: rw=524288, want=33554432, limit=2048 [ 152.897274][ T5629] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.911775][ T5626] overlayfs: failed to resolve './file2': -5 [ 152.942859][ T5628] attempt to access beyond end of device [ 152.942859][ T5628] loop3: rw=0, want=33554432, limit=2048 [ 153.006746][ T5628] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 153.045106][ T5628] NILFS (loop3): error -5 reading inode: ino=12 [ 153.085842][ T5630] attempt to access beyond end of device [ 153.085842][ T5630] loop3: rw=0, want=33554432, limit=2048 [ 153.137346][ T5630] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 153.267015][ T5630] NILFS (loop3): error -5 reading inode: ino=12 [ 153.352904][ T5632] Cannot find add_set index 0 as target [ 153.401678][ T5632] loop2: detected capacity change from 0 to 16 [ 154.490037][ T5638] loop3: detected capacity change from 0 to 256 [ 154.610963][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 154.640958][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 154.835267][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 154.882171][ T5643] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 155.061802][ T5656] loop2: detected capacity change from 0 to 1024 [ 155.097054][ T3933] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.172459][ T5656] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nolazytime,dioread_lock,norecovery,errors=remount-ro,lazytime,stripe=0x0000000000000080,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 155.241970][ T5656] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 34: comm syz.2.778: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0 [ 155.347126][ T3933] usb 2-1: Using ep0 maxpacket: 16 [ 155.425636][ T5656] EXT4-fs (loop2): Remounting filesystem read-only [ 155.467143][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.481936][ T3933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.494794][ T3933] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.528009][ T3933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.556354][ T3933] usb 2-1: config 0 descriptor?? [ 155.700592][ T5671] loop4: detected capacity change from 0 to 512 [ 155.787873][ T5671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.844571][ T5671] EXT4-fs (loop4): 1 truncate cleaned up [ 155.904972][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.071629][ T5677] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 156.095752][ T5679] loop2: detected capacity change from 0 to 256 [ 156.172891][ T3933] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 156.181092][ T3933] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 156.197921][ T3933] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 156.236313][ T3933] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 156.251798][ T3933] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 156.280806][ T3933] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 156.422474][ T5683] loop2: detected capacity change from 0 to 24 [ 156.520135][ T5685] loop0: detected capacity change from 0 to 512 [ 156.581716][ T5685] EXT4-fs (loop0): Ignoring removed bh option [ 156.623749][ T5685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 156.653469][ T5685] EXT4-fs error (device loop0): __ext4_iget:4861: inode #11: block 393240: comm syz.0.791: invalid block [ 156.754136][ T5685] EXT4-fs (loop0): Remounting filesystem read-only [ 156.811731][ T1078] usb 2-1: USB disconnect, device number 6 [ 156.830954][ T5088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.855710][ T5685] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.791: couldn't read orphan inode 11 (err -117) [ 156.900607][ T5685] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,bh. Quota mode: none. [ 157.008659][ T5088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.020891][ T5693] xt_ecn: cannot match TCP bits for non-tcp packets [ 157.151024][ T5685] EXT4-fs error (device loop0): ext4_dx_csum_verify:501: inode #2: comm syz.0.791: dir seems corrupt? Run e2fsck -D. [ 157.152283][ T5088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.204784][ T5685] EXT4-fs (loop0): Remounting filesystem read-only [ 157.216353][ T5685] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.791: Directory index failed checksum [ 157.352878][ T5088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.825870][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 157.834893][ T5706] tipc: Started in network mode [ 157.839947][ T5706] tipc: Node identity 1, cluster identity 4711 [ 157.846162][ T5706] tipc: Node number set to 1 [ 158.028790][ T5700] loop2: detected capacity change from 0 to 8192 [ 158.472482][ T5700] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 158.537674][ T5700] REISERFS (device loop2): using ordered data mode [ 158.553757][ T5713] loop0: detected capacity change from 0 to 2048 [ 158.567019][ T5700] reiserfs: using flush barriers [ 158.616453][ T5715] loop1: detected capacity change from 0 to 1024 [ 158.623290][ T5700] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.697919][ T5700] REISERFS (device loop2): checking transaction log (loop2) [ 158.732196][ T5697] chnl_net:caif_netlink_parms(): no params data found [ 158.759724][ T5715] hfsplus: failed to load root directory [ 158.770515][ T5713] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.771123][ T5712] kvm: emulating exchange as write [ 158.871042][ T5715] loop1: detected capacity change from 0 to 512 [ 158.893368][ T5724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.894968][ T5713] attempt to access beyond end of device [ 158.894968][ T5713] loop0: rw=524288, want=33554432, limit=2048 [ 159.022127][ T5715] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 159.023970][ T5700] REISERFS (device loop2): Using tea hash to sort names [ 159.053502][ T5700] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 159.067668][ T5715] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 159.084500][ T5713] attempt to access beyond end of device [ 159.084500][ T5713] loop0: rw=0, want=33554432, limit=2048 [ 159.096560][ T5713] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 159.121491][ T5713] NILFS (loop0): error -5 reading inode: ino=12 [ 159.173240][ T5733] attempt to access beyond end of device [ 159.173240][ T5733] loop0: rw=0, want=33554432, limit=2048 [ 159.210468][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.245780][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.297955][ T5733] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 159.318273][ T5697] device bridge_slave_0 entered promiscuous mode [ 159.357189][ T5733] NILFS (loop0): error -5 reading inode: ino=12 [ 159.381829][ T5700] ================================================================== [ 159.390286][ T5700] BUG: KASAN: use-after-free in leaf_paste_entries+0x64b/0x13a0 [ 159.397967][ T5700] Read of size 2 at addr ffff888070023008 by task syz.2.795/5700 [ 159.405706][ T5700] [ 159.408056][ T5700] CPU: 0 PID: 5700 Comm: syz.2.795 Not tainted 5.15.164-syzkaller #0 [ 159.416143][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.426214][ T5700] Call Trace: [ 159.429510][ T5700] [ 159.432448][ T5700] dump_stack_lvl+0x1e3/0x2d0 [ 159.437129][ T5700] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 159.442776][ T5700] ? _printk+0xd1/0x120 [ 159.446962][ T5700] ? __wake_up_klogd+0xcc/0x100 [ 159.451834][ T5700] ? panic+0x860/0x860 [ 159.455920][ T5700] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 159.461419][ T5700] print_address_description+0x63/0x3b0 [ 159.466986][ T5700] ? leaf_paste_entries+0x64b/0x13a0 [ 159.472294][ T5700] kasan_report+0x16b/0x1c0 [ 159.476819][ T5700] ? leaf_paste_entries+0x64b/0x13a0 [ 159.482127][ T5700] leaf_paste_entries+0x64b/0x13a0 [ 159.487247][ T5700] leaf_copy_dir_entries+0x7ec/0xc60 [ 159.492534][ T5700] ? leaf_copy_items_entirely+0xee0/0xee0 [ 159.498245][ T5700] ? validate_chain+0x112/0x5930 [ 159.503192][ T5700] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 159.509185][ T5700] leaf_copy_boundary_item+0xbbe/0x21b0 [ 159.514735][ T5700] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 159.520630][ T5700] ? reacquire_held_locks+0x660/0x660 [ 159.525998][ T5700] leaf_move_items+0xcd0/0x28a0 [ 159.530845][ T5700] ? __lock_acquire+0x1295/0x1ff0 [ 159.535872][ T5700] ? reiserfs_convert_objectid_map_v1+0x450/0x450 [ 159.542301][ T5700] ? journal_mark_dirty+0x22b/0xe30 [ 159.547499][ T5700] ? leaf_delete_items_entirely+0x27a/0x850 [ 159.553402][ T5700] leaf_shift_left+0xba/0x430 [ 159.558081][ T5700] balance_leaf+0x228e/0x12510 [ 159.562904][ T5700] ? do_balance+0x8f0/0x8f0 [ 159.567423][ T5700] ? __mutex_trylock_common+0x17e/0x2e0 [ 159.572968][ T5700] ? __might_sleep+0xc0/0xc0 [ 159.577553][ T5700] ? rcu_lock_release+0x20/0x20 [ 159.582394][ T5700] ? ____kasan_kmalloc+0xd1/0xf0 [ 159.587338][ T5700] ? __mutex_lock_common+0x444/0x25a0 [ 159.592735][ T5700] ? __mutex_unlock_slowpath+0x218/0x750 [ 159.598369][ T5700] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 159.604085][ T5700] ? get_empty_nodes+0x7ec/0xd70 [ 159.609035][ T5700] ? mutex_lock_io_nested+0x60/0x60 [ 159.614238][ T5700] ? write_boundary_block+0x150/0x150 [ 159.619615][ T5700] ? get_neighbors+0x1010/0x1010 [ 159.624544][ T5700] ? create_virtual_node+0x1b7/0x1bf0 [ 159.629911][ T5700] ? __wake_up_bit+0x190/0x190 [ 159.634670][ T5700] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 159.640390][ T5700] ? get_neighbors+0x631/0x1010 [ 159.645274][ T5700] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 159.651336][ T5700] ? fix_nodes+0x7abc/0x8c70 [ 159.655934][ T5700] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 159.662374][ T5700] do_balance+0x309/0x8f0 [ 159.666702][ T5700] ? get_right_neighbor_position+0x210/0x210 [ 159.672680][ T5700] ? reiserfs_delete_item+0x1030/0x1030 [ 159.678230][ T5700] reiserfs_cut_from_item+0x1945/0x2560 [ 159.683788][ T5700] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 159.689381][ T5700] ? search_by_key+0x4730/0x4730 [ 159.694321][ T5700] ? make_cpu_key+0x2b/0x220 [ 159.698903][ T5700] reiserfs_do_truncate+0xa12/0x15b0 [ 159.704197][ T5700] ? reiserfs_delete_object+0x1a0/0x1a0 [ 159.709752][ T5700] ? up_write+0x19d/0x580 [ 159.714091][ T5700] ? journal_begin+0x1ef/0x350 [ 159.718851][ T5700] reiserfs_truncate_file+0x638/0xda0 [ 159.724223][ T5700] ? reiserfs_new_symlink+0x760/0x760 [ 159.729592][ T5700] ? truncate_setsize+0xcb/0xf0 [ 159.734436][ T5700] reiserfs_setattr+0xa4d/0xf90 [ 159.739282][ T5700] ? reiserfs_commit_write+0x5a0/0x5a0 [ 159.744734][ T5700] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 159.750637][ T5700] ? current_time+0x1dc/0x300 [ 159.755313][ T5700] ? atime_needs_update+0x7b0/0x7b0 [ 159.760506][ T5700] ? evm_inode_setattr+0xf7/0x5b0 [ 159.765522][ T5700] ? rwsem_write_trylock+0x166/0x210 [ 159.770812][ T5700] ? bpf_lsm_inode_setattr+0x5/0x10 [ 159.776002][ T5700] ? security_inode_setattr+0xce/0x120 [ 159.781459][ T5700] ? reiserfs_commit_write+0x5a0/0x5a0 [ 159.786913][ T5700] notify_change+0xc6d/0xf50 [ 159.791521][ T5700] do_truncate+0x21c/0x300 [ 159.795927][ T5700] ? rcu_lock_release+0x20/0x20 [ 159.800773][ T5700] ? ima_bprm_check+0x2b0/0x2b0 [ 159.805618][ T5700] ? bpf_lsm_path_truncate+0x5/0x10 [ 159.810810][ T5700] path_openat+0x28a3/0x2f20 [ 159.815439][ T5700] ? do_filp_open+0x460/0x460 [ 159.820150][ T5700] do_filp_open+0x21c/0x460 [ 159.824652][ T5700] ? vfs_tmpfile+0x2e0/0x2e0 [ 159.829251][ T5700] ? _raw_spin_unlock+0x24/0x40 [ 159.834094][ T5700] ? alloc_fd+0x598/0x630 [ 159.838424][ T5700] do_sys_openat2+0x13b/0x4f0 [ 159.843097][ T5700] ? do_sys_open+0x220/0x220 [ 159.847692][ T5700] __x64_sys_openat+0x243/0x290 [ 159.852538][ T5700] ? __ia32_sys_open+0x270/0x270 [ 159.857465][ T5700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.863435][ T5700] ? lockdep_hardirqs_on+0x94/0x130 [ 159.868622][ T5700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.874596][ T5700] do_syscall_64+0x3b/0xb0 [ 159.879014][ T5700] ? clear_bhb_loop+0x15/0x70 [ 159.883687][ T5700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.889576][ T5700] RIP: 0033:0x7fe1f5bae9f9 [ 159.893985][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.913576][ T5700] RSP: 002b:00007fe1f402d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 159.921985][ T5700] RAX: ffffffffffffffda RBX: 00007fe1f5d3cf80 RCX: 00007fe1f5bae9f9 [ 159.929950][ T5700] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 159.937913][ T5700] RBP: 00007fe1f5c1c8ee R08: 0000000000000000 R09: 0000000000000000 [ 159.945882][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.953855][ T5700] R13: 0000000000000000 R14: 00007fe1f5d3cf80 R15: 00007fffecc9c718 [ 159.961840][ T5700] [ 159.964853][ T5700] [ 159.967171][ T5700] The buggy address belongs to the page: [ 159.972799][ T5700] page:ffffea0001c008c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x70023 [ 159.982940][ T5700] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 159.990063][ T5700] raw: 00fff00000000000 ffffea0001c30948 ffffea0001c6f8c8 0000000000000000 [ 159.998638][ T5700] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 160.007214][ T5700] page dumped because: kasan: bad access detected [ 160.013646][ T5700] page_owner tracks the page as freed [ 160.019002][ T5700] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 5601, ts 151773017082, free_ts 153446843489 [ 160.034707][ T5700] get_page_from_freelist+0x322a/0x33c0 [ 160.040255][ T5700] __alloc_pages+0x272/0x700 [ 160.044837][ T5700] alloc_pages_vma+0x39a/0x800 [ 160.049588][ T5700] wp_page_copy+0x221/0x2070 [ 160.054166][ T5700] handle_mm_fault+0x2a3d/0x5950 [ 160.059090][ T5700] exc_page_fault+0x271/0x700 [ 160.063759][ T5700] asm_exc_page_fault+0x22/0x30 [ 160.068607][ T5700] copy_user_enhanced_fast_string+0xe/0x40 [ 160.074405][ T5700] copy_page_to_iter+0x49a/0x10d0 [ 160.079421][ T5700] process_vm_rw+0x886/0xcc0 [ 160.083998][ T5700] __x64_sys_process_vm_readv+0xdc/0xf0 [ 160.089546][ T5700] do_syscall_64+0x3b/0xb0 [ 160.093950][ T5700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.099833][ T5700] page last free stack trace: [ 160.104488][ T5700] free_unref_page_prepare+0xc34/0xcf0 [ 160.109936][ T5700] free_unref_page_list+0x1f7/0x8e0 [ 160.115126][ T5700] release_pages+0x1bb9/0x1f40 [ 160.119884][ T5700] tlb_flush_mmu+0xc8/0x170 [ 160.124376][ T5700] unmap_page_range+0x214d/0x2630 [ 160.129499][ T5700] unmap_vmas+0x1f8/0x390 [ 160.133889][ T5700] exit_mmap+0x3b6/0x670 [ 160.138132][ T5700] __mmput+0x112/0x3b0 [ 160.142195][ T5700] exit_mm+0x688/0x7f0 [ 160.146258][ T5700] do_exit+0x626/0x2480 [ 160.150404][ T5700] do_group_exit+0x144/0x310 [ 160.154990][ T5700] get_signal+0xc66/0x14e0 [ 160.159398][ T5700] arch_do_signal_or_restart+0xc3/0x1890 [ 160.165022][ T5700] exit_to_user_mode_loop+0x97/0x130 [ 160.170299][ T5700] exit_to_user_mode_prepare+0xb1/0x140 [ 160.175840][ T5700] syscall_exit_to_user_mode+0x5d/0x240 [ 160.181387][ T5700] [ 160.183698][ T5700] Memory state around the buggy address: [ 160.189312][ T5700] ffff888070022f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 160.197360][ T5700] ffff888070022f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 160.205434][ T5700] >ffff888070023000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.213479][ T5700] ^ [ 160.217796][ T5700] ffff888070023080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.225847][ T5700] ffff888070023100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 160.233896][ T5700] ================================================================== [ 160.241943][ T5700] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.258068][ T5167] Bluetooth: hci4: command 0x0409 tx timeout [ 160.751893][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.769569][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.777755][ T5697] device bridge_slave_1 entered promiscuous mode [ 160.845379][ T5700] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 160.852608][ T5700] CPU: 0 PID: 5700 Comm: syz.2.795 Tainted: G B 5.15.164-syzkaller #0 [ 160.862051][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 160.872095][ T5700] Call Trace: [ 160.875361][ T5700] [ 160.878278][ T5700] dump_stack_lvl+0x1e3/0x2d0 [ 160.882947][ T5700] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 160.888566][ T5700] ? panic+0x860/0x860 [ 160.892623][ T5700] ? preempt_schedule_common+0xa6/0xd0 [ 160.898065][ T5700] ? preempt_schedule+0xd9/0xe0 [ 160.902903][ T5700] panic+0x318/0x860 [ 160.906784][ T5700] ? check_panic_on_warn+0x1d/0xa0 [ 160.911876][ T5700] ? fb_is_primary_device+0xd0/0xd0 [ 160.917076][ T5700] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 160.923050][ T5700] ? _raw_spin_unlock+0x40/0x40 [ 160.927887][ T5700] ? print_memory_metadata+0xe2/0x140 [ 160.933245][ T5700] check_panic_on_warn+0x7e/0xa0 [ 160.938167][ T5700] ? leaf_paste_entries+0x64b/0x13a0 [ 160.943439][ T5700] end_report+0x6d/0xf0 [ 160.947582][ T5700] kasan_report+0x18e/0x1c0 [ 160.952070][ T5700] ? leaf_paste_entries+0x64b/0x13a0 [ 160.957339][ T5700] leaf_paste_entries+0x64b/0x13a0 [ 160.962442][ T5700] leaf_copy_dir_entries+0x7ec/0xc60 [ 160.967718][ T5700] ? leaf_copy_items_entirely+0xee0/0xee0 [ 160.973445][ T5700] ? validate_chain+0x112/0x5930 [ 160.978367][ T5700] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 160.984335][ T5700] leaf_copy_boundary_item+0xbbe/0x21b0 [ 160.989957][ T5700] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 160.995838][ T5700] ? reacquire_held_locks+0x660/0x660 [ 161.001195][ T5700] leaf_move_items+0xcd0/0x28a0 [ 161.006032][ T5700] ? __lock_acquire+0x1295/0x1ff0 [ 161.011043][ T5700] ? reiserfs_convert_objectid_map_v1+0x450/0x450 [ 161.017448][ T5700] ? journal_mark_dirty+0x22b/0xe30 [ 161.022635][ T5700] ? leaf_delete_items_entirely+0x27a/0x850 [ 161.028518][ T5700] leaf_shift_left+0xba/0x430 [ 161.033187][ T5700] balance_leaf+0x228e/0x12510 [ 161.037953][ T5700] ? do_balance+0x8f0/0x8f0 [ 161.042441][ T5700] ? __mutex_trylock_common+0x17e/0x2e0 [ 161.047976][ T5700] ? __might_sleep+0xc0/0xc0 [ 161.052555][ T5700] ? rcu_lock_release+0x20/0x20 [ 161.057393][ T5700] ? ____kasan_kmalloc+0xd1/0xf0 [ 161.062317][ T5700] ? __mutex_lock_common+0x444/0x25a0 [ 161.067876][ T5700] ? __mutex_unlock_slowpath+0x218/0x750 [ 161.073494][ T5700] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 161.079201][ T5700] ? get_empty_nodes+0x7ec/0xd70 [ 161.084125][ T5700] ? mutex_lock_io_nested+0x60/0x60 [ 161.089308][ T5700] ? write_boundary_block+0x150/0x150 [ 161.094667][ T5700] ? get_neighbors+0x1010/0x1010 [ 161.099601][ T5700] ? create_virtual_node+0x1b7/0x1bf0 [ 161.104960][ T5700] ? __wake_up_bit+0x190/0x190 [ 161.109711][ T5700] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 161.115425][ T5700] ? get_neighbors+0x631/0x1010 [ 161.120266][ T5700] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 161.126321][ T5700] ? fix_nodes+0x7abc/0x8c70 [ 161.130910][ T5700] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 161.137323][ T5700] do_balance+0x309/0x8f0 [ 161.141642][ T5700] ? get_right_neighbor_position+0x210/0x210 [ 161.147616][ T5700] ? reiserfs_delete_item+0x1030/0x1030 [ 161.153157][ T5700] reiserfs_cut_from_item+0x1945/0x2560 [ 161.158696][ T5700] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 161.164258][ T5700] ? search_by_key+0x4730/0x4730 [ 161.169187][ T5700] ? make_cpu_key+0x2b/0x220 [ 161.173765][ T5700] reiserfs_do_truncate+0xa12/0x15b0 [ 161.179044][ T5700] ? reiserfs_delete_object+0x1a0/0x1a0 [ 161.184581][ T5700] ? up_write+0x19d/0x580 [ 161.188904][ T5700] ? journal_begin+0x1ef/0x350 [ 161.193656][ T5700] reiserfs_truncate_file+0x638/0xda0 [ 161.199019][ T5700] ? reiserfs_new_symlink+0x760/0x760 [ 161.204381][ T5700] ? truncate_setsize+0xcb/0xf0 [ 161.209220][ T5700] reiserfs_setattr+0xa4d/0xf90 [ 161.214060][ T5700] ? reiserfs_commit_write+0x5a0/0x5a0 [ 161.219503][ T5700] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 161.225384][ T5700] ? current_time+0x1dc/0x300 [ 161.230047][ T5700] ? atime_needs_update+0x7b0/0x7b0 [ 161.235233][ T5700] ? evm_inode_setattr+0xf7/0x5b0 [ 161.240243][ T5700] ? rwsem_write_trylock+0x166/0x210 [ 161.245511][ T5700] ? bpf_lsm_inode_setattr+0x5/0x10 [ 161.250693][ T5700] ? security_inode_setattr+0xce/0x120 [ 161.256140][ T5700] ? reiserfs_commit_write+0x5a0/0x5a0 [ 161.261586][ T5700] notify_change+0xc6d/0xf50 [ 161.266164][ T5700] do_truncate+0x21c/0x300 [ 161.270565][ T5700] ? rcu_lock_release+0x20/0x20 [ 161.275403][ T5700] ? ima_bprm_check+0x2b0/0x2b0 [ 161.280247][ T5700] ? bpf_lsm_path_truncate+0x5/0x10 [ 161.285432][ T5700] path_openat+0x28a3/0x2f20 [ 161.290020][ T5700] ? do_filp_open+0x460/0x460 [ 161.294695][ T5700] do_filp_open+0x21c/0x460 [ 161.299188][ T5700] ? vfs_tmpfile+0x2e0/0x2e0 [ 161.303793][ T5700] ? _raw_spin_unlock+0x24/0x40 [ 161.308627][ T5700] ? alloc_fd+0x598/0x630 [ 161.312971][ T5700] do_sys_openat2+0x13b/0x4f0 [ 161.317630][ T5700] ? do_sys_open+0x220/0x220 [ 161.322228][ T5700] __x64_sys_openat+0x243/0x290 [ 161.327073][ T5700] ? __ia32_sys_open+0x270/0x270 [ 161.332022][ T5700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.337987][ T5700] ? lockdep_hardirqs_on+0x94/0x130 [ 161.343191][ T5700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.349157][ T5700] do_syscall_64+0x3b/0xb0 [ 161.353570][ T5700] ? clear_bhb_loop+0x15/0x70 [ 161.358233][ T5700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.364108][ T5700] RIP: 0033:0x7fe1f5bae9f9 [ 161.368512][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.388102][ T5700] RSP: 002b:00007fe1f402d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.396503][ T5700] RAX: ffffffffffffffda RBX: 00007fe1f5d3cf80 RCX: 00007fe1f5bae9f9 [ 161.404461][ T5700] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 161.412416][ T5700] RBP: 00007fe1f5c1c8ee R08: 0000000000000000 R09: 0000000000000000 [ 161.420372][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.428326][ T5700] R13: 0000000000000000 R14: 00007fe1f5d3cf80 R15: 00007fffecc9c718 [ 161.436289][ T5700] [ 161.439603][ T5700] Kernel Offset: disabled [ 161.443926][ T5700] Rebooting in 86400 seconds..