last executing test programs: 15.510628429s ago: executing program 1 (id=675): r0 = io_uring_setup(0x2a0c, &(0x7f00000002c0)={0x0, 0x0, 0x81}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 14.394614732s ago: executing program 1 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000040)={0xa}, 0x4c) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={0x0, 0x31, 0x91}, &(0x7f0000000340)={'enc=', 'raw', ' hash=', {'md5-generic\x00'}}, &(0x7f0000000a40)="b49259cac5576cd5e34cf60c11f56a712c261ec60d67289462d1dea2d590e2227f76229b995d8b2480837c904505d4f338", &(0x7f0000000b00)="f9e4a445bde43df44f91513454515f5cc96fe62bd76665f6c7e27872fb9eb19090938692e73f757a8f3d43981035898770977bee35dccdff77c5240979237a348a17a41228679a9dfa80e1d7d98478043a9ae700a97851a0f5a28de0c1418f6e8b7ab035da714cef197a24113f24c95d05e14ae8c5864211d59d58431637e32d5ac5ba2aa3769ef1722193f2a5d7204d9d") r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75425c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x42, 0x0, 0x0, 0x3f}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in=@private, @in6=@mcast2}, {{@in=@dev, @in=@multicast1}, {}, {}, 0x0, 0x0, 0x0, 0xcced83192c498681}}}, 0x128}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 12.664836426s ago: executing program 1 (id=683): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, 0x0) 12.183394615s ago: executing program 1 (id=686): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x146) 11.500224783s ago: executing program 1 (id=691): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e7000000000409050d"], 0x0) 10.81541358s ago: executing program 1 (id=699): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 9.331756303s ago: executing program 4 (id=705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffe, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}}, 0x0) 9.202135264s ago: executing program 4 (id=706): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000580)='./file0/../file0/file0\x00', &(0x7f00000002c0)=ANY=[]) 8.929321926s ago: executing program 4 (id=708): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[]) 8.661831429s ago: executing program 4 (id=710): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4da, &(0x7f0000000740)="$eJzs3d9vFFsdAPDvTLvYQrFFfUASgQimEGXbUoHGB8TEyBOJiu9Y223TdNttulugDdES/wATY9TEJ5588T8wMTz4BxgTE303/oxR0Acf7r17s7uzUMput7l32yHt55MMc87Z2X6/Z8jOzsw52Qng2LoYEXciYiAirkbEaNaeZsvdRmW7td3LF0/mGksS9fr9fyeRZG27/+ap1ltiKCK+fTfie8nbcaubW8uz5XJpPatP1FbWJqqbW9eWVmYXS4ul1enpqZszt2ZuzEz2pZ+Nft3++t9++qNffuP2b7706M8P/nnl+420RrLXO/WjH1pdLzT3RdtgRKwfRLAcDGTrQs8tf3vguQAA0FvjHP9TEfH55vn/aAw0z04BAACAo6T+1ZF4L4moAwAAAEdW2pwDm6TFbC7ASKRpsdiaw/uZOJmWK9XaFxcqG6vzrbmyY1FIF5bKpclsTu1YFJJGfapZfl2/vqs+HRFnIuIno8PNenGuUp7P++YHAAAAHBOndl3//2+0df0PAAAAHDFjeScAAAAAHLg3rv+f5ZcHAAAAcHCM/wMAAMCR9s179xpLvf386/mHmxvLlYfX5kvV5eLKxlxxrrK+VlysVBabv9m30uvvlSuVtS/H6sbjiVqpWpuobm49WKlsrNYeLL3xCGwAAADgEJ258PxPSURsf2W4uTScyDsp4FAkvTbYedfurwebC3C4BvJOAMjNYN4JALkp5J0AkLte9wG6Tt75Xf9zAQAADsb4Z1+N/w+329rj/73vDfQcPQTeYWneCQAAh874PxxfBTMA4dj75O6GJGJ7R/Xjj//X6x8lLwAAoH9GmkuSFrOxwJFI02Ix4nTzsQCFZGGpXJrMrg/+OFr4RKM+1XxnYvQfAAAAAAAAAAAAAAAAAAAAAAAAAPapXk+iDgAAABxpEek/kuxJ/uOjl0d23x84kfx/tLmOiEe/uP+zx7O12vpUo/0/r9prP8/ar3ueOAAAALwL2tfp7et4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOinly+ezLWXt148cXBx//W1iBjrFH8whprroShExMn/JjG4431JRAz0If7204g42yl+0kgrxrIsOsUfzjF+GhGn+hAfjrPnjePPnU6fvzQuNtedP3+N8t/7EL/78S99dfwb6HL8Ob3PGOe294j/NOLcYOfjTzt+0iX+pX3G/+53tra6vVZ/FjHe8fsneSPWRG1lbaK6uXVtaWV2sbRYWp2enro5c2vmxszkxMJSuZT92zHGjz/36w/26v/JLvHHWv2/0K3/l/fZ//f/8PjFp1vFQqf4Vy51/v4924r/1v5Ps+++L2Tll/X6D8azcrLd2p87nf/V78/v1f/5Lv3v9f9/ZZ/9v/qtH/5ln5sCAIegurm1PFsul9YVOhfqdTtK4UgWYmivbfI+MgEAAP32+qQ/70wAAAAAAAAAAAAAAAAAAADg+DqMXxrbHXOPn6MGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjNhwEAAP//LNjXMw==") creat(&(0x7f00000001c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) inotify_init1(0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3e, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0xfdef) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 7.827129478s ago: executing program 4 (id=711): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000002c0)="3fd8499d", 0x33fe0}], 0x1}, 0x0) 7.217066119s ago: executing program 4 (id=714): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) 6.637839007s ago: executing program 3 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1cf, &(0x7f00000024c0)="$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") open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfed7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x0) 5.595247324s ago: executing program 3 (id=720): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}]}]}, 0x20}}, 0x0) 5.422594188s ago: executing program 2 (id=722): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") memfd_secret(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x4, 0xffffffffffffffff, 0xfff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x50}}, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 4.382520385s ago: executing program 3 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.145985845s ago: executing program 2 (id=725): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x80c406, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0x1, 0x2aa, &(0x7f0000000240)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.901091595s ago: executing program 3 (id=727): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x12c, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x118, 0xe, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x12c}}, 0x80) socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./bus\x00', r1, 0x4000, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) dup(r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = dup(r6) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000740)={'lo\x00', {0x2, 0x0, @rand_addr=0x64010100}}) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x8) ftruncate(r9, 0x12081ff) fcntl$setstatus(r1, 0x4, 0x46100) 3.810748513s ago: executing program 2 (id=729): syz_mount_image$fuse(0x0, &(0x7f0000000dc0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@metacopy_on, 0x0}], [], 0x2c}) 3.36014933s ago: executing program 2 (id=730): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xfd, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000700)="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", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 3.216214132s ago: executing program 2 (id=732): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$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") chdir(&(0x7f0000000000)='./file0\x00') sync() truncate(&(0x7f0000000040)='./file0\x00', 0x148452) 2.855108232s ago: executing program 0 (id=734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.437039197s ago: executing program 0 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.272219971s ago: executing program 0 (id=736): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x1008002, &(0x7f0000000c40)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@errors_remount}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x5, 0x5f0, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095d6bd6d12e918a6276630e4d5daba744768053fb3fc312bd16c7762463665adcfcc5cfacf88e535b0c11b8d73deb6011d5b957af8f1ad7faff520a36bdf8b1ed7103adea977566fee3148124ed9707953351e7c1c648c6820738d6f3b5d0103352e66976aa1427e2cd06ce23b5ecfe12f76c3e6dfc0edf35a2aa9fb"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r9, r8, 0x0, 0x80000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000400)}, 0x10) ioperm(0x9, 0x48, 0x1) 1.007940196s ago: executing program 0 (id=737): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x1534, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJckmSS5IkSZIkIWmSIwmJIbekIQnJZUguQ0guE5PG/X6/JCRJkyQhuSXr/xH+Tifnf875nTp+/zPP9/PZH+t5137WXvt93sva28x813FQjUY1qzYgIvi34Pl/kgEgFgD6AcA1ABAAQNn4svHn+nNKTP73DsL+WA+lXekZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzDVMKXMtb9t34/n+24Ltf9mH+/v8vklVq1FerSl3fCSDmn03h+mdvXP//WsE/sxPXP3vj+mdXsVd6Aux/AX7/Zwc5/m4P1z974/ozlp1d6fvP/9qmAOCPHRMi//88BzF/Qs2u8MuPMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg2cdJfogDgYvtKz4sxxhhjjDHGGGN/HJ/jSs+AMcYYY4wxxhhjfz4EARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBx6ApPA7N/kf5L0FXeBm6QXdIhh7QE16BXtAb+kBf6AevQn94DQbA65ACA2EQvAGD4U0YAm/BUBgGw+FtGAHvwEgYBaNhDKTCWBgH78J4eA8mwESYBJMhDabAVHgfpsF0mAEfwEz4EGbBbJgDcyEdPoJ5MB8y4GNYAJ9AJiyERbAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/CdvgMdsBO2AWfw2744l/MP/E3+Z0QEFCgQIUKYzAGYzEW4zAOc2EuzI25MYIRjMd4zIN5MC/mxfyYHxMwAQthITRokJCwMBbGKEaxKBbFYlgMS2AJdOgwEROxNN6MZbAMlsWyWA7LYXmsgBWwElbCylgZq2AVrIpVsRpWwxpYA+/Gu7EH1sbaWAfrYF2se/H2FDbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2ApbYWtsjW2wDSZhErbFttgO22F7bI8dsAN2xI7YCTtj56yXcgC+jC9jd6wmemBP7Im9MCVHH+yLffFV7I+v4Wv4OqbgQByEb+Ab+CYOweM4FIfhcByOlcU7OBJHIYkxmIqpOA7H4XgcjxNwIk7EyZiGU3AqTsVpOB2n4wc4Ez/ED3E2zsa5mI7pOA/nYwZm4AI8gZm4EBfhYlyCS3EJLscVuBxX4WpchWtxLa7H9bgRN+Jm3IxbcSt+igoAP8OduBNTcDfuxj24B/fiXtyH+zALs3A/7scDeAAP4kE8hIfwMB7Bo3gEj+ExPI4n8CSexNN4Gs/gCwnfNPy0+MoUEOcooUSMiBGxIlbEiTiRS+QSuUVuERERES/iRR6RR+QVeUV+kV8kiARRSBQSRhhBIowBABEVUVFUFBXFRDFRQpQQTjiRKBJFaVFalBFlRFlxqygnbhPlRQXR0lUSlURl0cpVEXeKqqKqqCaqixqipqgpaolaoraoLeqIOqKuqCvqiQdEfdED++BD4lxlGomB2FgMwibiMSEvfII1F0OwhWgpWomnxDAcim1Ec5cknhVtxUhsJ/4iRuHzooMYgx3Fi6KT6Cy6iJdEV9HCdRPdxQTsIXqKydhL9BZ9RF8xDauLD3BmzhridZEiBopB4g0xF98UQ8RbYqgYJoaLt8UI8Y4YKUaJ0WKMSBVjxTjxrhgv3hMTxEQxSUwWaWKKmCreF9PEdDFDfCBmig/FLDFbzBFzRbr4SMwT80WG+FgsEJ+ITLFQLBKLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE5+K7eIzsUPsFLvE52K3+ELsEV+KveIrsU98LbLEN2K/+FYcEN+Jg+J7cUj8IA6LI+Ko+FEcEz+J4+KEOClOidPiZ3FG/CLOCi9AohRSSiUDGSNzyFiZU8bJq2QuGVx4dq+V8fI6mUdeL/PKfDK/LCATZEFZSGpppJUkQ1lYFpFReYMsKm+UxWRxWUKWlE6WkonyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmR88eoJqvLGrKmvFsmwz2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kY/JpggA8gnZXD4pW8iWspV8SraWT8s28hmZJJ+VbaW/8BJ5XnaQL8iO8kXZSXaWXeQv8qz0spvsLqEHyJ7yFdlL9pZ9ZF/ZT74q+8vX5AD5ukyRA+Ug+YYcLN+UQ+RbcqgcJofLt+UI+Y4cKUfJ0XKMTJVj5Tj5rhwv35MT5EQ5SU6WaXKK7HNhpBlS/sP8dy+TP+DXo6+XG+RGuUlullvkVrlNfiq3y+1yh9whd8ldcrfcLffIPXKv3Cv3yX0yS2bJ/XK/PCAPyIPyoDwkD8nD8og8JX+Ux+RP8rg8IU/IU/K0PC3PXHgOQKESSiqlAhWjcqhYlVPFqatULnW1yq2uURF1rYpX16k86nqVV+VT+VUBlaAKqkJKK6OsIhWqwqqIiqob8MILRpVQJZVTpVSiuulfyVdF1Y2qmCr+m/yL80v+O/Nrppqp5qq5aqFaqFaqlWqtWqs2qo1KUkmqrWqr2ql2qr1qrzqoDqqj6qg6qU6qi+qiuqquqpvqppJVsuqpXlG9VG/VR/VV/dSrqr/qrwaoASpFpahBapAarAarIWqIGqqGquFquBqhRqiRaqQarUarVJWqxqlxarwaryaoCWqSmqTSVJqaqqaqaWqamqFmqJlqppqlZqk5ao5KV+lqnpqnMlSGWqAWqEy1UC1Ui9VitVQtVcvVcrVSrVSr1Wq1Vq1VmWqD2qA2qU1qi9qitqltarvarnaoHWqX2qV2q91qj9qj9qq9ap/ap7JUltqv9qsD6oA6qA6qQ+qQOqwOq6PqqDqmjqnj6rg6qU6q0+q0OqPOqLPq7LllXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Pogb5AvyB8UCBKCgkGhQAcmsIG4UPRocENQNLgxKBYUD0oEJQMXlAoSg5uC0sHNQZnglqBscGtQLrgtKB9UCCoGlYLbg8rBHUGV4M6ganBXUC2oHtQIagZ3B7WCe4Lawb1BneC+oG5wf1AveCCoHzwYNAgeChoGDweNgkeCxsGjFxevQbM/dHzvj+d70nXT3XWy7qF76ld0L91b99F9dT/9qu6vX9MD9Os6RQ/Ug/QberB+Uw/Rb+mhepgert/WI/Q7eqQepUfrMTpVj9Xj9Lt6vH5PT9AT9SQ9WafpKXqqfl9P09P1DP2Bnqk/1LP0bD1Hz9Xp+iM9T8/XGfpjvUB/ojP1Qr1IL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1/qrfrz/QOvVPv0p/r3foLvUd/qffqr/Q+/bXO0t/o/fpbfUB/pw/q7/Uh/YM+rI/oo/pHfUz/pI/rE/qkPqVP65/1Gf2LPqv9ucX9ua93o4wyMSbGxJpYE2fiTC6Ty+Q2uU3EREy8iTd5TB6T1+Q1+U1+k2ASTCFTyJxDhkxhU9hETdQUNUVNMVPMlDAljDPOJJpEU9qUNmVMGVPWlDXlTDlT3pQ3FU1Fc7u53dxh7jB3mjvNXeYuU91UNzVNTVPL1DK1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0MU1NU9PMNDPNTXPTwrQwrUwr09q0Nm1MG5Nkkkxb09a0M+1Me9PedDAdTEfT0XQynUwX08V0NV1NN9PNJJtk09P0NL1ML9PH9DH9TD/T3/Q3A8wAk2JSzCAzyAw2g80QM8QMNcPM8HMLVfOOGWlGmdFmjEk1qWacGWfGm/FmgplgJplJJs2kmalmqplmppkZZoaZaWaaWWaWmWPmmHSTbuaZeSbDZJgFZoHJNJlmkVlklpglZplZZlaYFWaVWWXWwBqzzqwzG8wGs8lsMlvMFrPNbDPbzXazw+wwu8wus9vsNnvMHrPX7DX7zD6TZbLMfrPfHDAHzEFz0Bwyh8xhc9gcNUfNMXPMHDfHzUlz0pw2+S58X3oTa3PaOHuVzWWvtrntNfZv4/y2gE2wBW0hq21em+83sbHWFrPFbQlb0jpbyibam34Xl7cVbEVbyd5uK9s7bJXfxbXsPba2vdfWsffZmvbu38R17f22nn3E1kcEsI/ZhvZx28g+YhvbR20T+5htah+3re3Tto19xibZZ21b+9zv4nl2vl1hV9pVdrXdYXfak/aUPWC/s6ftz7ab7W772Vdtf/uaHWBftyl24O/i4fZtO8K+Y0faUXa0HfO7eJKdbNPsFDvVvm+n2em/i9PtR3amzbCz7Gw7x879NT43pwz7sV1gP7GZNoBFdrFdYpfaZXb5/53rYrvWrrPr7Xb7md1kN9stdqvddnEhbHfaXfZzu9t+Yffbb+1e+5XdZw/aLPvNr/G58ztov7eH7A/2sD1ij9of7TH7k7qYfe7cf7S/2LPWWyAkIEmKAoqhHBRLOSmOrqJcdDXlpmsoQtdSPF1Heeh6ykv5KD8VoAQqSIVIkyFLRCEVpiIUpRvo4vRKUElyVIoS6SYqTTdTGbqFytKtVI5uo/JUgSpSJbqdKtMdVIXupKp0F1Wj6lSDatLdVIvuodp0L9Wh+6gu3U/16AGqTw9SA3qIGtLD1Igeocb0KDWhx6gpPU7N6AlqTk9SC2pJregpak1PUxt6hpLoWWpLz1E7+gu1p+epA71AHelF6kSdqQu9RF3pZepG3SmZelBPeoV6UW/qQ32pH71K/ek1GkCvUwoNpEH0Bg2mN2kIvUVDaRgNp7dpBL1DI2kUjaYxlEpjaRy9S+PpPZpAE2kSTaY0mkJT6X2aRtNpBn1AM+lDmkWzaQ7NpXT6iObRfMqgj2kBfUKZtJAW0WJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbfUrb6TPaQTtpF31Ou+kL2kNf0l76ivbR15RF39B++pYO0Hd0kL733ekHOkxH6Cj9SMfoJzpOJ+gknaLT9DOdoV/oLHmCEEMRylCFQRgT5ghjw5xhXHhVmCu8OswZXhNGwmvD+PC6ME94fZg3zBfmDwuECWHBsFCoQxPakMIwLBwWCaPhDWHR8MawWFg8LBGWDF1YKkwMbwpLhzeHZcJbwrLhrWG58LawfFghfOS+SuHtYeXwjrBKeGdYNbwrrBZWD2uENcO7w1rhPWHt8N6wTnhfWCa8P6wXPhDWDx8MG4QPhQ3Dh8NG4SNh4/DRsEn4WNg0fDxsFj4RNg+fDFuELcNW4VNh6/DpsE34TJgUPhu2DZ/7tf/++X+/PznsEfYMXwlfCb2/V86Jzo2mRz+KzovOj2ZEP44uiH4SzYwujC6KLo4uiS6NLosuj66Iroyuiq6Oromuja6Lro96XzMHOHTCSadc4GJcDhfrcro4d5XL5a52ud01LuKudfHuOpfHXe/yunwuvyvgElxBV8hpZ5x15EJX2BVxUXeDK+pudMVccVfClXTOlXKJ7nHXzDVzzd2TroVr6Vq5p9xT7mn3tHvGPeOedW3dc66d+4tr7553HdwL7gX3ouvkOrsu7iXX1Y3Nff49mex6up6ul+vl+rg+rp/r5/q7/m6AG+BSXIob5Aa5wW6wG+KGuKFuqBvuhrsRboQb6Ua60W60S3Wpbpwb58a78W6Cm+AmuUkuzaW5qW6qm+amucrTzx9llpvl5rg5Lt2lu3nu3Joxwy1wC1ymy3SL3CK3xC1xy9wyt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc7/DXnB3W73R63x+11e90+97XLct+4/e5bd8B95w66790h94M77I64o+5Hd8z95I67E+6kO+VOu5/dGfeLO+u8S42MjYyLvBsZH3kvMiEyMTIpMjmSFpkSmRp5PzItMj0yI/JBZGbkw8isyOzInMjcSHrko8i8yPxIRuTjyILIJ5HMyMLIosjiyJLI0oj3BTeFvrAv4qP+Bl/U3+iL+eK+hC/pnS/lE/1NvrS/2Zfxt/iy/lZfzt/my/sKvqJ/1Dfxj/mm/nHfzD/hm/snfQvf0rfyT/nW/mnfxj/jk/yzvq1/zrfzf/Ht/fO+g3/Bd/Qv+k6+s+/iX/Jd/cu+m+/uk30P39O/4nv53r6P7+v7+Vd9f/+aH+Bf9yl+oB/k3/CD/Zt+iH/LD/XD/PCYt/2Ii5fIMMan+rF+nH/Xj/fv+Ql+op/kJ/s0P8VP9e/7aX66n+E/8DP9h36Wn+3n+Lk+3X/k5/n5PsN/7Bf4T3ymX3hxXe6X+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/lP/Xb/md/hd/pd/nO/23/h9/gv/V7/ld/nv/ZZ/hu/33/rD/jv/EH/vT/kf/CH/RF/1P/oj/mf/HF/wp/0p/xp/7M/43/xZ/l31hhjjDHG/iljLzXFb3vO387vcZkc8Vc79wSAqzcXyPrr/nMryjV5z7d7i4TWEQB4tnvHhy5u1aolJydf2DdTQlBkNsDF/wk6JwYuxQuhFTwNSdASSl92/r1F59P0D8aP3goQ91c5sXApvjT+lwCYfJnxn3hq+Lxy4cn4/8f4swGKFbmUkxMuxQuh1a/3V1pCmb8z/3zN/8H8c36VCtDir3JywaX40vwT4Ul4DpJ+sydjjDHGGGOMMXZeb1Gx/cXrz4s/8Xm56/MEdSknB1yK/9H1OWOMMcYYY4wxxq685zt3eeaJpKSW7f/1RpX/UdY/3WgMf9bI3Lhsw3uAi48oAPg3BwQ415D/ybPY+B85VsqFt87fdi055QP431HKP6JxuU+L4D/74cQYY4wxxhj7Q11a9P/2cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVDf+JfEbtwBHz+Cp8iY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdsX9nwAAAP//hGT6CA==") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/375], 0x12, 0x9ef, &(0x7f0000000e40)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) 448.736793ms ago: executing program 3 (id=738): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x4004, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6ded1166f95bc118305a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581"], 0x1, 0x309, &(0x7f0000000880)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) 291.087225ms ago: executing program 0 (id=739): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000002380)={@local, @random="365c4cfb3e29", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3c62597a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) 107.741001ms ago: executing program 3 (id=740): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0x40082103, 0x0) 37.799846ms ago: executing program 2 (id=741): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101541, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=742): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x3, 0x6ed, &(0x7f0000000900)="$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") syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='codepage=cp860,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x2d7, &(0x7f00000023c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x3e, 0x0, 0x0, "ffc8efdaddda85822e3a7a5429b982a00a1556a218837456a0a59dc8765f8821eef200cb900272ab9310c44c698ca8c0486d85d57111fc4dc695ac3336d8"}) kernel console output (not intermixed with test programs): 3991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.632575][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.642952][ T5050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.653559][ T5050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.663322][ T5050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.672745][ T5050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.765126][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.786182][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.807518][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.842563][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.851569][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.864697][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.131141][ T5103] loop3: detected capacity change from 0 to 64 [ 178.181046][ T5108] capability: warning: `syz.0.295' uses deprecated v2 capabilities in a way that may be insecure [ 178.539236][ T26] audit: type=1326 audit(1723525153.393:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.4.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73e7f799f9 code=0x0 [ 179.155669][ T5113] netlink: 'syz.0.295': attribute type 298 has an invalid length. [ 179.316453][ T3662] Bluetooth: hci1: command tx timeout [ 179.532070][ T3656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.542336][ T3656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.576440][ T3656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.590105][ T3656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.599370][ T3656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 179.608211][ T3656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.496150][ T5129] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 180.787383][ T5138] loop0: detected capacity change from 0 to 64 [ 180.794889][ T5139] loop2: detected capacity change from 0 to 512 [ 180.862963][ T5139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.876218][ T5139] ext4 filesystem being mounted at /56/bus supports timestamps until 2038 (0x7fffffff) [ 180.916212][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.930129][ T26] audit: type=1326 audit(1723525155.783:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f815fb799f9 code=0x0 [ 181.122291][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 181.279819][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.312738][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.334725][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.350061][ T5133] loop3: detected capacity change from 0 to 40427 [ 181.379370][ T5133] F2FS-fs (loop3): invalid crc value [ 181.394031][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.401868][ T3656] Bluetooth: hci1: command tx timeout [ 181.409626][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.419307][ T5124] device bridge_slave_0 entered promiscuous mode [ 181.428904][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.433312][ T4319] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.436436][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.453812][ T5124] device bridge_slave_1 entered promiscuous mode [ 181.476650][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.488468][ T5133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.497544][ T4319] usb 5-1: SerialNumber: syz [ 181.526710][ T26] audit: type=1326 audit(1723525156.383:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.0.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff15799f9 code=0x0 [ 181.551146][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.579232][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.592253][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.632936][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 181.650617][ T3662] Bluetooth: hci4: command tx timeout [ 181.661585][ T5133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 181.765476][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.800105][ T5124] team0: Port device team_slave_0 added [ 181.810294][ T3653] syz-executor: attempt to access beyond end of device [ 181.810294][ T3653] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.814239][ T5124] team0: Port device team_slave_1 added [ 181.833088][ T4319] usb 5-1: 0:2 : does not exist [ 181.874791][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.916691][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.923687][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.950282][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.988883][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.005707][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.037152][ T3991] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.044953][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.097612][ T4319] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 182.177677][ T4319] usb 5-1: USB disconnect, device number 4 [ 182.259357][ T5124] device hsr_slave_0 entered promiscuous mode [ 182.276957][ T3991] usb 3-1: Using ep0 maxpacket: 32 [ 182.293623][ T5124] device hsr_slave_1 entered promiscuous mode [ 182.301053][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.309062][ T5124] Cannot create hsr debugfs directory [ 182.576430][ T3991] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 182.603991][ T3991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.616149][ T4256] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 182.638050][ T3991] usb 3-1: Product: syz [ 182.642272][ T3991] usb 3-1: Manufacturer: syz [ 182.666195][ T3991] usb 3-1: SerialNumber: syz [ 182.672840][ T3991] usb 3-1: config 0 descriptor?? [ 182.857213][ T4256] usb 4-1: Using ep0 maxpacket: 16 [ 182.949361][ T3991] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 182.976365][ T4256] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 183.016474][ T4256] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.076520][ T4256] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.112645][ T4256] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.151220][ T3991] usb 3-1: USB disconnect, device number 5 [ 183.316585][ T4256] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.347753][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.371920][ T4256] usb 4-1: Product: syz [ 183.381132][ T4256] usb 4-1: Manufacturer: syz [ 183.385786][ T4256] usb 4-1: SerialNumber: syz [ 183.596268][ T3999] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.633958][ T5124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.716752][ T3662] Bluetooth: hci4: command tx timeout [ 183.736755][ T5124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.833237][ T5124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.848509][ T4256] usb 4-1: USB disconnect, device number 12 [ 183.877138][ T3999] usb 5-1: Using ep0 maxpacket: 8 [ 184.014695][ T5124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.030839][ T3999] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 184.052405][ T3999] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 184.090689][ T3999] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.119333][ T3733] udevd[3733]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.187183][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.207469][ T3999] usb 5-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 184.237091][ T3999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.248015][ T3999] usb 5-1: SerialNumber: syz [ 184.279045][ T5190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 184.320419][ T3999] hub 5-1:1.0: bad descriptor, ignoring hub [ 184.339905][ T3999] hub: probe of 5-1:1.0 failed with error -5 [ 184.375357][ T5196] loop0: detected capacity change from 0 to 32768 [ 184.393316][ T5196] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.322 (5196) [ 184.476918][ T46] device hsr_slave_0 left promiscuous mode [ 184.497001][ T46] device hsr_slave_1 left promiscuous mode [ 184.506451][ T5196] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 184.527348][ T5190] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 184.548451][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.566337][ T5196] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 184.575311][ T5196] BTRFS info (device loop0): force clearing of disk cache [ 184.593057][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.613290][ T5196] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 184.623671][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.631315][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.646505][ T5196] BTRFS info (device loop0): use zstd compression, level 3 [ 184.664059][ T5196] BTRFS info (device loop0): using free space tree [ 184.685190][ T46] device bridge_slave_1 left promiscuous mode [ 184.694494][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.716766][ T46] device bridge_slave_0 left promiscuous mode [ 184.723139][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.736384][ T4319] usb 3-1: New USB device found, idVendor=12d1, idProduct=6748, bcdDevice=49.0b [ 184.757574][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.779850][ T4319] usb 3-1: Product: syz [ 184.794937][ T4319] usb 3-1: Manufacturer: syz [ 184.802258][ T4319] usb 3-1: SerialNumber: syz [ 184.819451][ T4319] usb 3-1: config 0 descriptor?? [ 184.860277][ T4319] huawei_cdc_ncm 3-1:0.0: CDC Union missing and no IAD found [ 184.890709][ T46] device veth1_macvtap left promiscuous mode [ 184.897500][ T4319] huawei_cdc_ncm 3-1:0.0: bind() failure [ 184.905658][ T46] device veth0_macvtap left promiscuous mode [ 184.919354][ T46] device veth1_vlan left promiscuous mode [ 184.937429][ T46] device veth0_vlan left promiscuous mode [ 184.973315][ T5196] BTRFS info (device loop0): enabling ssd optimizations [ 185.011471][ T5196] BTRFS info (device loop0): rebuilding free space tree [ 185.132132][ T4319] usb 3-1: USB disconnect, device number 6 [ 185.226488][ T3644] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 185.796182][ T3662] Bluetooth: hci4: command tx timeout [ 187.370842][ T5261] loop2: detected capacity change from 0 to 4096 [ 187.413799][ T5261] ntfs: (device loop2): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 187.443955][ T5261] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 187.464209][ T5261] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 187.474393][ T5266] loop4: detected capacity change from 0 to 4096 [ 187.558600][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.701405][ T5270] loop0: detected capacity change from 0 to 2048 [ 187.741470][ T5270] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.817454][ T5270] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 187.832992][ T46] team0 (unregistering): Port device team_slave_1 removed [ 187.888027][ T3662] Bluetooth: hci4: command tx timeout [ 187.958928][ T5050] EXT4-fs (loop4): unmounting filesystem. [ 188.076629][ T46] team0 (unregistering): Port device team_slave_0 removed [ 188.147022][ T3656] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 188.485889][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.685849][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.205136][ T46] bond0 (unregistering): Released all slaves [ 189.288377][ T3999] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 189.435497][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.459439][ T5283] loop3: detected capacity change from 0 to 64 [ 189.483942][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.493174][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.511045][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.536895][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.556891][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.565954][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.573140][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.610767][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.627006][ T3999] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 189.637894][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.678312][ T3999] usb 5-1: device reset changed ep0 maxpacket size! [ 189.722916][ T3999] usb 5-1: USB disconnect, device number 5 [ 189.763396][ T3999] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 189.832032][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.901850][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.909104][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.721663][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.730773][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.817097][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.856402][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.878912][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.885185][ T5298] usb usb9: usbfs: process 5298 (syz.0.345) did not claim interface 0 before use [ 190.913422][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.953751][ T5124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.022995][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.047747][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.059671][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.076655][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.085672][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.101384][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.156200][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 191.164518][ T3655] Bluetooth: hci3: command 0x0406 tx timeout [ 191.210722][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.256682][ T3999] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.826146][ T3999] usb 5-1: unable to read config index 0 descriptor/all [ 191.833193][ T3999] usb 5-1: can't read configurations, error -71 [ 191.986222][ T3690] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.206626][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.214172][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.238681][ T5326] loop0: detected capacity change from 0 to 47 [ 192.319755][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.350156][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 192.399913][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.424103][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.480765][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.498129][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.520149][ T5124] device veth0_vlan entered promiscuous mode [ 192.526283][ T3690] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=16.64 [ 192.546935][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.547139][ T3690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.555275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.612778][ T5124] device veth1_vlan entered promiscuous mode [ 192.613943][ T3690] usb 4-1: Product: syz [ 192.639784][ T5334] loop0: detected capacity change from 0 to 64 [ 192.650692][ T3690] usb 4-1: Manufacturer: syz [ 192.658348][ T3690] usb 4-1: SerialNumber: syz [ 192.678809][ T3690] usb 4-1: config 0 descriptor?? [ 192.684321][ T5334] hfs: invalid btree extent records [ 192.704295][ T5334] hfs: unable to open extent tree [ 192.714371][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.716766][ T5334] hfs: can't find a HFS filesystem on dev loop0 [ 192.738489][ T3690] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 192.740407][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.755960][ T3690] usb 4-1: No valid video chain found. [ 192.773364][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.797533][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.834502][ T5124] device veth0_macvtap entered promiscuous mode [ 192.857697][ T5124] device veth1_macvtap entered promiscuous mode [ 192.938705][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.002501][ T3995] usb 4-1: USB disconnect, device number 13 [ 193.008635][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.055766][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.067466][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.078470][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.090347][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.100788][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.113408][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.150319][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.176867][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.190942][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.214029][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.239023][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.266792][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.282335][ T5340] mmap: syz.4.363 (5340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.296048][ T3690] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.303797][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.315011][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.350037][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.384633][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.423020][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.433895][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.445075][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.466330][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.495763][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.511852][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.529444][ T5124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.572528][ T5124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.572738][ T5332] loop2: detected capacity change from 0 to 32768 [ 193.625424][ T5124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.650480][ T5332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.360 (5332) [ 193.676192][ T3690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 193.694352][ T5124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.708809][ T3690] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 193.781604][ T5332] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.865218][ T5332] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.886400][ T3690] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 193.903837][ T3690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.928289][ T5332] BTRFS info (device loop2): setting nodatacow, compression disabled [ 193.943939][ T3690] usb 1-1: Product: syz [ 193.958741][ T3690] usb 1-1: Manufacturer: syz [ 193.963397][ T3690] usb 1-1: SerialNumber: syz [ 193.976820][ T3878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.978312][ T5332] BTRFS info (device loop2): turning on flush-on-commit [ 193.996245][ T5332] BTRFS info (device loop2): enabling auto defrag [ 194.013628][ T5332] BTRFS info (device loop2): max_inline at 0 [ 194.056957][ T5332] BTRFS info (device loop2): using free space tree [ 194.058001][ T3690] usb 1-1: config 0 descriptor?? [ 194.069233][ T3878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.125263][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.138761][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.147145][ T3690] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 194.182554][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.198320][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204795][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.214742][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.313963][ T5332] BTRFS info (device loop2): enabling ssd optimizations [ 194.351200][ T4324] usb 1-1: USB disconnect, device number 7 [ 194.494368][ T5366] loop1: detected capacity change from 0 to 512 [ 194.591035][ T5366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.678809][ T5366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.894468][ T3992] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.058646][ T26] audit: type=1804 audit(1723525169.915:24): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.304" name="/newroot/0/file0/bus" dev="loop1" ino=19 res=1 errno=0 [ 195.283399][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 195.633336][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 196.854107][ T5390] loop2: detected capacity change from 0 to 4096 [ 196.890254][ T5390] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 196.967326][ T5390] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 197.274006][ T4324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 198.172393][ T3992] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 198.556293][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 198.628629][ T5388] loop3: detected capacity change from 0 to 40427 [ 198.663730][ T5388] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 198.679064][ T4324] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 198.687743][ T5388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 198.703498][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.735579][ T4324] usb 2-1: config 0 has no interface number 0 [ 198.745857][ T5388] F2FS-fs (loop3): invalid crc value [ 198.773774][ T5388] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.906369][ T4324] usb 2-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 198.920898][ T5388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 198.941900][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.950160][ T5388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.974417][ T4324] usb 2-1: Product: syz [ 198.986090][ T4324] usb 2-1: Manufacturer: syz [ 198.990775][ T4324] usb 2-1: SerialNumber: syz [ 199.019383][ T4324] usb 2-1: config 0 descriptor?? [ 199.061841][ T4105] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 199.084322][ T4324] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 199.306400][ T4105] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 199.436271][ T4324] sonixb 2-1:0.253: Error reading register 00: -71 [ 199.503942][ T4324] usb 2-1: USB disconnect, device number 4 [ 201.061751][ T5432] loop4: detected capacity change from 0 to 131072 [ 201.225568][ T5432] F2FS-fs (loop4): invalid crc value [ 201.473487][ T5432] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.552049][ T5432] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 201.834453][ T5442] loop1: detected capacity change from 0 to 2048 [ 201.856167][ T5442] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.918548][ T5442] syz.1.387: attempt to access beyond end of device [ 201.918548][ T5442] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 201.934386][ T5443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.029041][ T5445] loop2: detected capacity change from 0 to 512 [ 202.076104][ T5445] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.159839][ T5445] EXT4-fs (loop2): 1 truncate cleaned up [ 202.166100][ T5445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.405787][ T5450] loop0: detected capacity change from 0 to 2048 [ 202.485291][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.526656][ T5450] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 202.529064][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 202.644948][ T5450] fscrypt (loop0, inode 13): Error -61 getting encryption context [ 203.059233][ T5460] loop1: detected capacity change from 0 to 2048 [ 203.068928][ T5460] EXT4-fs: Ignoring removed orlov option [ 203.294176][ T5460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 203.427329][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 203.699990][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 203.817839][ T5470] loop3: detected capacity change from 0 to 512 [ 203.901577][ T5470] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.398: casefold flag without casefold feature [ 203.946153][ T5475] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 203.977279][ T5470] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.398: corrupted inode contents [ 203.994582][ T5475] netlink: 17 bytes leftover after parsing attributes in process `syz.1.397'. [ 204.046125][ T5470] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #3: comm syz.3.398: mark_inode_dirty error [ 204.072809][ T5479] loop0: detected capacity change from 0 to 4096 [ 204.088710][ T5470] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.398: bg 0: block 64: padding at end of block bitmap is not set [ 204.124248][ T5479] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.152679][ T5470] Quota error (device loop3): write_blk: dquota write failed [ 204.165744][ T5479] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 204.176477][ T5470] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 204.199556][ T3733] udevd[3733]: incorrect nilfs2 checksum on /dev/loop0 [ 204.237607][ T5482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.249153][ T5470] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.398: Failed to acquire dquot type 0 [ 204.297097][ T5470] Quota error (device loop3): write_blk: dquota write failed [ 204.312728][ T5470] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 204.376257][ T5470] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.398: Failed to acquire dquot type 0 [ 204.481057][ T5470] Quota error (device loop3): write_blk: dquota write failed [ 204.537121][ T5470] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 204.547375][ T5470] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.398: Failed to acquire dquot type 0 [ 204.566463][ T4256] kernel read not supported for file /222/syscall (pid: 4256 comm: kworker/0:9) [ 204.819472][ T5470] EXT4-fs (loop3): 1 orphan inode deleted [ 204.849038][ T5470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.023990][ T5470] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 205.326701][ T5470] Quota error (device loop3): write_blk: dquota write failed [ 205.367586][ T5470] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 205.382033][ T5470] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.398: Failed to acquire dquot type 0 [ 205.476344][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 205.510286][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.519388][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.527936][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.543295][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.552079][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.571664][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.580481][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.592409][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.601139][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.612972][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.624827][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.638527][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.649821][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.662341][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.670424][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.681424][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.695528][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.703456][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.723366][ T3984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.759249][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759317][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759342][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759367][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759391][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759414][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759438][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759462][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759485][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759508][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759532][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759555][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759578][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759602][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.759625][ T4324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.945242][ T4324] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.607999][ T3984] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 206.796293][ T3984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.106442][ T5525] xt_hashlimit: overflow, try lower: 3/0 [ 207.687197][ T3984] usb 5-1: config 0 descriptor?? [ 207.727782][ T3984] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 208.702240][ T3984] usb 5-1: USB disconnect, device number 8 [ 209.618764][ T5539] loop4: detected capacity change from 0 to 2048 [ 209.683742][ T5539] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 209.737222][ T5539] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 210.528568][ T5553] bridge0: port 3(batadv0) entered blocking state [ 210.555750][ T5553] bridge0: port 3(batadv0) entered disabled state [ 210.575181][ T5553] device batadv0 entered promiscuous mode [ 210.602161][ T5553] bridge0: port 3(batadv0) entered blocking state [ 210.608787][ T5553] bridge0: port 3(batadv0) entered forwarding state [ 210.835768][ T3882] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 210.847094][ T3882] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 210.998260][ T4319] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.032506][ T5557] loop2: detected capacity change from 0 to 4096 [ 211.079341][ T5557] ntfs: (device loop2): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 211.140822][ T5557] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 211.160733][ T5544] loop1: detected capacity change from 0 to 32768 [ 211.180393][ T5557] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 211.194926][ T5544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.421 (5544) [ 211.232691][ T5557] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.256258][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 211.270373][ T5544] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.291858][ T5557] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.301487][ T5544] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 211.327682][ T5544] BTRFS info (device loop1): using free space tree [ 211.333634][ T5557] ntfs: volume version 3.1. [ 211.354027][ T5557] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 211.386246][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.417717][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.437971][ T5557] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 211.470688][ T4319] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 211.500473][ T5557] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 211.526257][ T5557] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 211.530899][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.542667][ T5573] overlayfs: upper fs does not support tmpfile. [ 211.586288][ T5557] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 211.587011][ T4319] usb 4-1: config 0 descriptor?? [ 211.688004][ T5544] BTRFS info (device loop1): enabling ssd optimizations [ 211.859748][ T5591] loop0: detected capacity change from 0 to 512 [ 211.900818][ T5591] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 211.956623][ T5591] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 212.067450][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.091574][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.148190][ T4319] hid (null): unknown global tag 0xd [ 212.153589][ T4319] hid (null): unknown global tag 0xd [ 212.195401][ T4319] hid (null): report_id 40203 is invalid [ 212.205847][ T4319] hid (null): invalid report_size -1862471209 [ 212.222924][ T4319] hid (null): invalid report_size -1217885453 [ 212.229924][ T5124] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.248161][ T4319] hid (null): bogus close delimiter [ 212.253882][ T4319] hid (null): unknown global tag 0xc [ 212.261347][ T4319] hid (null): global environment stack overflow [ 212.271393][ T5598] loop2: detected capacity change from 0 to 1024 [ 212.366569][ T3999] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.383491][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 212.467007][ T4319] usb 4-1: string descriptor 0 read error: -71 [ 212.537558][ T4319] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 212.651250][ T4319] letsketch: probe of 0003:6161:4D15.0004 failed with error -32 [ 212.702065][ T5598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.920659][ T4319] usb 4-1: USB disconnect, device number 14 [ 213.393743][ T5607] netlink: 100 bytes leftover after parsing attributes in process `syz.3.440'. [ 213.819247][ T3999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.123354][ T3999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.231545][ T3999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.296900][ T5612] syz.0.441 sent an empty control message without MSG_MORE. [ 214.306658][ T3999] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.328556][ T3999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.368512][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 214.379338][ T3999] usb 5-1: config 0 descriptor?? [ 214.503588][ T5623] loop3: detected capacity change from 0 to 512 [ 215.558825][ T3999] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 215.734820][ T5633] Invalid ELF header magic: != ELF [ 215.759474][ T3999] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 215.958945][ T5631] loop3: detected capacity change from 0 to 16 [ 216.370093][ T5631] erofs: (device loop3): mounted with root inode @ nid 36. [ 216.734134][ T3999] usb 5-1: USB disconnect, device number 9 [ 216.766079][ T3655] Bluetooth: hci0: command 0x0406 tx timeout [ 217.093187][ T5654] loop3: detected capacity change from 0 to 2048 [ 217.253395][ T5661] syz.0.451[5661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.253877][ T5661] syz.0.451[5661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.633118][ T5657] loop1: detected capacity change from 0 to 1024 [ 218.087151][ T5654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.097091][ T5657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.249510][ T5674] loop2: detected capacity change from 0 to 512 [ 218.302819][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 218.309983][ T5674] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.076933][ T5674] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 219.196169][ T4319] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.240036][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 219.339519][ T5674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 219.420881][ T5665] loop4: detected capacity change from 0 to 32768 [ 219.438043][ T5674] System zones: 1-12 [ 219.449794][ T5674] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.458: corrupted in-inode xattr [ 219.476104][ T5674] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.458: couldn't read orphan inode 15 (err -117) [ 219.539963][ T5674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.542001][ T5665] XFS (loop4): Mounting V5 Filesystem [ 219.599847][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 219.609220][ T4319] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.631847][ T5691] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.641702][ T5691] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.676342][ T5691] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.723841][ T5691] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.736275][ T4319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.749770][ T5674] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.458: Unrecognised inode hash code 4 [ 219.761869][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.767848][ T5674] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended [ 219.769930][ T4319] usb 1-1: SerialNumber: syz [ 219.816881][ T5692] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.458: Unrecognised inode hash code 4 [ 219.819554][ T5665] XFS (loop4): Ending clean mount [ 219.841732][ T5692] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended [ 219.898947][ T5692] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.458: Unrecognised inode hash code 4 [ 219.915869][ T5665] XFS (loop4): Quotacheck needed: Please wait. [ 219.931660][ T5692] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended [ 219.954657][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 219.954676][ T26] audit: type=1326 audit(1723525194.805:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfffd799f9 code=0x7ffc0000 [ 220.029423][ T26] audit: type=1326 audit(1723525194.805:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfffd799f9 code=0x7ffc0000 [ 220.052846][ T5665] XFS (loop4): Quotacheck: Done. [ 220.127661][ T5699] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.137502][ T5699] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.146320][ T5699] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.155930][ T5699] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.158626][ T26] audit: type=1326 audit(1723525194.805:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fcfffd799f9 code=0x7ffc0000 [ 220.223958][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 220.328642][ T26] audit: type=1326 audit(1723525194.805:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfffd799f9 code=0x7ffc0000 [ 220.372308][ T5672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.390474][ T5050] XFS (loop4): Unmounting Filesystem [ 220.409923][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.451601][ T26] audit: type=1326 audit(1723525194.805:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfffd799f9 code=0x7ffc0000 [ 220.502949][ T5672] netlink: 19 bytes leftover after parsing attributes in process `syz.0.457'. [ 220.516191][ T26] audit: type=1800 audit(1723525194.855:31): pid=5692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="bus" dev="loop2" ino=20 res=0 errno=0 [ 220.726487][ T4319] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 220.779914][ T4319] usb 1-1: USB disconnect, device number 8 [ 221.126850][ T5701] loop1: detected capacity change from 0 to 32768 [ 221.150198][ T5701] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.463 (5701) [ 221.255190][ T5701] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.310402][ T5701] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 221.367444][ T5701] BTRFS info (device loop1): setting nodatacow, compression disabled [ 221.402929][ T5701] BTRFS info (device loop1): force clearing of disk cache [ 221.426311][ T5701] BTRFS info (device loop1): setting datacow [ 221.451143][ T5701] BTRFS info (device loop1): doing ref verification [ 221.481862][ T5701] BTRFS info (device loop1): turning off barriers [ 221.496313][ T5701] BTRFS info (device loop1): enabling ssd optimizations [ 221.510523][ T5701] BTRFS info (device loop1): using spread ssd allocation scheme [ 221.565414][ T5701] BTRFS info (device loop1): not using ssd optimizations [ 221.626113][ T4255] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.631945][ T5701] BTRFS info (device loop1): not using spread ssd allocation scheme [ 221.693588][ T5701] BTRFS info (device loop1): using free space tree [ 221.777874][ T5733] loop0: detected capacity change from 0 to 4096 [ 221.832210][ T5733] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 222.078592][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.191592][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.244148][ T5701] BTRFS info (device loop1): rebuilding free space tree [ 222.313063][ T4255] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 222.393381][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.447409][ T5753] loop2: detected capacity change from 0 to 64 [ 222.525375][ T4255] usb 5-1: config 0 descriptor?? [ 222.633314][ T5124] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.638099][ T5733] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 222.742267][ T5733] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 222.859584][ T5759] netlink: 'syz.3.481': attribute type 22 has an invalid length. [ 223.042304][ T4255] wacom 0003:056A:00D0.0006: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 223.069363][ T4255] wacom 0003:056A:00D0.0006: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 223.093244][ T4255] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0006/input/input11 [ 223.262660][ T4255] usb 5-1: USB disconnect, device number 10 [ 223.546775][ T5766] loop1: detected capacity change from 0 to 2048 [ 223.760099][ T5766] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 223.792834][ T5773] loop2: detected capacity change from 0 to 256 [ 224.016271][ T5766] UDF-fs: Scanning with blocksize 512 failed [ 224.305318][ T5766] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 224.400101][ T5766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.626770][ T5779] loop0: detected capacity change from 0 to 512 [ 224.745632][ T5779] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 224.772727][ T5779] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.486: invalid indirect mapped block 8 (level 2) [ 224.833986][ T5784] loop2: detected capacity change from 0 to 128 [ 224.857688][ T5779] EXT4-fs (loop0): Remounting filesystem read-only [ 224.883371][ T5779] EXT4-fs (loop0): 1 truncate cleaned up [ 224.910517][ T5779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.184057][ T5761] loop3: detected capacity change from 0 to 32768 [ 225.600078][ T5761] XFS (loop3): Mounting V5 Filesystem [ 225.672685][ T5788] loop2: detected capacity change from 0 to 8192 [ 225.718048][ T5761] XFS (loop3): Ending clean mount [ 225.778093][ T5788] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.826766][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 225.886905][ T5788] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 225.906873][ T5788] REISERFS (device loop2): using ordered data mode [ 225.913439][ T5788] reiserfs: using flush barriers [ 225.969545][ T5788] REISERFS warning (device loop2): sh-457 journal_init_dev: journal_init_dev: Cannot open './busacl': -2 [ 226.006113][ T5788] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device [ 226.042558][ T3653] XFS (loop3): Unmounting Filesystem [ 226.058826][ T5788] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 226.194667][ T5803] loop4: detected capacity change from 0 to 8192 [ 226.215157][ T5803] FAT-fs (loop4): Unrecognized mount option "§R^Q1 [ 226.215157][ T5803] Ä" or missing value [ 226.220793][ T5808] loop0: detected capacity change from 0 to 512 [ 226.275848][ T5808] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.495: inline data xattr refers to an external xattr inode [ 226.293499][ T5808] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.495: couldn't read orphan inode 12 (err -117) [ 226.306313][ T5808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.306400][ T3733] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.332558][ T5808] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.495: Directory hole found for htree leaf block 0 [ 226.435193][ T5789] loop1: detected capacity change from 0 to 32768 [ 227.266285][ T5789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.491 (5789) [ 227.591196][ T5789] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.606369][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.632938][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 227.648337][ T5789] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 227.676624][ T5789] BTRFS info (device loop1): setting nodatacow, compression disabled [ 227.716553][ T5789] BTRFS info (device loop1): force clearing of disk cache [ 227.740639][ T5789] BTRFS info (device loop1): setting datacow [ 227.776326][ T5789] BTRFS info (device loop1): doing ref verification [ 227.806873][ T5789] BTRFS info (device loop1): turning off barriers [ 227.813411][ T5789] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.839386][ T5789] BTRFS info (device loop1): use zstd compression, level 3 [ 227.856322][ T5789] BTRFS info (device loop1): enabling ssd optimizations [ 227.876409][ T5789] BTRFS info (device loop1): using spread ssd allocation scheme [ 227.905000][ T5789] BTRFS info (device loop1): not using ssd optimizations [ 227.961907][ T5789] BTRFS info (device loop1): not using spread ssd allocation scheme [ 228.005662][ T5789] BTRFS info (device loop1): using free space tree [ 228.317170][ T22] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 229.778409][ T5845] xt_hashlimit: overflow, try lower: 3/0 [ 230.318819][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.327039][ T22] usb 3-1: Product: syz [ 230.331245][ T22] usb 3-1: Manufacturer: syz [ 230.335878][ T22] usb 3-1: SerialNumber: syz [ 230.342646][ T22] usb 3-1: config 0 descriptor?? [ 230.371182][ T22] usb 3-1: can't set config #0, error -71 [ 230.378398][ T22] usb 3-1: USB disconnect, device number 7 [ 230.460601][ T5789] BTRFS error (device loop1): open_ctree failed [ 230.857041][ T5822] loop4: detected capacity change from 0 to 32768 [ 231.143599][ T5865] loop2: detected capacity change from 0 to 512 [ 231.221130][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.817658][ T5865] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.509: inline data xattr refers to an external xattr inode [ 232.022218][ T5865] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.509: couldn't read orphan inode 12 (err -117) [ 232.036628][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.047352][ T5865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.065723][ T5865] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.509: Directory hole found for htree leaf block 0 [ 232.372302][ T5878] loop3: detected capacity change from 0 to 64 [ 232.985490][ T5878] hfs: found bad thread record in catalog [ 233.024626][ T5878] hfs: get root inode failed [ 233.034836][ T5881] loop1: detected capacity change from 0 to 256 [ 233.123827][ T5881] FAT-fs (loop1): Directory bread(block 64) failed [ 233.161286][ T5881] FAT-fs (loop1): Directory bread(block 65) failed [ 233.196349][ T5881] FAT-fs (loop1): Directory bread(block 66) failed [ 233.198176][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 233.203007][ T5881] FAT-fs (loop1): Directory bread(block 67) failed [ 233.216295][ T5881] FAT-fs (loop1): Directory bread(block 68) failed [ 233.222865][ T5881] FAT-fs (loop1): Directory bread(block 69) failed [ 233.230154][ T5881] FAT-fs (loop1): Directory bread(block 70) failed [ 233.248365][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.258021][ T5881] FAT-fs (loop1): Directory bread(block 71) failed [ 233.265661][ T5881] FAT-fs (loop1): Directory bread(block 72) failed [ 233.286148][ T5881] FAT-fs (loop1): Directory bread(block 73) failed [ 233.464764][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.662305][ T5895] trusted_key: encrypted_key: master key parameter '' is invalid [ 233.848785][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.859675][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.902054][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.912663][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.922453][ T3655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.930007][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.276337][ T5904] loop2: detected capacity change from 0 to 8192 [ 234.392606][ T5904] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.481641][ T5913] 9pnet_fd: Insufficient options for proto=fd [ 235.161474][ T5904] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 235.216347][ T9] tipc: Left network mode [ 235.262901][ T5904] REISERFS (device loop2): using ordered data mode [ 235.269604][ T5904] reiserfs: using flush barriers [ 235.318830][ T5904] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.395918][ T5917] loop1: detected capacity change from 0 to 512 [ 235.416657][ T5904] REISERFS (device loop2): checking transaction log (loop2) [ 235.443219][ T5904] REISERFS (device loop2): Using r5 hash to sort names [ 235.527217][ T5917] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.527: inline data xattr refers to an external xattr inode [ 235.560030][ T5904] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=1075839702, len=17 - odd [ 235.662472][ T5917] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.527: couldn't read orphan inode 12 (err -117) [ 235.680057][ T5917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.771138][ T5917] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.527: Directory hole found for htree leaf block 0 [ 236.211737][ T3659] Bluetooth: hci2: command tx timeout [ 237.352723][ T5946] loop2: detected capacity change from 0 to 512 [ 237.424376][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.534: casefold flag without casefold feature [ 237.463012][ T5946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.534: casefold flag without casefold feature [ 237.491790][ T5946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.534: ea_inode with extended attributes [ 237.525204][ T5946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.534: error while reading EA inode 12 err=-117 [ 237.551644][ T5946] EXT4-fs (loop2): 1 orphan inode deleted [ 237.596161][ T5946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 237.609162][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 237.651723][ T5900] chnl_net:caif_netlink_parms(): no params data found [ 237.804737][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 238.286458][ T3655] Bluetooth: hci2: command tx timeout [ 238.410913][ T5962] loop4: detected capacity change from 0 to 16 [ 238.711816][ T5962] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 238.776172][ T5962] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 238.805101][ T5962] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 238.865020][ T5962] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 238.977712][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.984910][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.007586][ T5959] loop4: detected capacity change from 0 to 512 [ 239.017796][ T5959] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 239.024651][ T5959] EXT4-fs (loop4): mount failed [ 239.027574][ T5900] device bridge_slave_0 entered promiscuous mode [ 239.056122][ T3691] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.095878][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.106922][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.146358][ T3694] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.165872][ T5900] device bridge_slave_1 entered promiscuous mode [ 239.339995][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.419703][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.429104][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 239.436861][ T3691] usb 3-1: config index 0 descriptor too short (expected 26148, got 36) [ 239.471063][ T3691] usb 3-1: config 0 has too many interfaces: 208, using maximum allowed: 32 [ 239.487218][ T3691] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 239.507309][ T3691] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 208 [ 239.546502][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 239.566091][ T3694] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 239.569699][ T5992] loop3: detected capacity change from 0 to 512 [ 239.585501][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.590997][ T5992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.606556][ T3691] usb 3-1: New USB device found, idVendor=055f, idProduct=00d0, bcdDevice= 0.00 [ 239.621510][ T3691] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 239.641316][ T3694] usb 2-1: config 0 descriptor?? [ 239.644431][ T3691] usb 3-1: Manufacturer: syz [ 239.653432][ T3691] usb 3-1: config 0 descriptor?? [ 239.694494][ T5992] EXT4-fs (loop3): 1 truncate cleaned up [ 239.713915][ T5992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.732683][ T5900] team0: Port device team_slave_0 added [ 239.795565][ T5900] team0: Port device team_slave_1 added [ 239.814526][ T9] device hsr_slave_0 left promiscuous mode [ 239.846983][ T9] device hsr_slave_1 left promiscuous mode [ 239.853652][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.876210][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.896862][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.904376][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.917982][ T4316] usb 3-1: USB disconnect, device number 8 [ 239.931717][ T5992] deleting an unspecified loop device is not supported. [ 239.968706][ T9] device bridge_slave_1 left promiscuous mode [ 239.975037][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.996901][ T9] device bridge_slave_0 left promiscuous mode [ 240.013187][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.076104][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 240.107881][ T9] device veth0 left promiscuous mode [ 240.120089][ T9] device veth1_macvtap left promiscuous mode [ 240.137719][ T9] device veth0_macvtap left promiscuous mode [ 240.143892][ T9] device veth1_vlan left promiscuous mode [ 240.151590][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.185550][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.186128][ T9] device veth0_vlan left promiscuous mode [ 240.246960][ T3694] hid (null): report_id 0 is invalid [ 240.257756][ T3694] hid (null): report_id 2838798905 is invalid [ 240.293499][ T3694] hid (null): unknown global tag 0xc [ 240.316112][ T3694] hid (null): unknown global tag 0xa5 [ 240.356392][ T3694] hid (null): unknown global tag 0xd [ 240.361893][ T3694] hid (null): unknown global tag 0xc [ 240.367720][ T3655] Bluetooth: hci2: command tx timeout [ 240.389720][ T3694] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 240.406116][ T3694] hid-generic 0003:0158:0100.0007: unexpected long global item [ 240.416407][ T3694] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 240.675182][ T4318] usb 2-1: USB disconnect, device number 5 [ 240.820520][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 240.867698][ T6017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.643974][ T9] bond1 (unregistering): Released all slaves [ 242.438123][ T3655] Bluetooth: hci2: command tx timeout [ 242.959887][ T6031] loop1: detected capacity change from 0 to 256 [ 243.281871][ T9] team0 (unregistering): Port device vlan2 removed [ 243.975818][ T6048] loop2: detected capacity change from 0 to 512 [ 244.207592][ T6048] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.556: corrupted in-inode xattr [ 244.253485][ T6048] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.556: couldn't read orphan inode 15 (err -117) [ 244.351115][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.376949][ T6048] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.556: Directory hole found for htree leaf block 0 [ 244.402709][ T6048] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.556: Directory hole found for htree leaf block 0 [ 244.826117][ T6066] overlayfs: workdir and upperdir must reside under the same mount [ 245.554910][ T6067] tty tty22: ldisc open failed (-12), clearing slot 21 [ 246.439690][ T9] team0 (unregistering): Port device team_slave_1 removed [ 246.508480][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 246.637778][ T9] team0 (unregistering): Port device team_slave_0 removed [ 246.884809][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.919173][ T6080] loop2: detected capacity change from 0 to 4096 [ 246.934952][ T6080] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 247.067688][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.092397][ T6084] loop1: detected capacity change from 0 to 512 [ 247.167474][ T6084] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.214120][ T6084] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 247.284892][ T6084] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 247.325925][ T6084] System zones: 0-2, 18-18, 34-34 [ 247.330880][ T3992] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 247.390184][ T3992] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 247.405803][ T3992] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 247.415646][ T6084] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 247.520881][ T6084] EXT4-fs (loop1): 1 truncate cleaned up [ 247.535731][ T6084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 247.649099][ T6090] loop2: detected capacity change from 0 to 512 [ 247.665290][ T26] audit: type=1800 audit(1723525222.513:32): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.566" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 247.744132][ T6090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.766196][ T6090] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038 (0x7fffffff) [ 247.818040][ T3659] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 247.848201][ T6084] EXT4-fs error (device loop1): ext4_get_first_dir_block:3589: inode #12: block 13: comm syz.1.566: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 247.906211][ T6084] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: comm syz.1.566: directory missing '.' [ 248.182891][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 248.489091][ T9] bond0 (unregistering): Released all slaves [ 249.463455][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.526164][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.559937][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 249.572222][ T6111] loop1: detected capacity change from 0 to 512 [ 249.616160][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.630525][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.639927][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.784362][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.827735][ T6111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.876479][ T6111] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 250.257695][ T6124] loop3: detected capacity change from 0 to 2048 [ 250.267136][ T6124] EXT4-fs: Ignoring removed orlov option [ 250.606947][ T6124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.934767][ T5900] device hsr_slave_0 entered promiscuous mode [ 250.996757][ T5900] device hsr_slave_1 entered promiscuous mode [ 251.018417][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 251.179749][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 251.434926][ T6136] loop2: detected capacity change from 0 to 256 [ 251.589673][ T6120] loop4: detected capacity change from 0 to 32768 [ 251.624125][ T26] audit: type=1326 audit(1723525226.473:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815fb799f9 code=0x0 [ 251.671982][ T6120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.574 (6120) [ 251.735819][ T6120] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.856425][ T6120] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 251.932650][ T6120] BTRFS info (device loop4): using free space tree [ 252.692408][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 253.366986][ T6120] BTRFS error (device loop4): open_ctree failed [ 253.514138][ C0] eth0: bad gso: type: 1, size: 1408 [ 253.922079][ T6181] loop3: detected capacity change from 0 to 128 [ 253.958652][ T6181] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 253.988979][ T6182] loop4: detected capacity change from 0 to 164 [ 254.476868][ T6190] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.587'. [ 254.491996][ T6184] loop2: detected capacity change from 0 to 8192 [ 254.505188][ T6190] netlink: zone id is out of range [ 254.522586][ T6184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.554300][ T6190] netlink: zone id is out of range [ 254.626455][ T6190] netlink: zone id is out of range [ 254.631757][ T6190] netlink: zone id is out of range [ 254.656185][ T6184] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 254.716250][ T6184] REISERFS (device loop2): using ordered data mode [ 255.066103][ T6184] reiserfs: using flush barriers [ 255.295851][ T6184] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.316709][ T6190] netlink: zone id is out of range [ 255.321993][ T6190] netlink: zone id is out of range [ 255.367658][ T6190] netlink: zone id is out of range [ 255.404139][ T6190] netlink: zone id is out of range [ 255.444658][ T6190] netlink: zone id is out of range [ 255.496577][ T6184] REISERFS (device loop2): checking transaction log (loop2) [ 255.616294][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.637430][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643811][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688459][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.746545][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.835427][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.979288][ T6184] REISERFS (device loop2): Using tea hash to sort names [ 256.034517][ T6184] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 256.066114][ T3666] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 256.174510][ T6210] loop1: detected capacity change from 0 to 1024 [ 256.189538][ T6210] EXT4-fs: Ignoring removed orlov option [ 256.214960][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.232438][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.283628][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.297155][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.298445][ T6210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c118, mo2=0002] [ 256.329706][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.356167][ T3666] usb 4-1: Using ep0 maxpacket: 32 [ 256.363973][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.377228][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.404849][ T6210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 256.406257][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.420497][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.516365][ T3666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.544793][ T3666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.559949][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.582194][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.590690][ T3666] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 256.614031][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.633690][ T3666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.647939][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.655104][ T5763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.693507][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.711591][ T3666] usb 4-1: config 0 descriptor?? [ 256.831226][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.867703][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.882327][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.709508][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.727159][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.750087][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.758878][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.768159][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.787977][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.884966][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.938214][ T3666] kye 0003:0458:4018.0008: item fetching failed at offset 0/2 [ 257.951673][ T3666] kye 0003:0458:4018.0008: parse failed [ 257.966175][ T3666] kye: probe of 0003:0458:4018.0008 failed with error -22 [ 257.968821][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.575733][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 258.814466][ T3666] usb 4-1: USB disconnect, device number 15 [ 259.351641][ T6250] loop2: detected capacity change from 0 to 2048 [ 259.440055][ T6250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.678033][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.693477][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.720152][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.794855][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.822284][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.937826][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.960127][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.993698][ T5900] device veth0_vlan entered promiscuous mode [ 260.015064][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.030052][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.053474][ T5900] device veth1_vlan entered promiscuous mode [ 260.157027][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.174665][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.234624][ T5900] device veth0_macvtap entered promiscuous mode [ 260.290038][ T5900] device veth1_macvtap entered promiscuous mode [ 260.385244][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.493435][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.552804][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.594593][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.641302][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.673005][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.710131][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.750318][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.792859][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.842955][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.872745][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.952016][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.984483][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.014969][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.066333][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.086020][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.115273][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.151224][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.291094][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.332113][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.366305][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.441876][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.480084][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.496964][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.642416][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.671996][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.682391][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.711424][ T5900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.120160][ T3711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.353300][ T3880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.383297][ T3880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.460719][ T3711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.594590][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.615461][ T6306] loop3: detected capacity change from 0 to 256 [ 262.702741][ T6296] loop1: detected capacity change from 0 to 40427 [ 262.740450][ T3711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.783513][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.799181][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.818164][ T6306] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 262.831258][ T6296] F2FS-fs (loop1): invalid crc value [ 262.885151][ T3711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.929953][ T6296] F2FS-fs (loop1): Found nat_bits in checkpoint [ 262.969812][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.180431][ T6296] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 263.292799][ T6296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 263.395090][ T6296] syz.1.614: attempt to access beyond end of device [ 263.395090][ T6296] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.477394][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.618'. [ 263.498468][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.511072][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.522036][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.553541][ T3662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.562538][ T3662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.576321][ T3662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.184261][ T6325] loop0: detected capacity change from 0 to 32768 [ 265.208226][ T6347] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 265.334809][ T6325] XFS (loop0): Mounting V5 Filesystem [ 265.463989][ T6325] XFS (loop0): Ending clean mount [ 265.547362][ T6321] chnl_net:caif_netlink_parms(): no params data found [ 265.604257][ T6372] netlink: 'syz.1.627': attribute type 11 has an invalid length. [ 265.626090][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.627'. [ 265.636847][ T3662] Bluetooth: hci1: command tx timeout [ 265.645473][ T6375] loop2: detected capacity change from 0 to 256 [ 265.726586][ T6375] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 266.000544][ T5900] XFS (loop0): Unmounting Filesystem [ 266.322932][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.354955][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.436378][ T6321] device bridge_slave_0 entered promiscuous mode [ 266.674446][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.683307][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.696700][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.705102][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.717928][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.728729][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.739940][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.750516][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.761894][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.772888][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.783802][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.857003][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.921859][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.956170][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.964958][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 266.976460][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.006135][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.014131][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.022152][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.032430][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.040204][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.048376][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.056197][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.064312][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.072023][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.080757][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.088536][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.096828][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.104506][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.112527][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.120342][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.128356][ T3692] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 267.202902][ T3692] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.360517][ T6396] loop1: detected capacity change from 0 to 16 [ 267.390435][ T6396] erofs: (device loop1): mounted with root inode @ nid 36. [ 267.431311][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.442936][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.446804][ T6399] loop3: detected capacity change from 0 to 512 [ 267.479536][ T6321] device bridge_slave_1 entered promiscuous mode [ 267.646708][ T3692] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 267.660373][ T6399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 268.039163][ T3692] usb 1-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 268.304148][ T3662] Bluetooth: hci1: command tx timeout [ 268.312494][ T6399] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 268.331656][ T3692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.340979][ T3711] device hsr_slave_0 left promiscuous mode [ 268.440748][ T3711] device hsr_slave_1 left promiscuous mode [ 268.460561][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.478532][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.489676][ T3692] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.489713][ T3692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.489737][ T3692] usb 1-1: SerialNumber: syz [ 268.528036][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 268.550714][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.550747][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.566848][ T3711] device bridge_slave_1 left promiscuous mode [ 268.567045][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.574441][ T3711] device bridge_slave_0 left promiscuous mode [ 268.574601][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.668647][ T3711] device veth1_macvtap left promiscuous mode [ 268.668714][ T3711] device veth0_macvtap left promiscuous mode [ 268.668837][ T3711] device veth1_vlan left promiscuous mode [ 268.668937][ T3711] device veth0_vlan left promiscuous mode [ 268.759799][ T3692] usb 1-1: 0:2 : does not exist [ 269.097746][ T6422] SET target dimension over the limit! [ 269.202805][ T22] usb 1-1: USB disconnect, device number 9 [ 269.764752][ T3711] team0 (unregistering): Port device team_slave_1 removed [ 269.867673][ T3711] team0 (unregistering): Port device team_slave_0 removed [ 269.922299][ T3711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.974103][ T3711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.366738][ T3662] Bluetooth: hci1: command tx timeout [ 270.494812][ T3711] bond0 (unregistering): Released all slaves [ 270.590505][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 270.623932][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.672478][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.852740][ T6321] team0: Port device team_slave_0 added [ 270.896721][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'. [ 270.940763][ T6321] team0: Port device team_slave_1 added [ 271.062260][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.086675][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.192096][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.209678][ T6451] 9pnet: Found fid 0 not clunked [ 271.213110][ T6453] loop1: detected capacity change from 0 to 16 [ 271.231939][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.269767][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.287884][ T6453] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 271.377070][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.382974][ T6453] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 271.483101][ T6453] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 271.510019][ T6453] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 271.539662][ T6321] device hsr_slave_0 entered promiscuous mode [ 271.558339][ T6321] device hsr_slave_1 entered promiscuous mode [ 271.586328][ T6321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.656890][ T6321] Cannot create hsr debugfs directory [ 271.720951][ T6466] loop0: detected capacity change from 0 to 256 [ 271.756859][ T6466] FAT-fs (loop0): Directory bread(block 64) failed [ 271.763490][ T6466] FAT-fs (loop0): Directory bread(block 65) failed [ 271.770322][ T6466] FAT-fs (loop0): Directory bread(block 66) failed [ 271.770407][ T6453] loop1: detected capacity change from 0 to 512 [ 271.776940][ T6466] FAT-fs (loop0): Directory bread(block 67) failed [ 271.777065][ T6466] FAT-fs (loop0): Directory bread(block 68) failed [ 271.799410][ T6466] FAT-fs (loop0): Directory bread(block 69) failed [ 271.806127][ T6466] FAT-fs (loop0): Directory bread(block 70) failed [ 271.812711][ T6466] FAT-fs (loop0): Directory bread(block 71) failed [ 271.819410][ T6466] FAT-fs (loop0): Directory bread(block 72) failed [ 271.826047][ T6466] FAT-fs (loop0): Directory bread(block 73) failed [ 271.859960][ T6453] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 271.878371][ T6453] EXT4-fs (loop1): mount failed [ 272.342794][ T6472] loop2: detected capacity change from 0 to 2048 [ 272.349871][ T6472] EXT4-fs: Ignoring removed orlov option [ 272.406998][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.436339][ T3662] Bluetooth: hci1: command tx timeout [ 272.491782][ T26] audit: type=1800 audit(1723525247.343:34): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.656" name="bus" dev="loop0" ino=1048652 res=0 errno=0 [ 272.599477][ T6481] binder: 6479:6481 ioctl c0306201 20000a80 returned -14 [ 273.153156][ T6492] syz.3.660[6492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.153270][ T6492] syz.3.660[6492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.247290][ T6494] loop1: detected capacity change from 0 to 512 [ 273.311547][ T6494] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 273.340538][ T6494] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.661: invalid indirect mapped block 8 (level 2) [ 273.372854][ T6494] EXT4-fs (loop1): Remounting filesystem read-only [ 273.394092][ T6494] EXT4-fs (loop1): 1 truncate cleaned up [ 273.436177][ T6494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 273.476135][ T22] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 273.532081][ T6321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.555853][ T6321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.622849][ T6321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.760103][ T6321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.236304][ T22] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 274.277868][ T22] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 274.368536][ T22] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x3 is Bulk; changing to Interrupt [ 274.443690][ T22] usb 4-1: config 1 interface 0 has no altsetting 0 [ 274.521672][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 274.702718][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.746400][ T22] usb 4-1: string descriptor 0 read error: -22 [ 274.753113][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.798199][ T6321] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.806381][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.849079][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.857473][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.867217][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.875222][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.889949][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.899692][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.914200][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.924465][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.931682][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.946317][ T22] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 274.986102][ T3701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 275.002951][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.012281][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.013352][ T3992] EXT4-fs (loop2): unmounting filesystem. [ 275.022156][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.041316][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.048524][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.057587][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.093153][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.135635][ T6321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.165395][ T6492] loop3: detected capacity change from 0 to 1024 [ 275.189167][ T6492] EXT4-fs: Ignoring removed orlov option [ 275.231589][ T6492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 275.246227][ T3701] usb 2-1: Using ep0 maxpacket: 16 [ 275.273707][ T6321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.303680][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.343422][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.355290][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.364618][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.374433][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.383973][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.393294][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.402855][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.406499][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.412236][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.431031][ T6513] netlink: 'syz.2.663': attribute type 7 has an invalid length. [ 275.447849][ T6513] netlink: 'syz.2.663': attribute type 39 has an invalid length. [ 275.458464][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.468044][ T6517] bridge2: port 1(gretap1) entered blocking state [ 275.475179][ T6517] bridge2: port 1(gretap1) entered disabled state [ 275.493555][ T6517] device gretap1 entered promiscuous mode [ 275.502870][ T3701] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 275.517763][ T3701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.535910][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.549078][ T4318] usb 4-1: USB disconnect, device number 16 [ 275.564929][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.565119][ T3701] usb 2-1: config 0 descriptor?? [ 275.803751][ T6518] kvm [6516]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x220 [ 275.835607][ T6518] kvm [6516]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4653 [ 275.904061][ T6518] kvm [6516]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x3be [ 276.112484][ T6532] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 276.124857][ T6532] qnx6: wrong signature (magic) in superblock #1. [ 276.131438][ T6532] qnx6: unable to read the first superblock [ 276.196519][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 276.356186][ T3701] cp2112 0003:10C4:EA90.000A: unbalanced delimiter at end of report description [ 276.548344][ T3701] cp2112 0003:10C4:EA90.000A: parse failed [ 276.801742][ T3701] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 276.852485][ T3701] usb 2-1: USB disconnect, device number 6 [ 277.017024][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 277.157913][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.165472][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.201503][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.521591][ T6548] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 279.130901][ T6574] loop2: detected capacity change from 0 to 2048 [ 279.140083][ T6580] netlink: 'syz.0.679': attribute type 10 has an invalid length. [ 279.160059][ T6574] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 279.377809][ T6574] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 279.406179][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.448478][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.456132][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.476814][ T6574] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 279.482427][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.484588][ T6574] UDF-fs: Scanning with blocksize 512 failed [ 279.524714][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.531967][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.539544][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.546744][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.552022][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.567627][ T6574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.704662][ T6580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 279.720248][ T6583] loop1: detected capacity change from 0 to 512 [ 279.737274][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.777232][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.784824][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.828969][ T6583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.838293][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.840192][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.850971][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.861807][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.869686][ T6583] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 279.872034][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.887466][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.894913][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.903683][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.911286][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.918958][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.926474][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.934215][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.943088][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.950742][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.958369][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.966070][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.973494][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 279.981266][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.046896][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.170191][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.179416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.190691][ T6321] device veth0_vlan entered promiscuous mode [ 280.331260][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.338878][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.346349][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.353787][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.361295][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.378392][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.396096][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.411426][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.423948][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.432607][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.446105][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 280.484320][ T4318] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.499065][ T6321] device veth1_vlan entered promiscuous mode [ 280.595752][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.626302][ T3666] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 280.639143][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.651342][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 280.655422][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.676263][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.708986][ T6321] device veth0_macvtap entered promiscuous mode [ 280.729523][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.768868][ T6321] device veth1_macvtap entered promiscuous mode [ 280.820551][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.856880][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.881880][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.906132][ T3666] usb 4-1: Using ep0 maxpacket: 32 [ 280.912936][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.944589][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.963378][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.986125][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.005093][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.029952][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.051004][ T3666] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.073380][ T3666] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x83 has invalid wMaxPacketSize 0 [ 281.086350][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.101844][ T3666] usb 4-1: config 0 interface 0 has no altsetting 1 [ 281.102445][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.157532][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.201414][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.201783][ T6614] loop1: detected capacity change from 0 to 512 [ 281.229667][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.286296][ T3666] usb 4-1: New USB device found, idVendor=1b80, idProduct=a340, bcdDevice=ce.dd [ 281.295592][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.322114][ T3666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.336779][ T6614] EXT4-fs: Ignoring removed oldalloc option [ 281.343255][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.354335][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.379190][ T6614] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.686: Parent and EA inode have the same ino 15 [ 281.395008][ T3666] usb 4-1: Product: syz [ 281.395598][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.400087][ T3666] usb 4-1: Manufacturer: syz [ 281.434510][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.445734][ T6614] EXT4-fs (loop1): Remounting filesystem read-only [ 281.459494][ T6614] EXT4-fs error (device loop1): ext4_evict_inode:290: comm syz.1.686: couldn't truncate inode 15 (err -30) [ 281.462891][ T3666] usb 4-1: SerialNumber: syz [ 281.481503][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.504395][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.510247][ T3666] usb 4-1: config 0 descriptor?? [ 281.523286][ T6614] EXT4-fs (loop1): 1 orphan inode deleted [ 281.534744][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.546096][ T6614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 281.561051][ T6321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.579432][ T3666] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 281.580236][ T6321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.609489][ T6321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.618400][ T6321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.702459][ T6625] loop2: detected capacity change from 0 to 256 [ 281.738808][ T6627] loop0: detected capacity change from 0 to 256 [ 281.819326][ T6625] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 281.834859][ T5124] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 281.854926][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.869941][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.905556][ T3666] usb 4-1: USB disconnect, device number 17 [ 281.917287][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.952564][ T5124] EXT4-fs (loop1): Remounting filesystem read-only [ 281.971349][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.996373][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.004895][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.022188][ T5124] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 282.044012][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.082854][ T5124] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 282.429221][ T5124] EXT4-fs (loop1): unmounting filesystem. [ 282.909138][ T6651] loop3: detected capacity change from 0 to 256 [ 283.440008][ T6652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.730361][ T6643] loop0: detected capacity change from 0 to 1764 [ 284.739089][ T6671] loop4: detected capacity change from 0 to 512 [ 284.776111][ T3691] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 284.788263][ T6671] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.808704][ T3662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.822353][ T3662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.857305][ T3662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.874991][ T3733] udevd[3733]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 284.890814][ T6671] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.906985][ T3662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.916071][ T3662] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.924405][ T3662] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.958351][ T6671] EXT4-fs (loop4): 1 truncate cleaned up [ 284.992699][ T6671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.016194][ T3691] usb 4-1: Using ep0 maxpacket: 16 [ 285.137253][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.192379][ T6657] loop2: detected capacity change from 0 to 40427 [ 285.198929][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.209119][ T3691] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 285.227220][ T6657] F2FS-fs (loop2): invalid crc value [ 285.252043][ T6657] F2FS-fs (loop2): Found nat_bits in checkpoint [ 285.272693][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.312542][ T3733] udevd[3733]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 285.330063][ T6672] chnl_net:caif_netlink_parms(): no params data found [ 285.361039][ T3691] usb 4-1: config 0 descriptor?? [ 285.417549][ T6657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 285.431219][ T6657] syz.2.703: attempt to access beyond end of device [ 285.431219][ T6657] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 285.485339][ T3754] udevd[3754]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 285.486815][ T6321] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 285.584826][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.595418][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.609932][ T6672] device bridge_slave_0 entered promiscuous mode [ 285.612463][ T6321] EXT4-fs (loop4): unmounting filesystem. [ 285.620810][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.630150][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.641127][ T6672] device bridge_slave_1 entered promiscuous mode [ 285.660996][ T6321] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 285.677895][ T6321] EXT4-fs error (device loop4): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error [ 285.741411][ T6672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.898145][ T3691] cp2112 0003:10C4:EA90.000C: unbalanced delimiter at end of report description [ 285.916663][ T3691] cp2112 0003:10C4:EA90.000C: parse failed [ 285.936294][ T3691] cp2112: probe of 0003:10C4:EA90.000C failed with error -22 [ 286.049488][ T6672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.111578][ T3666] usb 4-1: USB disconnect, device number 18 [ 286.201713][ T6672] team0: Port device team_slave_0 added [ 286.226968][ T6672] team0: Port device team_slave_1 added [ 286.287757][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.346774][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.354818][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.396226][ T6672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.418472][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.425522][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.461981][ T6672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.483571][ T6696] loop0: detected capacity change from 0 to 1024 [ 286.505597][ T3733] udevd[3733]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 286.523331][ T6696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.550725][ T3733] udevd[3733]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 286.685496][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.701644][ T5900] EXT4-fs (loop0): unmounting filesystem. [ 286.808587][ T6672] device hsr_slave_0 entered promiscuous mode [ 286.834633][ T6672] device hsr_slave_1 entered promiscuous mode [ 286.865911][ T6672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.874962][ T6672] Cannot create hsr debugfs directory [ 286.994261][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.100891][ T6706] loop3: detected capacity change from 0 to 16 [ 287.123701][ T3662] Bluetooth: hci4: command tx timeout [ 287.182813][ T6706] erofs: (device loop3): mounted with root inode @ nid 36. [ 287.265886][ T26] audit: type=1326 audit(1723525262.103:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28c9799f9 code=0x7ffc0000 [ 287.373723][ T3662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.410067][ T3662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.423911][ T3662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.450351][ T3662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.472186][ T3662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.488609][ T3662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.701390][ T3733] udevd[3733]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 287.733542][ T26] audit: type=1326 audit(1723525262.113:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28c9799f9 code=0x7ffc0000 [ 287.756107][ T26] audit: type=1326 audit(1723525262.113:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fe28c9799f9 code=0x7ffc0000 [ 287.816820][ T26] audit: type=1326 audit(1723525262.113:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28c9799f9 code=0x7ffc0000 [ 287.870138][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.916042][ T26] audit: type=1326 audit(1723525262.113:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28c9799f9 code=0x7ffc0000 [ 287.925309][ T6715] loop2: detected capacity change from 0 to 8 [ 287.981179][ T6710] tipc: Started in network mode [ 287.986290][ T6710] tipc: Node identity 7f000001, cluster identity 4711 [ 288.031310][ T6710] tipc: Enabled bearer , priority 10 [ 289.158357][ T3662] Bluetooth: hci4: command tx timeout [ 289.162461][ T3691] tipc: Node number set to 2130706433 [ 289.285037][ T6724] loop2: detected capacity change from 0 to 128 [ 289.370536][ T3724] udevd[3724]: symlink '../../loop2' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:2' failed: Read-only file system [ 289.512288][ T6729] loop3: detected capacity change from 0 to 512 [ 289.548522][ T3733] udevd[3733]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 289.595424][ T6729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.618955][ T6729] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038 (0x7fffffff) [ 289.624441][ T6672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.653314][ T6672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.665479][ T3733] udevd[3733]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 289.681367][ T6737] overlayfs: missing 'lowerdir' [ 289.829773][ T3662] Bluetooth: hci1: command tx timeout [ 290.069076][ T6672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.128786][ T6672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.596174][ T6672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.616190][ T6672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.841154][ T6672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.861861][ T6672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.183475][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 291.203185][ T6771] loop0: detected capacity change from 0 to 1024 [ 291.215592][ T6753] loop2: detected capacity change from 0 to 32768 [ 291.236104][ T3659] Bluetooth: hci4: command tx timeout [ 291.277620][ T6771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.291968][ T6753] [ 291.291968][ T6753] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.291968][ T6753] [ 291.881733][ T3659] Bluetooth: hci1: command tx timeout [ 292.161562][ T6779] [ 292.161562][ T6779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.161562][ T6779] [ 292.276295][ T6779] [ 292.276295][ T6779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.276295][ T6779] [ 292.358389][ T5900] EXT4-fs (loop0): unmounting filesystem. [ 292.457648][ T6672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.459735][ T132] [ 292.459735][ T132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.459735][ T132] [ 292.505075][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.516753][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.537347][ T6704] device bridge_slave_0 entered promiscuous mode [ 292.541301][ T3733] udevd[3733]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 292.579543][ T6753] [ 292.579543][ T6753] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.579543][ T6753] [ 292.579609][ T6786] loop0: detected capacity change from 0 to 256 [ 292.580192][ T6786] exfat: Deprecated parameter 'utf8' [ 292.642814][ T3733] udevd[3733]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 292.677329][ T6786] exfat: Deprecated parameter 'utf8' [ 292.723787][ T6753] [ 292.723787][ T6753] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.723787][ T6753] [ 292.742438][ T6786] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 292.848379][ T3653] EXT4-fs (loop3): unmounting filesystem. [ 292.911136][ T6672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.975556][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.997887][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.031379][ T6704] device bridge_slave_1 entered promiscuous mode [ 293.041607][ T6793] loop3: detected capacity change from 0 to 64 [ 293.122465][ T3733] udevd[3733]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 293.166548][ T6672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.213930][ T3733] udevd[3733]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 293.247691][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.280551][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.300938][ T41] [ 293.300938][ T41] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.300938][ T41] [ 293.316154][ T3659] Bluetooth: hci4: command tx timeout [ 293.329894][ T41] [ 293.329894][ T41] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.329894][ T41] [ 293.344317][ T3992] [ 293.344317][ T3992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.344317][ T3992] [ 293.359591][ T3992] [ 293.359591][ T3992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.359591][ T3992] [ 293.364135][ T6672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.380677][ T26] audit: type=1326 audit(1723525268.233:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.3.740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe28c9799f9 code=0x0 [ 293.412840][ T132] ================================================================== [ 293.420963][ T132] BUG: KASAN: use-after-free in __lock_acquire+0x77/0x1f80 [ 293.428294][ T132] Read of size 8 at addr ffff88805abad0d8 by task jfsCommit/132 [ 293.435953][ T132] [ 293.438324][ T132] CPU: 1 PID: 132 Comm: jfsCommit Not tainted 6.1.104-syzkaller #0 [ 293.446245][ T132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 293.456330][ T132] Call Trace: [ 293.459647][ T132] [ 293.462615][ T132] dump_stack_lvl+0x1e3/0x2cb [ 293.467343][ T132] ? nf_tcp_handle_invalid+0x642/0x642 [ 293.472910][ T132] ? panic+0x764/0x764 [ 293.477016][ T132] ? _printk+0xd1/0x111 [ 293.481177][ T132] ? __virt_addr_valid+0x17f/0x530 [ 293.486324][ T132] ? __virt_addr_valid+0x17f/0x530 [ 293.491449][ T132] print_report+0x15f/0x4f0 [ 293.495984][ T132] ? __virt_addr_valid+0x17f/0x530 [ 293.501107][ T132] ? __virt_addr_valid+0x17f/0x530 [ 293.506229][ T132] ? __virt_addr_valid+0x45b/0x530 [ 293.511357][ T132] ? __phys_addr+0xb6/0x170 [ 293.515963][ T132] ? __lock_acquire+0x77/0x1f80 [ 293.522943][ T132] kasan_report+0x136/0x160 [ 293.527467][ T132] ? __lock_acquire+0x77/0x1f80 [ 293.532342][ T132] __lock_acquire+0x77/0x1f80 [ 293.537037][ T132] ? finish_task_switch+0x1ca/0x810 [ 293.542267][ T132] ? __schedule+0x1447/0x4570 [ 293.547045][ T132] lock_acquire+0x1f8/0x5a0 [ 293.551559][ T132] ? __mutex_lock+0x3c3/0xd80 [ 293.556248][ T132] ? read_lock_is_recursive+0x10/0x10 [ 293.561644][ T132] ? release_firmware_map_entry+0x186/0x186 [ 293.567701][ T132] ? mutex_spin_on_owner+0x195/0x330 [ 293.573084][ T132] ? mutex_spin_on_owner+0x195/0x330 [ 293.578378][ T132] _raw_spin_lock+0x2a/0x40 [ 293.583058][ T132] ? __mutex_lock+0x3c3/0xd80 [ 293.587747][ T132] __mutex_lock+0x3c3/0xd80 [ 293.592276][ T132] ? jfs_syncpt+0x22/0x90 [ 293.596620][ T132] ? mutex_lock_nested+0x10/0x10 [ 293.601571][ T132] ? do_raw_spin_unlock+0x137/0x8a0 [ 293.606781][ T132] jfs_syncpt+0x22/0x90 [ 293.610957][ T132] txEnd+0x30b/0x560 [ 293.614857][ T132] jfs_lazycommit+0x610/0xb60 [ 293.619534][ T132] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 293.625433][ T132] ? lockdep_hardirqs_on+0x94/0x130 [ 293.630641][ T132] ? txFreelock+0x580/0x580 [ 293.635160][ T132] ? do_task_dead+0xd0/0xd0 [ 293.639700][ T132] ? _raw_spin_unlock+0x40/0x40 [ 293.644586][ T132] ? __kthread_parkme+0x168/0x1c0 [ 293.649635][ T132] kthread+0x28d/0x320 [ 293.653710][ T132] ? txFreelock+0x580/0x580 [ 293.658221][ T132] ? kthread_blkcg+0xd0/0xd0 [ 293.662825][ T132] ret_from_fork+0x1f/0x30 [ 293.667260][ T132] [ 293.670276][ T132] [ 293.672599][ T132] Allocated by task 6753: [ 293.676921][ T132] kasan_set_track+0x4b/0x70 [ 293.681557][ T132] __kasan_kmalloc+0x97/0xb0 [ 293.686165][ T132] lmLogOpen+0x314/0x1030 [ 293.690502][ T132] jfs_mount_rw+0xe3/0x640 [ 293.694927][ T132] jfs_fill_super+0x67d/0xc40 [ 293.699604][ T132] mount_bdev+0x2c9/0x3f0 [ 293.703949][ T132] legacy_get_tree+0xeb/0x180 [ 293.708633][ T132] vfs_get_tree+0x88/0x270 [ 293.713142][ T132] do_new_mount+0x2ba/0xb40 [ 293.717648][ T132] __se_sys_mount+0x2d5/0x3c0 [ 293.722328][ T132] do_syscall_64+0x3b/0xb0 [ 293.726751][ T132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.732773][ T132] [ 293.735144][ T132] Freed by task 3992: [ 293.739129][ T132] kasan_set_track+0x4b/0x70 [ 293.743725][ T132] kasan_save_free_info+0x27/0x40 [ 293.748753][ T132] ____kasan_slab_free+0xd6/0x120 [ 293.753778][ T132] __kmem_cache_free+0x25c/0x3c0 [ 293.758716][ T132] lmLogClose+0x29d/0x530 [ 293.763064][ T132] jfs_umount+0x298/0x370 [ 293.767408][ T132] jfs_put_super+0x86/0x180 [ 293.771965][ T132] generic_shutdown_super+0x130/0x340 [ 293.777395][ T132] kill_block_super+0x7a/0xe0 [ 293.782098][ T132] deactivate_locked_super+0xa0/0x110 [ 293.787573][ T132] cleanup_mnt+0x490/0x520 [ 293.792027][ T132] task_work_run+0x246/0x300 [ 293.796709][ T132] exit_to_user_mode_loop+0xde/0x100 [ 293.802086][ T132] exit_to_user_mode_prepare+0xb1/0x140 [ 293.807632][ T132] syscall_exit_to_user_mode+0x60/0x270 [ 293.813179][ T132] do_syscall_64+0x47/0xb0 [ 293.817604][ T132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.823513][ T132] [ 293.825837][ T132] Last potentially related work creation: [ 293.831751][ T132] kasan_save_stack+0x3b/0x60 [ 293.836528][ T132] __kasan_record_aux_stack+0xb0/0xc0 [ 293.841927][ T132] kvfree_call_rcu+0x116/0x8c0 [ 293.846891][ T132] neigh_flush_dev+0x188/0xae0 [ 293.851671][ T132] __neigh_ifdown+0x45/0x3f0 [ 293.856279][ T132] neigh_ifdown+0x1b/0x30 [ 293.860712][ T132] rt6_disable_ip+0x830/0x890 [ 293.865487][ T132] addrconf_ifdown+0x154/0x1b90 [ 293.870367][ T132] addrconf_notify+0x3ec/0xf60 [ 293.875224][ T132] raw_notifier_call_chain+0xd0/0x170 [ 293.880625][ T132] dev_close_many+0x37c/0x530 [ 293.885428][ T132] unregister_netdevice_many+0x4f7/0x17a0 [ 293.891157][ T132] default_device_exit_batch+0x956/0x9d0 [ 293.896889][ T132] cleanup_net+0x763/0xb60 [ 293.901413][ T132] process_one_work+0x8a9/0x11d0 [ 293.906371][ T132] worker_thread+0xa47/0x1200 [ 293.911236][ T132] kthread+0x28d/0x320 [ 293.915331][ T132] ret_from_fork+0x1f/0x30 [ 293.919763][ T132] [ 293.922091][ T132] Second to last potentially related work creation: [ 293.928755][ T132] kasan_save_stack+0x3b/0x60 [ 293.933445][ T132] __kasan_record_aux_stack+0xb0/0xc0 [ 293.938821][ T132] kvfree_call_rcu+0x116/0x8c0 [ 293.943671][ T132] batadv_hard_if_event+0x774/0x1540 [ 293.948962][ T132] raw_notifier_call_chain+0xd0/0x170 [ 293.954341][ T132] unregister_netdevice_many+0xec1/0x17a0 [ 293.960068][ T132] default_device_exit_batch+0x956/0x9d0 [ 293.965710][ T132] cleanup_net+0x763/0xb60 [ 293.970218][ T132] process_one_work+0x8a9/0x11d0 [ 293.975169][ T132] worker_thread+0xa47/0x1200 [ 293.979849][ T132] kthread+0x28d/0x320 [ 293.983917][ T132] ret_from_fork+0x1f/0x30 [ 293.988340][ T132] [ 293.990659][ T132] The buggy address belongs to the object at ffff88805abad000 [ 293.990659][ T132] which belongs to the cache kmalloc-1k of size 1024 [ 294.004715][ T132] The buggy address is located 216 bytes inside of [ 294.004715][ T132] 1024-byte region [ffff88805abad000, ffff88805abad400) [ 294.018185][ T132] [ 294.020509][ T132] The buggy address belongs to the physical page: [ 294.026928][ T132] page:ffffea00016aea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5aba8 [ 294.037095][ T132] head:ffffea00016aea00 order:3 compound_mapcount:0 compound_pincount:0 [ 294.045600][ T132] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 294.053603][ T132] raw: 00fff00000010200 ffffea0000689600 dead000000000003 ffff888012841dc0 [ 294.062278][ T132] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 294.070866][ T132] page dumped because: kasan: bad access detected [ 294.077286][ T132] page_owner tracks the page as allocated [ 294.082992][ T132] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3644, tgid 3644 (syz-executor), ts 69135292242, free_ts 17250046830 [ 294.102267][ T132] post_alloc_hook+0x18d/0x1b0 [ 294.107035][ T132] get_page_from_freelist+0x322e/0x33b0 [ 294.112584][ T132] __alloc_pages+0x28d/0x770 [ 294.117191][ T132] alloc_slab_page+0x6a/0x150 [ 294.121876][ T132] new_slab+0x84/0x2d0 [ 294.125963][ T132] ___slab_alloc+0xc20/0x1270 [ 294.130755][ T132] __kmem_cache_alloc_node+0x19f/0x260 [ 294.136222][ T132] kmalloc_trace+0x26/0xe0 [ 294.140730][ T132] batadv_hard_if_event+0xdab/0x1540 [ 294.146036][ T132] raw_notifier_call_chain+0xd0/0x170 [ 294.151522][ T132] call_netdevice_notifiers+0x145/0x1b0 [ 294.157090][ T132] register_netdevice+0x12f2/0x1720 [ 294.162297][ T132] veth_newlink+0x7fc/0xc70 [ 294.167148][ T132] rtnl_newlink+0x14e3/0x2050 [ 294.171838][ T132] rtnetlink_rcv_msg+0x818/0xff0 [ 294.176788][ T132] netlink_rcv_skb+0x1cd/0x410 [ 294.181565][ T132] page last free stack trace: [ 294.186237][ T132] free_unref_page_prepare+0xf63/0x1120 [ 294.192215][ T132] free_unref_page+0x33/0x3e0 [ 294.196892][ T132] free_contig_range+0x9a/0x150 [ 294.201749][ T132] destroy_args+0xfe/0x997 [ 294.206269][ T132] debug_vm_pgtable+0x416/0x46b [ 294.211126][ T132] do_one_initcall+0x265/0x8f0 [ 294.215903][ T132] do_initcall_level+0x157/0x207 [ 294.220846][ T132] do_initcalls+0x49/0x86 [ 294.225177][ T132] kernel_init_freeable+0x45c/0x60f [ 294.230404][ T132] kernel_init+0x19/0x290 [ 294.234739][ T132] ret_from_fork+0x1f/0x30 [ 294.239183][ T132] [ 294.241599][ T132] Memory state around the buggy address: [ 294.247237][ T132] ffff88805abacf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.255333][ T132] ffff88805abad000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.263404][ T132] >ffff88805abad080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.271459][ T132] ^ [ 294.278477][ T132] ffff88805abad100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.286539][ T132] ffff88805abad180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.294597][ T132] ================================================================== [ 294.302742][ T132] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.309947][ T132] CPU: 1 PID: 132 Comm: jfsCommit Not tainted 6.1.104-syzkaller #0 [ 294.317839][ T132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 294.327894][ T132] Call Trace: [ 294.331174][ T132] [ 294.334103][ T132] dump_stack_lvl+0x1e3/0x2cb [ 294.338801][ T132] ? nf_tcp_handle_invalid+0x642/0x642 [ 294.344271][ T132] ? panic+0x764/0x764 [ 294.348357][ T132] ? lock_release+0xd6/0xa20 [ 294.352959][ T132] ? vscnprintf+0x59/0x80 [ 294.357294][ T132] panic+0x318/0x764 [ 294.361192][ T132] ? check_panic_on_warn+0x1d/0xa0 [ 294.366320][ T132] ? memcpy_page_flushcache+0xfc/0xfc [ 294.371699][ T132] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 294.377597][ T132] ? _raw_spin_unlock+0x40/0x40 [ 294.382448][ T132] ? print_report+0x4a3/0x4f0 [ 294.387130][ T132] check_panic_on_warn+0x7e/0xa0 [ 294.392074][ T132] ? __lock_acquire+0x77/0x1f80 [ 294.396938][ T132] end_report+0x66/0x110 [ 294.401266][ T132] kasan_report+0x143/0x160 [ 294.405789][ T132] ? __lock_acquire+0x77/0x1f80 [ 294.410652][ T132] __lock_acquire+0x77/0x1f80 [ 294.415335][ T132] ? finish_task_switch+0x1ca/0x810 [ 294.420550][ T132] ? __schedule+0x1447/0x4570 [ 294.425245][ T132] lock_acquire+0x1f8/0x5a0 [ 294.429794][ T132] ? __mutex_lock+0x3c3/0xd80 [ 294.434486][ T132] ? read_lock_is_recursive+0x10/0x10 [ 294.439875][ T132] ? release_firmware_map_entry+0x186/0x186 [ 294.445783][ T132] ? mutex_spin_on_owner+0x195/0x330 [ 294.451102][ T132] ? mutex_spin_on_owner+0x195/0x330 [ 294.456853][ T132] _raw_spin_lock+0x2a/0x40 [ 294.461363][ T132] ? __mutex_lock+0x3c3/0xd80 [ 294.466159][ T132] __mutex_lock+0x3c3/0xd80 [ 294.470716][ T132] ? jfs_syncpt+0x22/0x90 [ 294.475075][ T132] ? mutex_lock_nested+0x10/0x10 [ 294.480042][ T132] ? do_raw_spin_unlock+0x137/0x8a0 [ 294.485250][ T132] jfs_syncpt+0x22/0x90 [ 294.489511][ T132] txEnd+0x30b/0x560 [ 294.493408][ T132] jfs_lazycommit+0x610/0xb60 [ 294.498099][ T132] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 294.504003][ T132] ? lockdep_hardirqs_on+0x94/0x130 [ 294.509209][ T132] ? txFreelock+0x580/0x580 [ 294.513724][ T132] ? do_task_dead+0xd0/0xd0 [ 294.518237][ T132] ? _raw_spin_unlock+0x40/0x40 [ 294.523092][ T132] ? __kthread_parkme+0x168/0x1c0 [ 294.528126][ T132] kthread+0x28d/0x320 [ 294.532196][ T132] ? txFreelock+0x580/0x580 [ 294.536697][ T132] ? kthread_blkcg+0xd0/0xd0 [ 294.541377][ T132] ret_from_fork+0x1f/0x30 [ 294.545810][ T132] [ 294.548967][ T132] Kernel Offset: disabled [ 294.553301][ T132] Rebooting in 86400 seconds..