last executing test programs: 9m36.717090192s ago: executing program 32 (id=1042): syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa050090780100050047000000000000000011000000000000ac1414bb440c0001640101004e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac0700bb000000009d8caa2fcd2669f7af909459c440a66a47877b797506e3e2d4597320ae1748af2dc3ae18095b"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 8m39.632029369s ago: executing program 33 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x8000) 7m56.102722749s ago: executing program 34 (id=1257): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 7m39.969896528s ago: executing program 6 (id=1311): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 7m38.972091052s ago: executing program 6 (id=1313): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x3, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0x2}, {0x0, 0xb76}, {0x3, 0x200}, {0x5, 0x1}, {0x3, 0x10000}, {0x0, 0x82}, {0xfffffd, 0x80006}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x8}], 0xc}) 7m38.667584559s ago: executing program 6 (id=1314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044081}, 0x40000) 7m37.247369344s ago: executing program 6 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@check_strict}]}, 0x1, 0x544, &(0x7f0000001000)="$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") 7m35.039718788s ago: executing program 6 (id=1326): socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mptcp_subflow_get_send\x00', r0}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x5ec0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14000801}, 0x40000) 7m33.813801739s ago: executing program 6 (id=1329): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000480), 0xd, 0x5ed, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000340)='./file\x00', 0x0) rmdir(&(0x7f0000000000)='./file\x00') 7m33.22423535s ago: executing program 35 (id=1329): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000480), 0xd, 0x5ed, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000340)='./file\x00', 0x0) rmdir(&(0x7f0000000000)='./file\x00') 5m56.585469347s ago: executing program 5 (id=1619): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 5m55.309222775s ago: executing program 5 (id=1624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 5m54.896023216s ago: executing program 5 (id=1628): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 5m53.738882598s ago: executing program 5 (id=1631): set_tid_address(0x0) 5m53.401852991s ago: executing program 5 (id=1633): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000005c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '\xd8u\xfd\xc9\xe4\x91!-\xaf\xce\xac\xd2\x9c%\'\xee\x15\x02\x7f\xc0=\x01\xda\xb4\xb3\xb2\xfb\xe7B\ny\x91\x98\xd4\xc2\x7f\x91n\xa1\x85\x9cj\x84F\xdd\xb7\xa7\xca\x9b\xc1\x04*\xdd\xadr\xf0i;\xb7$\xc0\xab\xda\x1c>4\xe1Y\xa5L\x8ey\xc0\xacl\xddA\xed\xff\xbf\vn\xab\x1a\x06r\x15\xfb\xf9=k\xe1\t7\xca\xec\x115i3r\xde\xb2r\xd7\xc4\xdaf\xe2\xf8\xaf\x0e\xd6\xa6l\xd2\xd4\xee>\x8c\xc7\xecB\xc0\xfe\xaf\x0e\x12\xa2\xb5J\x99\xbc\x94\xa8\xf7h\xf1\x10\xf21^\x1fk\xce\x048\x8fn\x1cp\xe5\a\'\x85:X\xd2.\xc3\xf96\xca=u\x83]\xb50\xa9\x9b^\x93\xceLT\t[\xaf\b\x91k\x80\x85\\{\x0e\xf1v\xdd%\xb1\xef\xe9^\xfe;8\xbc\x95\xe5\xc64\xfb-cd>\xd0\x9b\x1c\b\n\x83d\xef*\xd0\xc96\x03\xd5\xd2l\xf00Nq\xf6\xd8\x1d\xbe\xc1\x94>\xda4\xbeG;|\x01Z\x8a\x86q\xce\x1ep\xe7\b\xc9\xfc>\xd3\xfe\x0ea\xfa\x99\xef\xcd\x88 -\xf6\x9cQr8r?\x96\xa03\x85\xf0\xc2=\xec\xca\xff<\xe7\xf0\xc1\x9d[\xad\xcc\x01|\x8c\xeb\xc5\x86\x8f{[\x90`\xf8b\x9f\x17v\x01\x1f\xd7\x8f\xec\b\x82P\xf4?\xe1\xfe7\x1d\xda2\x1d*\xa5\x8bH\vB\xc4[\x83>\x81\xff4r<\xdb\x18+\x9a\xf5\xe18\x14\x13\xec\xb8\xac5\xd5-;\x02\x06\xf8\xe2\xe6\xa4\xca\n/x\x1a\x80 .}\x91\t\xc4\xa8\xdcu\xe7u\xaa[f\xe9\xae\xdc>\x80\xcc\x03\xeef\xfe\a\xdejdr\x8aH\x7f\xf7\xf4;^Oh\xc1\xe1H\xac\xb8', 0x3a, './file0'}, 0x2c8) 5m50.670812902s ago: executing program 5 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x240408c6) 5m34.297548376s ago: executing program 36 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x240408c6) 4m53.791591027s ago: executing program 4 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m46.755556891s ago: executing program 4 (id=1775): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x43, 0xc20, &(0x7f0000001940)="$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") 4m41.435506564s ago: executing program 4 (id=1785): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x38, r2, 0x91b, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 4m41.026527296s ago: executing program 4 (id=1789): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r0, &(0x7f00000029c0)=[{&(0x7f0000001680)="58f14caa75167f", 0x7}], 0x1, 0x9, 0x5) 4m39.842473155s ago: executing program 4 (id=1794): mkdirat(0xffffffffffffff9c, 0x0, 0xc0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) set_tid_address(0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 4m38.255394449s ago: executing program 4 (id=1800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@bsdgroups}]}, 0x2, 0x45c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvrpu++0t+pTz6AAIFEfFImrRAD3AAgcQBJCQu5WiStCp1G9QEiVYRBITKEVXijjhW4i/gBBcEnJC4wh1VqlAuFE5Ga+86tmOnSfNwwJ+PtMnM7mxmvp4de3YnDqBvDWc/koj9EfFrRAzWs60Fhuu/bi/OT/61OD+ZRLX61h9Jrdyfi/OTRdHivH15ZiSNSD9N4miHemevXL1QrlSmL+f5sbmL743NXrn6zPmL5XPT56YvTZw+ferk+PPPTTybHa6uN87/Z2098uHMscOvvX39jckz19/58eukiL8tjg0yvNLBx6vrDmlbOdCUTnb0sCGsSSkisu4aqI3/wSjFUucNxqufdD0x3aIGApummutyeKEK/HftHoxeNwHojeKDPrv/rW83tm7ysQ3ceql+A5TFfjvfYiFqO4tbnIG2+9uNNBwRZxb+/jLbYnOeQwAAtPg2m/883Tz/K+YfadzXVO5/+drQUL6WcjAi7qnuikMRcW9Erez9EfHAGutvXyRZPv9Jb95VYKuUzf9eyNe2GvO/er1FkaFSnjtQi38gOXu+Mn0if01GYmBXlh9foY7vXvnl827Hmud/2ZbVX8wF83bc3LGr9Zyp8lx5PTE3u/VxxJEdneJPGisBSUQcjogjd1nH+SdvHOt27M7xN+xctmcD1pmqX0U8Ue//hWiLv5CsvD45tjsq0yfGiqtiuZ9+vvZmt/rXEP+myPp/b8frvxH/UNKyXruw5pXLa7991vWeZnR11/+LzeNrqrw0IIqL4oPy3Nzl8Yidyev1Rjfvn1g6t8gX5bP4R453Hv8HY+mVOBoR2UX8YEQ8FBEP5333SEQ8GhHHV4j/h5cfe7fbse3Q/1Nt/T/UWqS1/5sSO6N9T+dE6cL337T+xaXk6t7/TtVSI/me1bz/raZdWWJdLx4AAAD8S6QRsT+SdLSRTtPR0fr/8B+KvWllZnbuqbMz71+aqn9HYCgG0uJJ12DT89Dx/La+yE+05U/mz42/KO2p5UcnZypTvQ4e+ty+LuM/83up160DNp3va0H/Mv6hfxn/0L+Mf+hfHcb/nl60A9h6nT7/P+pBO4Ct1zb+LftBH2mM/6S37QC2nud/0L+ax78pAPSN2T1x5y/JS0gsS0S6LZqxMYlkk0fB/l4HuPZEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsY/AQAA//9couxY") r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x810) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 4m22.906129357s ago: executing program 37 (id=1800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@bsdgroups}]}, 0x2, 0x45c, &(0x7f0000000b40)="$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") r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x810) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 3m39.085606245s ago: executing program 9 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f00000002c0)="1a000000020000", 0x7) 3m37.738402457s ago: executing program 9 (id=1925): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 3m36.495028636s ago: executing program 9 (id=1928): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="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", 0x129, 0x40040, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 3m33.813750321s ago: executing program 9 (id=1933): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 3m31.944575848s ago: executing program 9 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = dup(r1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2008cc10}, 0x4882) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.102837668s ago: executing program 9 (id=1937): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="44010000", @ANYRES16=r0, @ANYBLOB="010027bf7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001c015a80a8000380140003"], 0x144}, 0x1, 0x0, 0x0, 0x805}, 0x0) 3m15.210545928s ago: executing program 38 (id=1937): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="44010000", @ANYRES16=r0, @ANYBLOB="010027bf7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001c015a80a8000380140003"], 0x144}, 0x1, 0x0, 0x0, 0x805}, 0x0) 24.983757127s ago: executing program 8 (id=2376): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$eJzs3F1rHNUbAPBnJm//pn/dqNULLRgpYvAlL02JDRZU8NIr6xdYk7REt41tVrAlFwpiP4D6AcTL+hG8EO8EwZvitXdKoUiSa1mZzexm3OzGvC2j3d8PDpxnZoczz8zsnpMzhwQwsCYj4pOIGI2I9yOikm9P8hJv7JTsc9ubG0tZSaLRuPxH0ty/tbmxFIVjMqfzYCqNSD9L4pku7a7fuv1BtVZbuZnHM/VrH86s37r9yuq16tWVqyvX52cXF2fnLy4sLpxYrr/FnV8v3Xur8sVP53754b13FpJCvsU8TspkTLavSafpk26sZP8r1JPhEk+EQ0kjYigihpvf/0oMxe7Nq8R3lVJPDgDoi0bj9Y4YAHj4Jfp8ABgwrb/7tzY3llqljHmIsjx4c+fl1Vb+bnO7nf9w+03ISMf7rZM0GRHffvXqs1mJPr2HBAAo+j4b/1zsNv5L42zhc6ciYjxf2/X/iHgkIh4trJ86qsmOeO/4J71/zCb2lY3/LhXWtm0X8s9NDOVRlvNEjCRXVmsrs3n+UzEylsVz+7Rx9vJTf/baVxz/ZSVrvzUWzM/j/vDY349Zrtarx8m56MGnEU8Pd8s/aY9/k2beR/fajbtP9tr3z/n3V+PriBe63v/dlXvJ/usTZ5rPw0zrqdjrzovP3+jVftn5Z/d/fP/8J5Lies31w7fx44XVn3vtO+rzP5q826yP5ts+rtbrN+ciRpO3924/v3tsK259Pst/6lz37/+Z2L0Sj0XE4xHxRERze88HuouXa988d/T8+yvLf/lQ9//wlfHP797r1f7B7v+FZm0q33KQ37+DnuBxrh0AAAD8V6TN+dwknW7X03R6emee90yMp7W19fpLV9Y+ur68M+87ESNpa6arUpgPncvnCFvx+Y54Pp9D+XLsVDOeXlqrLZedPAAMqNM9+v/M72Nlnx0A0Df9WtwOAPx76f8BYPDo/wFg8Oj/AWDw6P8BYPDo/wFgoBzn//qpqKg8rJWyf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMr1VwAAAP//Y/TVQg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x38, 0x5, @tid=r0}, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 21.172205264s ago: executing program 8 (id=2386): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_fuse_handle_req(r0, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 19.007499793s ago: executing program 8 (id=2399): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) unshare(0x24020400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 18.64601855s ago: executing program 7 (id=2402): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x1, 0xa53, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 17.954688803s ago: executing program 8 (id=2407): sysfs$2(0x2, 0xf01b, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80)={[{@nomblk_io_submit}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x447, &(0x7f00000008c0)="$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") r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) syz_clone(0x1040000, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f0000000480)) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xc0d, 0x9, 0x6, 0x80b}}) r2 = creat(0x0, 0x2) pread64(r2, 0x0, 0x0, 0x6) 17.874679699s ago: executing program 7 (id=2408): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xc, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 17.211312838s ago: executing program 8 (id=2412): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 16.333645028s ago: executing program 7 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@flag='async'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x500, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) 12.402087713s ago: executing program 1 (id=2421): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 12.12324037s ago: executing program 8 (id=2422): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 12.032852292s ago: executing program 1 (id=2424): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)={[{@inline_xattr}, {@nocheckpoint_merge}, {@noquota}, {@six_active_logs}, {@user_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@discard_unit_segment}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@noextent_cache}, {@fsync_mode_strict}, {@fault_type={'fault_type', 0x3d, 0x8}}], [{@appraise_type}, {@dont_appraise}, {@flag='lazytime'}, {@seclabel}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0x1, 0x550a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 11.653090722s ago: executing program 39 (id=2422): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 11.259462952s ago: executing program 0 (id=2428): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000531000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0x800c1, 0x0, r0}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x2, [0x5, 0x2], 0x1ff}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 11.185494714s ago: executing program 1 (id=2429): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1, 0x0, r4}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.160360857s ago: executing program 2 (id=2430): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x38, 0x5, @tid=r0}, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 10.831220518s ago: executing program 7 (id=2431): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, 0x4, 0x0) 10.536228572s ago: executing program 0 (id=2432): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = dup2(r0, r0) connect$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null, @bcast, @null]}, 0x48) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 10.092168898s ago: executing program 0 (id=2434): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9.517171006s ago: executing program 0 (id=2436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4f, 0x205) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000000)=0xc, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) 8.586566047s ago: executing program 1 (id=2438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 6.349313168s ago: executing program 0 (id=2439): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5.504569824s ago: executing program 3 (id=2442): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x20001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3000000}) 5.202585442s ago: executing program 3 (id=2443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xc200}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf}, 0x94) 4.231396546s ago: executing program 3 (id=2444): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="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", 0x130, 0x40040, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 2.845189941s ago: executing program 3 (id=2445): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) pipe2$9p(&(0x7f0000000640), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0x800c1, 0x0, r0}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x2, [0x5, 0x2], 0x1ff}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.647852876s ago: executing program 2 (id=2446): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = dup2(r0, r0) connect$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @null, @bcast, @null]}, 0x48) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 2.51547918s ago: executing program 3 (id=2447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.256632519s ago: executing program 2 (id=2448): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) 2.236559173s ago: executing program 7 (id=2449): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x8000002) 2.016288113s ago: executing program 7 (id=2450): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 2.015438714s ago: executing program 2 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000b000000002e"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x5d, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x1, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x9, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x13c) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000480)=""/69) syz_extract_tcp_res(0x0, 0x6, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x8000) syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, 0x0, 0x0) eventfd(0xfffffff9) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.739543212s ago: executing program 0 (id=2452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00', 0x400}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket(0x1, 0x80802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) 529.596814ms ago: executing program 2 (id=2453): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getpid() r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) 313.41598ms ago: executing program 2 (id=2454): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x20008040) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) 112.923299ms ago: executing program 3 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003b09000000e9"], 0x2, 0x1a2, &(0x7f0000000440)="$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") r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1e, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x4db3023e, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x9fdd, 0x8, {{0x5, 0x4, 0x0, 0x15, 0x14, 0x68, 0x0, 0x7f, 0x17, 0x0, @local, @private=0xa010102}}}}) ioperm(0x1, 0x3, 0x1000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) r5 = semget$private(0x0, 0x4, 0x40) semctl$SETVAL(r5, 0x2, 0x10, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0xd, 0x0, 0x0, 0x0, 0x200000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 112.292541ms ago: executing program 1 (id=2456): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="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", 0x130, 0x40040, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 0s ago: executing program 1 (id=2457): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000}, 0x20) kernel console output (not intermixed with test programs): 3] input: syz1 as /devices/virtual/input/input6 [ 756.831897][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.838334][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.145469][T11554] hsr_slave_0: entered promiscuous mode [ 757.162298][T11668] loop2: detected capacity change from 0 to 512 [ 757.190272][T11554] hsr_slave_1: entered promiscuous mode [ 757.224145][T11669] loop9: detected capacity change from 0 to 2048 [ 757.242861][T11669] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 757.256219][T11669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.269560][T11554] debugfs: 'hsr0' already exists in 'hsr' [ 757.286412][T11668] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 757.337190][T11554] Cannot create hsr debugfs directory [ 757.377819][T11668] System zones: 0-7 [ 757.403649][T11668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.417258][T11672] loop4: detected capacity change from 0 to 128 [ 757.441248][T11672] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 757.571092][T11677] rtc_cmos 00:00: Alarms can be up to one day in the future [ 757.828748][ T7054] IPVS: starting estimator thread 0... [ 758.294607][T11683] IPVS: using max 20 ests per chain, 48000 per kthread [ 759.376575][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.283883][T11703] loop7: detected capacity change from 0 to 2048 [ 761.305982][T11703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.554799][T11710] loop2: detected capacity change from 0 to 512 [ 762.579516][T11710] EXT4-fs: Ignoring removed mblk_io_submit option [ 762.932013][T11710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 762.988088][T11710] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1724: bad orphan inode 16 [ 763.209576][T11710] ext4_test_bit(bit=15, block=4) = 0 [ 763.311170][T11710] EXT4-fs (loop2): 1 orphan inode deleted [ 763.515357][T11710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.046973][T11731] loop8: detected capacity change from 0 to 512 [ 764.062025][T11731] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 764.079695][T11731] System zones: 0-7 [ 764.112469][T11731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.882250][T11736] loop4: detected capacity change from 0 to 2048 [ 764.893844][T11736] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 764.909541][T11736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.227287][T11721] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 766.718335][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.736674][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.986967][T11770] loop4: detected capacity change from 0 to 2048 [ 770.018434][T11770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 770.032670][T11772] netlink: 'syz.9.1741': attribute type 1 has an invalid length. [ 770.337357][T11554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 770.556499][T11554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 770.614963][T11554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 770.664802][T11554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 770.828436][T11787] loop9: detected capacity change from 0 to 512 [ 771.857033][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.887370][T11787] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 772.181281][T11787] System zones: 0-7 [ 772.349814][T11787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.395664][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.434853][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.442077][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.828019][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.835223][T10606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.074780][T10410] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.553617][T11826] loop7: detected capacity change from 0 to 512 [ 776.569702][T11826] EXT4-fs: Ignoring removed mblk_io_submit option [ 776.587760][T11826] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 776.685337][T11826] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1755: bad orphan inode 16 [ 776.779779][T11835] loop9: detected capacity change from 0 to 1024 [ 776.797628][T11826] ext4_test_bit(bit=15, block=4) = 0 [ 776.817895][T11826] EXT4-fs (loop7): 1 orphan inode deleted [ 776.842694][T11826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.333953][T11839] loop2: detected capacity change from 0 to 2048 [ 777.638085][T11839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.842965][T11855] loop9: detected capacity change from 0 to 1024 [ 779.194950][ T6000] hfsplus: b-tree write err: -5, ino 8 [ 779.203417][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.249826][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.560044][T11867] netlink: 'syz.9.1763': attribute type 13 has an invalid length. [ 780.428654][T11867] gretap0: refused to change device tx_queue_len [ 780.439293][T11867] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 780.478216][T11554] veth0_vlan: entered promiscuous mode [ 780.504554][T11554] veth1_vlan: entered promiscuous mode [ 780.614093][T11554] veth0_macvtap: entered promiscuous mode [ 780.649769][T11554] veth1_macvtap: entered promiscuous mode [ 780.704661][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.757880][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.778740][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.879319][ T1139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.922767][ T6000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.989552][ T6000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.145170][T11888] loop7: detected capacity change from 0 to 1024 [ 783.507957][T11888] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 783.555244][T11888] hfsplus: xattr searching failed [ 783.585711][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.635399][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.757090][T10606] hfsplus: b-tree write err: -5, ino 4 [ 783.764997][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.801979][T10606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.837274][T10606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.073055][T11906] loop8: detected capacity change from 0 to 512 [ 784.282228][T11906] EXT4-fs: Ignoring removed mblk_io_submit option [ 785.258676][T11906] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 785.553929][T11906] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.1776: bad orphan inode 16 [ 785.573387][T11910] loop4: detected capacity change from 0 to 2048 [ 785.628429][T11906] ext4_test_bit(bit=15, block=4) = 0 [ 785.645578][T11906] EXT4-fs (loop8): 1 orphan inode deleted [ 785.655769][T11910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.696844][T11906] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.729458][T11910] UDF-fs: error (device loop4): udf_read_inode: (ino 1408) failed !bh [ 785.778900][T11910] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 786.637791][T11917] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 789.375777][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.470576][T11945] loop3: detected capacity change from 0 to 512 [ 789.524695][T11945] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 789.545017][T11945] System zones: 0-7 [ 789.606733][T11945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.759388][T11963] loop8: detected capacity change from 0 to 512 [ 790.856363][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.900026][T11963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.945721][T11969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.323553][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.441408][T11981] loop3: detected capacity change from 0 to 2048 [ 792.483325][T11988] loop4: detected capacity change from 0 to 512 [ 792.492034][T11981] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 792.509614][T11988] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.537255][T11988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 792.894475][T11981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.661011][T11988] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1800: bad orphan inode 16 [ 793.913121][T12003] loop3: detected capacity change from 0 to 2048 [ 794.565157][T11988] ext4_test_bit(bit=15, block=4) = 0 [ 794.579259][T12003] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 794.588758][T11988] EXT4-fs (loop4): 1 orphan inode deleted [ 794.613042][T12003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.613039][T11988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.639248][T11997] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 794.756063][T12012] loop8: detected capacity change from 0 to 512 [ 794.762697][ T5919] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 794.853557][T12012] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 794.900772][ T5919] usb 10-1: device descriptor read/64, error -71 [ 794.918078][T12012] System zones: 0-7 [ 794.925303][T12012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.069022][ T5919] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 796.557676][T12036] loop3: detected capacity change from 0 to 16 [ 796.577647][T12036] erofs (device loop3): mounted with root inode @ nid 36. [ 796.699190][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.631532][ T8744] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 797.699006][T12046] loop8: detected capacity change from 0 to 256 [ 797.716859][T12046] vfat: Bad value for 'fmask' [ 797.813199][ T8744] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 797.850883][ T8744] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 797.995596][ T8744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.202273][ T8744] usb 4-1: config 0 descriptor?? [ 799.935716][ T8744] usbhid 4-1:0.0: can't add hid device: -71 [ 799.957501][ T8744] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 800.003414][ T8744] usb 4-1: USB disconnect, device number 16 [ 800.780264][T12063] loop8: detected capacity change from 0 to 2048 [ 800.865065][T12063] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 800.879501][T12063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 800.933493][ T51] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 800.957092][ T51] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 801.096430][T12070] loop9: detected capacity change from 0 to 128 [ 801.168326][T12070] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 801.328103][T12070] EXT4-fs warning (device loop9): verify_group_input:136: Cannot add at group 131079 (only 1 groups) [ 801.338401][T12074] loop7: detected capacity change from 0 to 512 [ 801.426318][T12076] loop3: detected capacity change from 0 to 512 [ 801.437728][T12074] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 801.449826][T12074] System zones: 0-7 [ 801.470001][T12076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 801.482995][T12074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.752067][T12076] EXT4-fs (loop3): 1 truncate cleaned up [ 801.759608][T12076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.776253][T10410] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 802.266273][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.270782][ T8695] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 803.363978][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.520824][ T8695] usb 3-1: device descriptor read/64, error -71 [ 805.926500][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 805.945836][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 806.544425][ T9945] Bluetooth: hci5: hardware error 0x00 [ 806.570545][T12107] binder: 12106:12107 ioctl 400454ca 0 returned -22 [ 807.153873][T12111] loop3: detected capacity change from 0 to 256 [ 807.181679][T12111] vfat: Bad value for 'fmask' [ 808.107504][T12115] loop7: detected capacity change from 0 to 2048 [ 808.156076][T12115] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 808.200920][T12115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 808.256386][T11173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.342066][ T9945] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 809.369906][T12124] loop8: detected capacity change from 0 to 128 [ 809.376749][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 809.388448][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 809.400911][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 809.423824][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 809.432720][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 809.464717][ T9945] Bluetooth: hci1: Unable to find connection for big 0x00 [ 809.739833][T12128] 9pnet: Could not find request transport: fd0x0000000000000004 [ 810.309982][T12125] chnl_net:caif_netlink_parms(): no params data found [ 812.024812][ T51] Bluetooth: hci2: command tx timeout [ 813.905989][T12158] loop3: detected capacity change from 0 to 256 [ 813.962270][T12158] vfat: Bad value for 'fmask' [ 814.061170][ T51] Bluetooth: hci2: command tx timeout [ 815.286423][T12167] loop8: detected capacity change from 0 to 2048 [ 815.322791][T12173] loop3: detected capacity change from 0 to 1024 [ 815.329909][T12167] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 815.330536][T12173] EXT4-fs: Ignoring removed nobh option [ 815.346728][T12173] EXT4-fs: Ignoring removed bh option [ 815.374563][T12167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 815.703749][T12173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.704581][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.262652][ T51] Bluetooth: hci2: command tx timeout [ 816.705591][T12184] loop8: detected capacity change from 0 to 1024 [ 816.724404][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.779853][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.006951][T12190] loop3: detected capacity change from 0 to 1024 [ 817.058233][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.082577][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.100167][T12125] bridge_slave_0: entered allmulticast mode [ 817.143036][T12125] bridge_slave_0: entered promiscuous mode [ 817.171403][ T1160] hfsplus: b-tree write err: -5, ino 4 [ 817.173077][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.219602][T12191] sctp: [Deprecated]: syz.9.1859 (pid 12191) Use of int in max_burst socket option deprecated. [ 817.219602][T12191] Use struct sctp_assoc_value instead [ 817.239097][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.248797][T12190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.274574][T12125] bridge_slave_1: entered allmulticast mode [ 817.295273][T12125] bridge_slave_1: entered promiscuous mode [ 817.376400][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.399724][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.361875][ T51] Bluetooth: hci2: command tx timeout [ 818.385460][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.431856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.370691][ T8713] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 821.202514][T12216] rtc_cmos 00:00: Alarms can be up to one day in the future [ 822.811384][T12209] 9pnet: Could not find request transport: fd0x0000000000000004 [ 824.301282][T12225] loop7: detected capacity change from 0 to 512 [ 824.348276][T12225] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 824.384609][T12225] System zones: 0-2, 18-18, 34-35 [ 824.433104][T12225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.548410][ T30] audit: type=1800 audit(35293366.335:113): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1869" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 824.626533][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.800319][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.811395][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.821842][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.669778][T12125] team0: Port device team_slave_0 added [ 826.718565][T12125] team0: Port device team_slave_1 added [ 827.156598][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.179626][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.522851][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.421671][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.560681][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.831404][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.885977][T12263] loop2: detected capacity change from 0 to 256 [ 829.209204][T12263] vfat: Bad value for 'fmask' [ 830.585883][T12125] hsr_slave_0: entered promiscuous mode [ 830.628107][T12125] hsr_slave_1: entered promiscuous mode [ 830.660254][T12125] debugfs: 'hsr0' already exists in 'hsr' [ 830.675553][T12125] Cannot create hsr debugfs directory [ 830.884721][ T13] bridge_slave_1: left allmulticast mode [ 830.890419][ T13] bridge_slave_1: left promiscuous mode [ 830.910983][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.960009][ T13] bridge_slave_0: left allmulticast mode [ 830.961902][T12275] loop3: detected capacity change from 0 to 16 [ 830.977299][ T13] bridge_slave_0: left promiscuous mode [ 830.988701][T12275] erofs (device loop3): mounted with root inode @ nid 36. [ 831.001594][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.025388][ T30] audit: type=1800 audit(35293372.815:114): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1884" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 832.708796][T12294] loop8: detected capacity change from 0 to 128 [ 832.718922][T12294] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 833.360789][ T8695] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 833.543049][ T8695] usb 4-1: config 0 has no interfaces? [ 833.562625][ T8695] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 834.590477][ T8695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.711378][ T8695] usb 4-1: Product: syz [ 834.749386][ T8695] usb 4-1: Manufacturer: syz [ 835.522454][ T8695] usb 4-1: SerialNumber: syz [ 835.539680][ T8695] r8152-cfgselector 4-1: Unknown version 0x0000 [ 835.547974][ T8695] r8152-cfgselector 4-1: config 0 descriptor?? [ 839.287798][ T8695] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 839.781867][T12331] loop9: detected capacity change from 0 to 256 [ 840.744539][T12334] trusted_key: encrypted_key: key user:syz not found [ 843.104432][T12343] loop3: detected capacity change from 0 to 2048 [ 843.190978][T12343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.531995][T11554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 843.674906][T11554] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 843.948173][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.229853][T12370] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.803280][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.911326][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.996282][ T13] bond0 (unregistering): Released all slaves [ 847.291597][T12383] trusted_key: encrypted_key: key user:syz not found [ 847.372253][T12381] loop9: detected capacity change from 0 to 128 [ 847.536325][T12381] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 847.631581][ T13] tipc: Left network mode [ 847.719315][T12387] loop7: detected capacity change from 0 to 1024 [ 847.726864][T12387] EXT4-fs: Ignoring removed nobh option [ 847.732508][T12387] ext4: Unknown parameter 'uid<00000000000000000000' [ 851.691738][T10410] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 851.829664][T12408] loop8: detected capacity change from 0 to 1024 [ 851.970007][T12408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.259303][T12413] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 852.740422][ T30] audit: type=1800 audit(35293394.525:115): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1920" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 852.752916][T12408] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 853.623087][ T6076] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 853.669528][T12426] loop9: detected capacity change from 0 to 1024 [ 853.840677][ T6076] EXT4-fs (loop8): This should not happen!! Data will be lost [ 853.840677][ T6076] [ 853.910744][ T6076] EXT4-fs (loop8): Total free blocks count 0 [ 853.916771][ T6076] EXT4-fs (loop8): Free/Dirty block details [ 854.267338][ T49] hfsplus: b-tree write err: -5, ino 4 [ 854.465961][ T6076] EXT4-fs (loop8): free_blocks=20480 [ 854.550907][ T6076] EXT4-fs (loop8): dirty_blocks=32 [ 854.590706][ T6076] EXT4-fs (loop8): Block reservation details [ 854.596728][ T6076] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 854.621519][ T13] hsr_slave_0: left promiscuous mode [ 854.689046][ T13] hsr_slave_1: left promiscuous mode [ 854.691764][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.731704][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.739117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.901830][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.909392][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.826460][T12446] loop3: detected capacity change from 0 to 256 [ 857.851624][T12446] vfat: Bad value for 'fmask' [ 857.860779][ T13] veth1_macvtap: left promiscuous mode [ 857.884249][ T13] veth0_macvtap: left promiscuous mode [ 857.900195][ T13] veth1_vlan: left promiscuous mode [ 857.919765][ T13] veth0_vlan: left promiscuous mode [ 858.528285][T12452] 9pnet_fd: Insufficient options for proto=fd [ 858.945875][T12455] loop7: detected capacity change from 0 to 1024 [ 859.276590][T12455] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 859.473013][T12455] System zones: 0-1, 3-36 [ 859.536985][T12455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.760830][T12455] EXT4-fs (loop7): shut down requested (2) [ 860.382936][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.750725][ T8696] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 863.950737][ T8696] usb 4-1: Using ep0 maxpacket: 16 [ 863.998101][ T8696] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 864.030962][ T8696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.060890][ T8696] usb 4-1: Product: syz [ 864.068442][ T8696] usb 4-1: Manufacturer: syz [ 864.114156][ T8696] usb 4-1: SerialNumber: syz [ 864.163140][ T8696] usb 4-1: config 0 descriptor?? [ 864.213422][ T8696] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 864.252590][ T8696] usb 4-1: Detected FT-X [ 866.520728][T11556] Bluetooth: hci1: command 0x0406 tx timeout [ 867.281035][ T8696] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 867.357609][ T8696] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 867.381505][ T8696] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 867.399677][ T8696] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 867.431838][ T8696] usb 4-1: USB disconnect, device number 18 [ 867.471615][ T8696] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 867.707366][ T8696] ftdi_sio 4-1:0.0: device disconnected [ 868.884622][T12495] loop8: detected capacity change from 0 to 128 [ 869.054872][T12495] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 869.426739][T12495] EXT4-fs (loop8): shut down requested (2) [ 869.462447][T12495] fscrypt: loop8: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 869.655012][T12503] fscrypt (loop8, inode 13): Error -5 getting encryption context [ 869.664337][T12503] EXT4-fs warning (device loop8): ext4_lookup:1797: Inconsistent encryption contexts: 12/13 [ 870.339453][T10227] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 870.762651][T12509] trusted_key: encrypted_key: key user:syz not found [ 871.408579][T12513] loop8: detected capacity change from 0 to 8 [ 871.595810][T12515] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1951'. [ 872.071433][T12517] loop3: detected capacity change from 0 to 1024 [ 872.115322][ T13] team0 (unregistering): Port device team_slave_1 removed [ 872.157673][T11556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 872.167279][T12517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.191122][T11556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 872.209914][T11556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 872.220850][T11556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 872.232816][T11556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.302502][T12517] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1952: bg 0: block 494: padding at end of block bitmap is not set [ 872.411592][T12517] EXT4-fs (loop3): Remounting filesystem read-only [ 872.419592][T12522] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 873.151349][ T13] team0 (unregistering): Port device team_slave_0 removed [ 873.228388][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.506295][T12533] loop7: detected capacity change from 0 to 1024 [ 874.550539][ T51] Bluetooth: hci3: command tx timeout [ 876.641074][ T51] Bluetooth: hci3: command tx timeout [ 877.355990][T11556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 877.381646][T11556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 877.390172][T11556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 877.399422][T11556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 877.408276][T11556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 877.731852][T12555] trusted_key: encrypted_key: key user:syz not found [ 877.938296][T12467] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1937'. [ 877.954846][T12506] warning: `syz.2.1950' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 878.785018][ T51] Bluetooth: hci3: command tx timeout [ 878.961051][T12568] loop7: detected capacity change from 0 to 8 [ 879.146407][ T8744] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 879.330702][ T8744] usb 4-1: Using ep0 maxpacket: 16 [ 879.341843][ T8744] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 879.357532][T12566] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1964'. [ 879.381034][ T8744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 879.424711][ T8744] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 879.427543][T12565] loop8: detected capacity change from 0 to 2048 [ 879.435677][ T8744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.461300][ T8744] usb 4-1: Product: syz [ 879.470977][ T8744] usb 4-1: Manufacturer: syz [ 879.475738][ T8744] usb 4-1: SerialNumber: syz [ 879.483775][ T8744] usb 4-1: config 0 descriptor?? [ 879.500858][ T51] Bluetooth: hci7: command tx timeout [ 879.530008][ T8744] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 879.570054][ T8744] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 879.589209][T12565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 880.591917][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.600871][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.602519][ T51] Bluetooth: hci3: command tx timeout [ 881.602543][T11556] Bluetooth: hci7: command tx timeout [ 881.913266][ T8744] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 882.323016][ T8744] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 882.341109][ T8744] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 882.348162][ T8744] em28xx 4-1:0.0: No AC97 audio processor [ 882.410763][ T8744] usb 4-1: USB disconnect, device number 19 [ 882.418487][ T8744] em28xx 4-1:0.0: Disconnecting em28xx [ 883.281758][ T8744] em28xx 4-1:0.0: Freeing device [ 883.501371][T12587] loop3: detected capacity change from 0 to 16 [ 883.580864][T12587] erofs (device loop3): mounted with root inode @ nid 36. [ 883.589275][T12592] loop2: detected capacity change from 0 to 512 [ 883.606796][ T30] audit: type=1800 audit(35293425.395:116): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1971" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 883.607885][T12592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 883.667282][T11556] Bluetooth: hci7: command tx timeout [ 883.730943][T12592] EXT4-fs (loop2): 1 truncate cleaned up [ 883.746042][T12592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.939387][T12598] loop8: detected capacity change from 0 to 2048 [ 883.953135][T12598] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 883.967062][T12598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.422970][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.515594][T12600] loop3: detected capacity change from 0 to 2048 [ 884.562938][T12600] udf: Bad value for 'umask' [ 884.602080][T12551] chnl_net:caif_netlink_parms(): no params data found [ 884.945807][T12606] trusted_key: encrypted_key: key user:syz not found [ 886.311517][T11556] Bluetooth: hci7: command tx timeout [ 888.062981][T12622] loop7: detected capacity change from 0 to 1024 [ 888.681910][T12622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.773326][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.783364][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.847758][T12642] loop8: detected capacity change from 0 to 2048 [ 889.864065][T12642] udf: Unknown parameter 'ÿÿ00000000000000000000' [ 889.967540][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.988760][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.026511][T12551] bridge_slave_0: entered allmulticast mode [ 890.076269][T12646] loop7: detected capacity change from 0 to 16 [ 890.104496][T12551] bridge_slave_0: entered promiscuous mode [ 890.131126][T12646] erofs (device loop7): mounted with root inode @ nid 36. [ 890.162473][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.169623][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.217543][T12551] bridge_slave_1: entered allmulticast mode [ 890.218212][ T30] audit: type=1800 audit(35293432.005:117): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1986" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 890.284137][T12551] bridge_slave_1: entered promiscuous mode [ 890.406861][T12651] loop3: detected capacity change from 0 to 2048 [ 890.431099][T12651] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 890.461342][T12651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.048193][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.357860][T12518] chnl_net:caif_netlink_parms(): no params data found [ 891.700871][T12660] trusted_key: encrypted_key: key user:syz not found [ 891.716428][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.807717][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.958416][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.787836][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.086030][T12551] team0: Port device team_slave_0 added [ 894.280815][ T5821] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 894.908619][T12551] team0: Port device team_slave_1 added [ 895.060953][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 895.082828][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 895.146448][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 895.193090][T12688] loop7: detected capacity change from 0 to 16 [ 895.239485][T12688] erofs (device loop7): mounted with root inode @ nid 36. [ 895.247355][ T5821] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 895.287057][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.300972][ T5821] usb 3-1: Product: syz [ 895.305148][ T5821] usb 3-1: Manufacturer: syz [ 895.319973][ T5821] usb 3-1: SerialNumber: syz [ 895.325598][ T30] audit: type=1800 audit(35293437.125:118): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2001" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 895.348556][ T5821] usb 3-1: config 0 descriptor?? [ 895.363367][ T5821] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 895.394262][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.400682][ T5821] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 895.441291][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.623898][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 895.663437][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.991624][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.998644][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.061133][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.154145][ T5821] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 897.164518][ T5821] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 897.181066][ T5821] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 897.188097][ T5821] em28xx 3-1:0.0: No AC97 audio processor [ 897.216231][ T5821] usb 3-1: USB disconnect, device number 35 [ 897.260355][ T5821] em28xx 3-1:0.0: Disconnecting em28xx [ 897.318409][ T5821] em28xx 3-1:0.0: Freeing device [ 897.348406][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.382714][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.420481][T12518] bridge_slave_0: entered allmulticast mode [ 897.449960][T12518] bridge_slave_0: entered promiscuous mode [ 897.496057][T12518] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.526134][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.561091][T12518] bridge_slave_1: entered allmulticast mode [ 897.824324][T12518] bridge_slave_1: entered promiscuous mode [ 897.831305][T12707] trusted_key: encrypted_key: key user:syz not found [ 898.940169][ T30] audit: type=1326 audit(35293440.725:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.8.2009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f084338eec9 code=0x0 [ 899.485501][T12721] rtc_cmos 00:00: Alarms can be up to one day in the future [ 901.709419][T12518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.764625][T12518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.836530][T12551] hsr_slave_0: entered promiscuous mode [ 901.872451][T12551] hsr_slave_1: entered promiscuous mode [ 901.919198][T12551] debugfs: 'hsr0' already exists in 'hsr' [ 901.947224][T12551] Cannot create hsr debugfs directory [ 902.040492][T12732] loop7: detected capacity change from 0 to 16 [ 902.144899][T12732] erofs (device loop7): mounted with root inode @ nid 36. [ 902.278439][ T13] bridge_slave_1: left allmulticast mode [ 902.340361][ T13] bridge_slave_1: left promiscuous mode [ 902.567463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.578586][ T30] audit: type=1800 audit(35293444.375:120): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2013" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 902.673464][ T13] bridge_slave_0: left allmulticast mode [ 902.679129][ T13] bridge_slave_0: left promiscuous mode [ 902.742744][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.789217][T12739] loop8: detected capacity change from 0 to 1024 [ 902.822562][T12739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 902.850035][T12739] EXT4-fs: Ignoring removed nobh option [ 902.904215][ T13] bridge_slave_1: left allmulticast mode [ 902.952910][ T13] bridge_slave_1: left promiscuous mode [ 902.958719][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.968598][T12739] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.977938][T12745] loop3: detected capacity change from 0 to 512 [ 902.992159][T12741] loop7: detected capacity change from 0 to 1024 [ 903.001210][T12745] EXT4-fs: Ignoring removed oldalloc option [ 903.051391][T12745] EXT4-fs (loop3): 1 truncate cleaned up [ 903.061822][ T13] bridge_slave_0: left allmulticast mode [ 903.067486][ T13] bridge_slave_0: left promiscuous mode [ 903.086472][T12749] loop2: detected capacity change from 0 to 512 [ 903.092798][T12745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.121651][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.172898][T12749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 903.232981][ T36] hfsplus: b-tree write err: -5, ino 4 [ 903.235739][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.309351][T12749] EXT4-fs (loop2): 1 truncate cleaned up [ 903.351454][T12749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.675572][T12756] trusted_key: encrypted_key: key user:syz not found [ 904.081310][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.165058][T12760] input: syz0 as /devices/virtual/input/input8 [ 905.029309][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.626057][T12781] loop2: detected capacity change from 0 to 16 [ 907.863697][T12781] erofs (device loop2): mounted with root inode @ nid 36. [ 907.980484][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.011236][ T30] audit: type=1800 audit(35293449.795:121): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2027" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 908.161506][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.219761][ T13] bond0 (unregistering): Released all slaves [ 908.399456][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 909.173692][T12795] loop3: detected capacity change from 0 to 2048 [ 909.241339][T12795] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 909.256307][T12797] loop8: detected capacity change from 0 to 8 [ 909.434380][T12798] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2032'. [ 909.491258][T12795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 915.716453][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 916.961696][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.976529][T12836] loop3: detected capacity change from 0 to 8192 [ 917.019078][T12841] loop8: detected capacity change from 0 to 1024 [ 917.059935][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.104928][ T30] audit: type=1800 audit(35293458.895:122): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2043" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 917.152974][ T13] bond0 (unregistering): Released all slaves [ 917.993144][T12518] team0: Port device team_slave_0 added [ 918.047393][T12518] team0: Port device team_slave_1 added [ 918.427559][T12851] loop7: detected capacity change from 0 to 2048 [ 918.439436][T12851] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 918.452899][T12851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.434608][T12518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.469944][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.527222][T12518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.545061][T12518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.552985][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.578989][T12518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.687380][T12878] loop2: detected capacity change from 0 to 1024 [ 923.735384][T12878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.275502][T12886] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 925.475083][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.646535][ T13] hsr_slave_0: left promiscuous mode [ 925.683217][ T13] hsr_slave_1: left promiscuous mode [ 925.710113][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.744333][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.822630][ T5821] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 926.013305][T12902] loop3: detected capacity change from 0 to 128 [ 926.037147][T12901] loop2: detected capacity change from 0 to 2048 [ 926.047129][T12901] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 926.061215][T12901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 926.071447][ T5821] usb 8-1: device descriptor read/64, error -71 [ 926.082299][ T13] hsr_slave_0: left promiscuous mode [ 926.131280][ T13] hsr_slave_1: left promiscuous mode [ 926.172595][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.256091][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.350968][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.380856][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.416513][ T5821] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 926.590672][ T5821] usb 8-1: device descriptor read/64, error -71 [ 926.641979][ T13] veth1_macvtap: left promiscuous mode [ 926.730897][ T5821] usb usb8-port1: attempt power cycle [ 926.751833][ T13] veth0_macvtap: left promiscuous mode [ 926.757518][ T13] veth1_vlan: left promiscuous mode [ 926.770766][ T13] veth0_vlan: left promiscuous mode [ 927.232734][T12909] loop2: detected capacity change from 0 to 1764 [ 927.240296][T12909] iso9660: Unknown parameter 'nwjoliet' [ 928.716119][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 929.534710][ T30] audit: type=1326 audit(35293471.315:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.619385][ T30] audit: type=1326 audit(35293471.315:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.727904][T12920] sd 0:0:1:0: device reset [ 929.743139][ T30] audit: type=1326 audit(35293471.325:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.789921][T12920] loop2: detected capacity change from 0 to 164 [ 929.850669][ T30] audit: type=1326 audit(35293471.325:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.875051][T12927] loop7: detected capacity change from 0 to 1024 [ 929.898526][T12928] loop3: detected capacity change from 0 to 1024 [ 929.938949][T12928] EXT4-fs: Ignoring removed oldalloc option [ 929.963610][ T30] audit: type=1326 audit(35293471.325:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.986262][ T30] audit: type=1326 audit(35293471.355:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 929.992939][T12927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.011122][ T30] audit: type=1326 audit(35293471.355:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 930.040752][T12928] EXT4-fs: Ignoring removed bh option [ 930.059002][ T30] audit: type=1326 audit(35293471.355:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 930.136574][T12928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.174082][ T30] audit: type=1326 audit(35293471.375:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 930.207722][ T30] audit: type=1326 audit(35293471.375:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.2.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909098eec9 code=0x7ffc0000 [ 930.404749][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.415123][ T13] team0 (unregistering): Port device team_slave_1 removed [ 930.439784][T11554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.765968][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 930.776757][ T13] team0 (unregistering): Port device team_slave_0 removed [ 930.795727][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 930.806555][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 930.821719][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 930.829472][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 930.905544][T12946] loop7: detected capacity change from 0 to 16 [ 930.913677][T12946] erofs (device loop7): mounted with root inode @ nid 36. [ 931.462424][T12954] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.2080'. [ 931.472368][T12954] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.2080'. [ 932.348172][T12958] loop7: detected capacity change from 0 to 8 [ 932.876783][T11556] Bluetooth: hci0: command tx timeout [ 933.578244][T12968] loop7: detected capacity change from 0 to 256 [ 933.614004][T12968] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 933.629275][T12968] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 933.683250][T12968] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 933.995787][ T13] team0 (unregistering): Port device team_slave_1 removed [ 934.058524][T12978] loop7: detected capacity change from 0 to 512 [ 934.086482][T12978] EXT4-fs: Ignoring removed mblk_io_submit option [ 934.102974][T12978] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 934.111115][T12978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e04ce028, mo2=0002] [ 934.119259][T12978] System zones: 0-1, 15-15, 18-18, 34-34 [ 934.146834][T12978] EXT4-fs (loop7): orphan cleanup on readonly fs [ 934.153739][T12978] EXT4-fs warning (device loop7): ext4_enable_quotas:7174: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 934.176777][T12978] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 934.192680][ T13] team0 (unregistering): Port device team_slave_0 removed [ 934.202922][T12978] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.2087: bg 0: block 40: padding at end of block bitmap is not set [ 934.236013][T12982] loop8: detected capacity change from 0 to 16 [ 934.253771][T12978] EXT4-fs (loop7): Remounting filesystem read-only [ 934.260400][T12978] EXT4-fs (loop7): 1 truncate cleaned up [ 934.277424][T12982] erofs (device loop8): mounted with root inode @ nid 36. [ 934.305710][T12978] EXT4-fs (loop7): mounted filesystem 00000000-0000-5000-0000-000000000000 ro without journal. Quota mode: writeback. [ 934.848015][T12984] trusted_key: encrypted_key: insufficient parameters specified [ 935.346033][T11556] Bluetooth: hci0: command tx timeout [ 935.365194][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-5000-0000-000000000000. [ 935.698167][T12992] loop8: detected capacity change from 0 to 2048 [ 935.953766][T12996] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.2091'. [ 935.963974][T12996] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.2091'. [ 937.152144][T12992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.430060][T11556] Bluetooth: hci0: command tx timeout [ 937.544272][T13000] loop7: detected capacity change from 0 to 8192 [ 937.752812][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 937.752838][ T30] audit: type=1800 audit(35293479.535:166): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2094" name="file1" dev="loop7" ino=1048644 res=0 errno=0 [ 938.008375][T13005] loop2: detected capacity change from 0 to 512 [ 938.027781][T13006] loop8: detected capacity change from 0 to 2048 [ 938.092479][T13005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.094490][T13006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 938.324028][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.464736][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.482782][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.493344][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.508852][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.521627][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 938.707950][T13013] veth0_to_bond: entered promiscuous mode [ 938.729435][T13011] veth0_to_bond: left promiscuous mode [ 939.527700][ T51] Bluetooth: hci0: command tx timeout [ 940.533133][T13034] loop2: detected capacity change from 0 to 16 [ 940.618486][T13034] erofs (device loop2): mounted with root inode @ nid 36. [ 940.626783][ T51] Bluetooth: hci2: command tx timeout [ 940.708045][ T30] audit: type=1800 audit(35293482.495:167): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2103" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 940.794856][T13037] loop8: detected capacity change from 0 to 2048 [ 940.807457][T13037] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 940.823895][T13037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 941.116339][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.123781][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.746114][T12941] chnl_net:caif_netlink_parms(): no params data found [ 941.785109][T13041] loop2: detected capacity change from 0 to 2048 [ 941.858523][T13041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.630371][ T51] Bluetooth: hci6: unexpected event for opcode 0x200a [ 942.701021][ T51] Bluetooth: hci2: command tx timeout [ 943.209994][T13010] chnl_net:caif_netlink_parms(): no params data found [ 943.321630][ T30] audit: type=1326 audit(35293485.115:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.3.2108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0e98eec9 code=0x0 [ 943.504485][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.517375][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.534961][T12941] bridge_slave_0: entered allmulticast mode [ 944.336361][T12941] bridge_slave_0: entered promiscuous mode [ 944.361962][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.381185][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.388470][T12941] bridge_slave_1: entered allmulticast mode [ 944.413203][T12941] bridge_slave_1: entered promiscuous mode [ 945.511056][ T51] Bluetooth: hci2: command tx timeout [ 946.803979][T13073] loop2: detected capacity change from 0 to 1024 [ 946.835462][T13075] loop3: detected capacity change from 0 to 16 [ 946.868402][T13075] erofs (device loop3): mounted with root inode @ nid 36. [ 946.875869][ T13] IPVS: stop unused estimator thread 0... [ 946.907720][ T30] audit: type=1800 audit(35293488.695:169): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2115" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 946.952254][T12941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.965803][T12941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.016597][T13080] loop7: detected capacity change from 0 to 256 [ 947.025707][T13080] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 947.047918][T13080] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 947.580742][T11556] Bluetooth: hci2: command tx timeout [ 947.728390][T13084] loop3: detected capacity change from 0 to 2048 [ 947.754350][T13084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.777502][T13010] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.896755][T13088] loop2: detected capacity change from 0 to 1024 [ 947.924641][T13088] EXT4-fs: Ignoring removed bh option [ 947.930058][T13088] EXT4-fs: Ignoring removed mblk_io_submit option [ 947.990728][T13088] EXT4-fs: Ignoring removed nobh option [ 947.996332][T13088] EXT4-fs: Ignoring removed bh option [ 948.068029][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.087232][T13010] bridge_slave_0: entered allmulticast mode [ 948.097336][T13010] bridge_slave_0: entered promiscuous mode [ 948.107391][T12941] team0: Port device team_slave_0 added [ 948.127992][T13010] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.140952][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.141740][T13088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.158494][T13010] bridge_slave_1: entered allmulticast mode [ 948.187457][T13091] loop7: detected capacity change from 0 to 2048 [ 948.245940][T13010] bridge_slave_1: entered promiscuous mode [ 948.287480][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.401495][T12941] team0: Port device team_slave_1 added [ 952.823883][T12941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.846956][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.950610][T12941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.163974][T13010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.336093][T13010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.403027][T12941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.409999][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.232845][T12941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.280134][T11556] Bluetooth: hci6: unexpected event for opcode 0x200a [ 957.019406][T13127] loop8: detected capacity change from 0 to 512 [ 957.097831][T13127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.720773][ T30] audit: type=1800 audit(35293499.415:170): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2130" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 957.885528][T13010] team0: Port device team_slave_0 added [ 957.904363][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.051897][T13010] team0: Port device team_slave_1 added [ 958.514740][T13010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.539737][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.624649][T13010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.780055][T13010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.801253][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.000609][T13010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.078806][T12941] hsr_slave_0: entered promiscuous mode [ 959.139389][T12941] hsr_slave_1: entered promiscuous mode [ 959.149844][T12941] debugfs: 'hsr0' already exists in 'hsr' [ 959.178255][T12941] Cannot create hsr debugfs directory [ 959.481865][T13010] hsr_slave_0: entered promiscuous mode [ 959.488680][T13010] hsr_slave_1: entered promiscuous mode [ 959.502605][T13010] debugfs: 'hsr0' already exists in 'hsr' [ 959.508345][T13010] Cannot create hsr debugfs directory [ 963.074508][T13160] loop7: detected capacity change from 0 to 2048 [ 963.116376][T13160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 963.843780][ T49] bridge_slave_1: left allmulticast mode [ 963.860659][ T49] bridge_slave_1: left promiscuous mode [ 963.877460][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.127837][ T49] bridge_slave_0: left allmulticast mode [ 964.156519][ T49] bridge_slave_0: left promiscuous mode [ 964.187183][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.237422][ T49] bridge_slave_1: left allmulticast mode [ 964.252956][ T49] bridge_slave_1: left promiscuous mode [ 964.258763][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.325300][ T49] bridge_slave_0: left allmulticast mode [ 964.340752][ T49] bridge_slave_0: left promiscuous mode [ 964.366946][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.398162][ T49] ip6gretap1: left promiscuous mode [ 964.420935][ T49] bridge0: port 4(ip6gretap1) entered disabled state [ 964.446455][ T49] bridge_slave_1: left allmulticast mode [ 965.425353][ T49] bridge_slave_1: left promiscuous mode [ 965.440794][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.464320][ T49] bridge_slave_0: left allmulticast mode [ 965.652992][ T49] bridge_slave_0: left promiscuous mode [ 965.658800][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.076597][T11556] Bluetooth: hci6: unexpected event for opcode 0x200a [ 967.452207][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.478785][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.514839][ T49] bond0 (unregistering): Released all slaves [ 967.587887][T13203] loop7: detected capacity change from 0 to 1024 [ 967.688422][T13203] hfsplus: xattr searching failed [ 967.700216][T13207] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2154'. [ 968.061270][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.148659][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.670062][T13215] loop8: detected capacity change from 0 to 2048 [ 968.686862][ T49] bond0 (unregistering): Released all slaves [ 968.749202][T13215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.941362][T13215] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.2156: bg 0: block 234: padding at end of block bitmap is not set [ 969.014728][T13215] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 230 with error 117 [ 969.077789][T13215] EXT4-fs (loop8): This should not happen!! Data will be lost [ 969.077789][T13215] [ 969.116863][T13222] loop7: detected capacity change from 0 to 2048 [ 969.172881][T13222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 970.201492][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.495663][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.539657][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.572888][ T49] bond0 (unregistering): Released all slaves [ 970.680886][ T8744] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 970.880873][ T8744] usb 8-1: device descriptor read/64, error -71 [ 970.955539][ T49] tipc: Left network mode [ 971.140743][ T8744] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 971.350952][ T8744] usb 8-1: device descriptor read/64, error -71 [ 971.479972][ T8744] usb usb8-port1: attempt power cycle [ 971.650175][ T49] hsr_slave_0: left promiscuous mode [ 971.659786][ T49] hsr_slave_1: left promiscuous mode [ 971.671654][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.688241][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.700100][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.716249][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.738807][ T49] hsr_slave_0: left promiscuous mode [ 971.745801][ T49] hsr_slave_1: left promiscuous mode [ 971.760865][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.791027][T13234] loop3: detected capacity change from 0 to 128 [ 971.814573][T13234] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 971.850960][ T8744] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 971.891600][ T8744] usb 8-1: device descriptor read/8, error -71 [ 972.182206][ T8744] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 972.513832][ T8744] usb 8-1: device descriptor read/8, error -71 [ 972.671312][ T8744] usb usb8-port1: unable to enumerate USB device [ 972.699811][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 972.742501][ T49] team0 (unregistering): Port device team_slave_1 removed [ 972.856279][ T49] team0 (unregistering): Port device team_slave_0 removed [ 976.143138][ T49] team0 (unregistering): Port device team_slave_1 removed [ 976.214515][ T49] team0 (unregistering): Port device team_slave_0 removed [ 978.170225][T13269] loop8: detected capacity change from 0 to 164 [ 979.963135][ T49] team0 (unregistering): Port device team_slave_1 removed [ 980.031394][ T49] team0 (unregistering): Port device team_slave_0 removed [ 980.819854][T11556] Bluetooth: hci6: unexpected event for opcode 0x200a [ 981.227955][T13251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.283462][T12941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.668048][T13279] loop2: detected capacity change from 0 to 32768 [ 981.702874][T13279] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2175 (13279) [ 981.718556][T13279] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 981.728776][T13279] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 981.774866][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.782667][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.285913][T13279] BTRFS info (device loop2): rebuilding free space tree [ 982.330759][T13279] BTRFS info (device loop2): enabling ssd optimizations [ 982.337746][T13279] BTRFS info (device loop2): enabling free space tree [ 982.344574][T13279] BTRFS info (device loop2): force clearing of disk cache [ 982.361531][T13299] loop8: detected capacity change from 0 to 256 [ 982.374553][T13299] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 982.385572][T13299] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 982.414404][T13299] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x000003d0, checksum : 0x1119abd0) [ 982.454972][T13299] exFAT-fs (loop8): invalid boot region [ 982.476077][T13299] exFAT-fs (loop8): failed to recognize exfat type [ 982.514369][ T5845] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 982.644750][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.684514][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.798447][T13303] loop8: detected capacity change from 0 to 1764 [ 982.850078][T13303] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 983.095424][T13301] loop7: detected capacity change from 0 to 16384 [ 983.123159][T13307] loop2: detected capacity change from 0 to 16 [ 983.143053][T12941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 983.161456][T12941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 983.169167][T13307] erofs (device loop2): mounted with root inode @ nid 36. [ 983.184163][T12941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.237508][ T30] audit: type=1800 audit(35293525.015:171): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2179" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 983.385418][ T6439] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.423455][ T6439] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.439307][ T6854] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.930934][T13317] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.997206][ T6000] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.453082][T13319] loop2: detected capacity change from 0 to 32768 [ 984.611933][T13319] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 985.409996][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.558954][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.616748][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.623948][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.640106][T13337] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2188'. [ 985.793545][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.801140][ T6854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.817813][ T5845] ocfs2: Unmounting device (7,2) on (node local) [ 985.826452][T11556] Bluetooth: hci6: unexpected event for opcode 0x200a [ 986.525592][T13342] loop7: detected capacity change from 0 to 512 [ 986.580270][T13345] loop8: detected capacity change from 0 to 16 [ 986.587899][T13342] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 986.608496][T13342] System zones: 0-7 [ 986.623282][T13010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 986.635772][T13342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.644791][T13345] erofs (device loop8): mounted with root inode @ nid 36. [ 986.685139][ T30] audit: type=1800 audit(35293528.475:172): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2193" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 986.778308][T13010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.990033][T13010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 987.073085][T13010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 988.245691][T13010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.434504][T12941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.441712][ T5821] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 988.496651][T13010] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.599464][ T49] IPVS: stop unused estimator thread 0... [ 988.605430][ T5821] usb 3-1: device descriptor read/64, error -71 [ 988.615469][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.622704][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.690622][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.697865][ T6854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.621471][ T5821] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 989.702302][T13384] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2201'. [ 989.791787][ T5821] usb 3-1: device descriptor read/64, error -71 [ 989.845470][T12941] veth0_vlan: entered promiscuous mode [ 989.889699][T12941] veth1_vlan: entered promiscuous mode [ 989.911034][ T5821] usb usb3-port1: attempt power cycle [ 990.049873][T11556] Bluetooth: hci1: unexpected event for opcode 0x200a [ 990.193696][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.258099][ T5821] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 990.291674][ T5821] usb 3-1: device descriptor read/8, error -71 [ 990.303012][T13390] loop8: detected capacity change from 0 to 4096 [ 990.369604][T13390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.531661][ T5821] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 990.580693][ T5821] usb 3-1: device descriptor read/8, error -71 [ 990.702234][ T5821] usb usb3-port1: unable to enumerate USB device [ 990.753027][T13390] fs-verity (loop8, inode 16): fs-verity keyring is empty, rejecting signed file! [ 990.805633][T13399] loop7: detected capacity change from 0 to 32768 [ 990.813274][T13399] btrfs: Deprecated parameter 'usebackuproot' [ 990.819373][T13399] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 990.891341][T13399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2205 (13399) [ 991.045663][T13399] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 991.056298][T13399] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 991.995679][ T49] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x32f839c6 level 0 [ 992.192110][T13010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.231921][T13399] BTRFS warning (device loop7): couldn't read tree root [ 992.238926][T13399] BTRFS warning (device loop7): try to load backup roots slot 1 [ 992.247683][ T6439] BTRFS warning (device loop7): checksum verify failed on logical 5316608 mirror 1 wanted 0x5387c9d6 found 0xc5289bf1 level 0 [ 992.300957][T13399] BTRFS error (device loop7): failed to load root extent [ 992.308103][T13399] BTRFS warning (device loop7): try to load backup roots slot 2 [ 992.320596][ T6000] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 992.366836][T13399] BTRFS warning (device loop7): couldn't read tree root [ 992.374116][T13399] BTRFS warning (device loop7): try to load backup roots slot 3 [ 992.433249][T13399] BTRFS info (device loop7): rebuilding free space tree [ 992.476596][T13399] BTRFS info (device loop7): checking UUID tree [ 992.483376][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.483615][T13399] BTRFS info (device loop7): allowing degraded mounts [ 992.499395][T13399] BTRFS info (device loop7): enabling ssd optimizations [ 992.506818][T13399] BTRFS info (device loop7): enabling free space tree [ 992.513748][T13399] BTRFS info (device loop7): force clearing of disk cache [ 992.521068][T13399] BTRFS info (device loop7): trying to use backup root at mount time [ 992.529154][T13399] BTRFS info (device loop7): use zlib compression, level 3 [ 992.594021][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.605774][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.620788][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.629741][T13425] loop2: detected capacity change from 0 to 1024 [ 992.637307][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.647647][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.659166][T13425] EXT4-fs: Ignoring removed oldalloc option [ 992.788764][T13425] EXT4-fs: Ignoring removed bh option [ 992.816645][T10352] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 992.858609][T13010] veth0_vlan: entered promiscuous mode [ 992.876126][T13425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.937576][T13010] veth1_vlan: entered promiscuous mode [ 993.665476][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.025891][T13443] loop2: detected capacity change from 0 to 8 [ 994.132298][T13445] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2213'. [ 994.944557][T13453] netlink: 212 bytes leftover after parsing attributes in process `syz.8.2217'. [ 994.955572][ T51] Bluetooth: hci0: command tx timeout [ 995.053909][T13010] veth0_macvtap: entered promiscuous mode [ 995.351526][T13458] loop2: detected capacity change from 0 to 2048 [ 995.386557][T13010] veth1_macvtap: entered promiscuous mode [ 995.436062][T13458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.541316][T13010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.554373][T13010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.156426][T13465] binder: BINDER_SET_CONTEXT_MGR already set [ 996.464239][T13465] binder: 13463:13465 ioctl 4018620d 200000004a80 returned -16 [ 996.498124][ T6000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.021099][ T51] Bluetooth: hci0: command tx timeout [ 997.271780][ T6000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.423459][ T6000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.505198][ T6000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.605120][T13476] loop8: detected capacity change from 0 to 1024 [ 998.370360][T13426] chnl_net:caif_netlink_parms(): no params data found [ 998.391750][T13476] EXT4-fs: Ignoring removed oldalloc option [ 998.397699][T13476] EXT4-fs: Ignoring removed bh option [ 998.420656][ T49] bridge_slave_1: left allmulticast mode [ 998.426333][ T49] bridge_slave_1: left promiscuous mode [ 998.477692][T13476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.486363][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.611966][ T49] bridge_slave_0: left allmulticast mode [ 998.668558][ T49] bridge_slave_0: left promiscuous mode [ 998.719430][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.819129][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.005203][T11556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.016433][T11556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.025633][T11556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.043519][T11556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.054224][T11556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.100772][T11556] Bluetooth: hci0: command tx timeout [ 999.265524][T13489] loop2: detected capacity change from 0 to 40427 [ 999.279772][T13489] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 999.287603][T13489] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 999.484737][T13489] F2FS-fs (loop2): invalid crc value [ 999.549658][T13495] loop8: detected capacity change from 0 to 64 [ 999.642323][T13489] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 999.659770][T13489] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 999.666928][T13489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 999.714893][T13499] loop7: detected capacity change from 0 to 8 [ 1000.556480][T13509] loop8: detected capacity change from 0 to 2048 [ 1000.605823][T13509] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1000.657059][T13509] syz.8.2231: attempt to access beyond end of device [ 1000.657059][T13509] loop8: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 1000.672479][T13512] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1000.715341][ T30] audit: type=1800 audit(35293542.505:173): pid=13509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2231" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1000.778206][T13511] loop7: detected capacity change from 0 to 4096 [ 1001.110469][T11556] Bluetooth: hci2: command tx timeout [ 1001.180811][T11556] Bluetooth: hci0: command tx timeout [ 1001.223525][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.257449][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.285564][ T49] bond0 (unregistering): Released all slaves [ 1001.296881][T13524] loop7: detected capacity change from 0 to 512 [ 1001.327890][T13524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1001.346631][T13524] System zones: 0-7 [ 1001.357729][T13524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.945663][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.952154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.062223][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.091045][T13535] loop8: detected capacity change from 0 to 8 [ 1003.209155][ T51] Bluetooth: hci2: command tx timeout [ 1003.891179][T13543] loop2: detected capacity change from 0 to 1024 [ 1003.910398][T13543] EXT4-fs: Ignoring removed oldalloc option [ 1004.065841][T13541] loop7: detected capacity change from 0 to 32768 [ 1004.097482][T13541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2242 (13541) [ 1004.114479][T13543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.135538][T13541] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1004.145861][T13541] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1004.154770][ T49] hsr_slave_0: left promiscuous mode [ 1004.173698][ T30] audit: type=1800 audit(35293545.965:174): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2234" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1004.211143][ T49] hsr_slave_1: left promiscuous mode [ 1004.241275][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.320038][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.365848][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1004.416571][T13541] BTRFS info (device loop7): enabling ssd optimizations [ 1004.424180][T13541] BTRFS info (device loop7): enabling free space tree [ 1004.446111][T13564] loop8: detected capacity change from 0 to 4096 [ 1004.449556][ T49] veth1_vlan: left promiscuous mode [ 1004.458276][ T49] veth0_vlan: left promiscuous mode [ 1004.514459][T13541] overlayfs: missing 'lowerdir' [ 1004.529059][T13570] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.787089][T13574] loop8: detected capacity change from 0 to 16 [ 1004.796570][T13574] erofs (device loop8): mounted with root inode @ nid 36. [ 1004.820411][ T30] audit: type=1800 audit(35293546.595:175): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2247" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1004.919549][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2248'. [ 1005.089884][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1005.158556][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1005.186520][T10352] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1005.262128][ T51] Bluetooth: hci2: command tx timeout [ 1005.881478][T13585] loop2: detected capacity change from 0 to 512 [ 1005.915954][T13585] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1005.929685][T13585] System zones: 0-7 [ 1005.939077][T13585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.240132][T13576] vlan0: entered promiscuous mode [ 1007.223141][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.266142][T13426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.277082][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.286366][T13426] bridge_slave_0: entered allmulticast mode [ 1007.288544][T13426] bridge_slave_0: entered promiscuous mode [ 1007.568898][ T51] Bluetooth: hci2: command tx timeout [ 1008.623825][T13426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.388183][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.398850][T13426] bridge_slave_1: entered allmulticast mode [ 1009.408941][T13426] bridge_slave_1: entered promiscuous mode [ 1009.903599][T13616] loop8: detected capacity change from 0 to 16 [ 1009.945988][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.968973][T13616] erofs (device loop8): mounted with root inode @ nid 36. [ 1009.986833][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.298507][T13426] team0: Port device team_slave_0 added [ 1010.329673][T13426] team0: Port device team_slave_1 added [ 1010.517225][T13490] chnl_net:caif_netlink_parms(): no params data found [ 1010.553806][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.575754][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.621506][T13637] loop2: detected capacity change from 0 to 512 [ 1010.632766][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.649524][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.688399][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.721973][T13637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.753455][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.934584][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.000500][T13649] loop8: detected capacity change from 0 to 1024 [ 1011.008325][T13649] EXT4-fs: Ignoring removed oldalloc option [ 1011.014938][T13649] EXT4-fs: Ignoring removed bh option [ 1011.050219][T13649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.168587][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.922508][T13426] hsr_slave_0: entered promiscuous mode [ 1012.993695][T13426] hsr_slave_1: entered promiscuous mode [ 1015.252312][T13672] loop2: detected capacity change from 0 to 16 [ 1015.281626][T13672] erofs (device loop2): mounted with root inode @ nid 36. [ 1015.503704][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.685036][T13679] loop8: detected capacity change from 0 to 512 [ 1015.784974][T13679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.954058][T13684] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1015.964082][T13684] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1016.609126][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.630404][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.682434][T13490] bridge_slave_0: entered allmulticast mode [ 1016.694561][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.708217][T13490] bridge_slave_0: entered promiscuous mode [ 1016.728578][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.750758][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.758047][T13490] bridge_slave_1: entered allmulticast mode [ 1016.779991][T13490] bridge_slave_1: entered promiscuous mode [ 1016.908420][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.393603][T13697] loop8: detected capacity change from 0 to 32768 [ 1018.418206][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.159474][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.220007][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.362867][T13708] loop2: detected capacity change from 0 to 16 [ 1019.431034][T13708] erofs (device loop2): mounted with root inode @ nid 36. [ 1019.562615][T13712] overlayfs: failed to clone upperpath [ 1019.572379][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.698470][T13714] loop7: detected capacity change from 0 to 1024 [ 1019.819006][T13490] team0: Port device team_slave_0 added [ 1019.882826][T13490] team0: Port device team_slave_1 added [ 1020.019273][T13716] loop8: detected capacity change from 0 to 32768 [ 1020.030507][T13716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2284 (13716) [ 1020.045537][T13714] EXT4-fs: Ignoring removed oldalloc option [ 1020.051571][T13714] EXT4-fs: Ignoring removed bh option [ 1020.063552][T13716] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1020.074814][T13716] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1020.085415][T13716] workqueue: max_active 2560 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 1020.098236][T13716] workqueue: max_active 2560 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 1020.142789][T13716] workqueue: max_active 2560 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 1020.164954][T13716] workqueue: max_active 2560 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 1020.181467][T13716] workqueue: max_active 2560 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 1020.198209][T13716] workqueue: max_active 2560 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 1020.200259][T13714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.222705][T13716] workqueue: max_active 2560 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 1020.310417][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.354678][T13716] BTRFS info (device loop8): rebuilding free space tree [ 1020.401201][T13716] BTRFS info (device loop8): enabling ssd optimizations [ 1020.408243][T13716] BTRFS info (device loop8): turning on sync discard [ 1020.415190][T13716] BTRFS info (device loop8): enabling free space tree [ 1020.422033][T13716] BTRFS info (device loop8): force clearing of disk cache [ 1020.429156][T13716] BTRFS info (device loop8): enabling auto defrag [ 1020.435648][T13716] BTRFS info (device loop8): max_inline set to 0 [ 1020.451262][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.487817][T13716] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1020.512119][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.549582][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.558039][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.802339][T13744] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1020.811627][T13744] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1021.235561][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.533591][T10352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.032517][T13490] hsr_slave_0: entered promiscuous mode [ 1022.071426][T13490] hsr_slave_1: entered promiscuous mode [ 1022.091780][T13490] debugfs: 'hsr0' already exists in 'hsr' [ 1022.119321][T13490] Cannot create hsr debugfs directory [ 1022.584436][ T49] bridge_slave_1: left allmulticast mode [ 1022.600730][ T49] bridge_slave_1: left promiscuous mode [ 1022.620694][T12321] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1022.628973][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.646072][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 1022.661412][ T49] bridge_slave_0: left allmulticast mode [ 1022.679662][ T49] bridge_slave_0: left promiscuous mode [ 1022.699634][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.000656][T12321] usb 3-1: Using ep0 maxpacket: 16 [ 1023.025664][T12321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.133467][T13778] netlink: 4804 bytes leftover after parsing attributes in process `syz.3.2305'. [ 1023.143845][T13778] netlink: 4804 bytes leftover after parsing attributes in process `syz.3.2305'. [ 1023.312713][T12321] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1023.336828][T12321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.388530][T12321] usb 3-1: Product: syz [ 1023.417478][T12321] usb 3-1: Manufacturer: syz [ 1023.442007][T12321] usb 3-1: SerialNumber: syz [ 1023.546561][T12321] usb 3-1: config 0 descriptor?? [ 1023.783445][T13782] loop8: detected capacity change from 0 to 1024 [ 1023.791301][T13782] EXT4-fs: Ignoring removed oldalloc option [ 1023.797236][T13782] EXT4-fs: Ignoring removed bh option [ 1023.935307][T13782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.031116][T13789] loop7: detected capacity change from 0 to 4096 [ 1024.552344][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.830643][ T8701] usb 3-1: USB disconnect, device number 40 [ 1026.221954][T13804] loop8: detected capacity change from 0 to 32768 [ 1026.230139][T13804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2310 (13804) [ 1026.582215][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.677328][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.743222][ T49] bond0 (unregistering): Released all slaves [ 1027.032823][T13804] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1027.043255][T13804] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1027.301262][T13804] BTRFS info (device loop8): enabling ssd optimizations [ 1027.308375][T13804] BTRFS info (device loop8): enabling free space tree [ 1027.355587][T13804] BTRFS info (device loop8): Snapshot src from another FS [ 1027.458431][T10227] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1027.730799][ T49] hsr_slave_0: left promiscuous mode [ 1027.777690][ T49] hsr_slave_1: left promiscuous mode [ 1027.807291][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.827174][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.862864][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.870342][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.970297][ T49] veth1_macvtap: left promiscuous mode [ 1027.999355][ T49] veth0_macvtap: left promiscuous mode [ 1028.020872][ T49] veth1_vlan: left promiscuous mode [ 1028.051119][ T49] veth0_vlan: left promiscuous mode [ 1028.220158][T13838] loop2: detected capacity change from 0 to 1024 [ 1028.261906][T13838] EXT4-fs: Ignoring removed oldalloc option [ 1028.280679][T13838] EXT4-fs: Ignoring removed bh option [ 1028.736921][T13845] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.2319'. [ 1028.746957][T13845] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.2319'. [ 1028.762047][T13838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.406457][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.801889][T13848] loop7: detected capacity change from 0 to 32768 [ 1029.852194][T13848] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1029.917238][T13848] XFS (loop7): Ending clean mount [ 1029.946619][T13848] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1031.422552][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2326'. [ 1033.164786][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1033.326509][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1036.808758][T13931] loop2: detected capacity change from 0 to 16 [ 1036.834016][T13931] erofs (device loop2): mounted with root inode @ nid 36. [ 1038.643515][T13490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1039.035972][T13490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1039.977707][T13952] vivid-000: kernel_thread() failed [ 1040.029316][T13490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1040.180019][T13490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1040.378708][T13971] loop7: detected capacity change from 0 to 16 [ 1040.407773][T13426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1040.425031][T13971] erofs (device loop7): mounted with root inode @ nid 36. [ 1040.466428][T13426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1040.537981][T13975] loop2: detected capacity change from 0 to 512 [ 1040.568538][T13426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1040.596709][T13975] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1040.607097][T13426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1040.627260][T13975] System zones: 0-7 [ 1040.669380][T13975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.047209][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.147687][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.184749][T13426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.222129][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.229298][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.341460][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.348699][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.426670][T13426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.507214][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.514472][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.640009][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.647230][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.124229][T13490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.264612][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.523754][T13426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.764132][T14015] loop2: detected capacity change from 0 to 32768 [ 1043.786315][T14015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2366 (14015) [ 1043.838755][T14015] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1043.849064][T14015] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1044.069213][T14027] loop7: detected capacity change from 0 to 16 [ 1044.123936][T14015] BTRFS info (device loop2): enabling ssd optimizations [ 1044.131032][T14015] BTRFS info (device loop2): enabling free space tree [ 1044.155753][T14027] erofs (device loop7): mounted with root inode @ nid 36. [ 1044.552073][T14036] netlink: 'syz.7.2371': attribute type 3 has an invalid length. [ 1044.588204][T14015] BTRFS info (device loop2): balance: start -d -m [ 1044.601755][T14036] netlink: 'syz.7.2371': attribute type 3 has an invalid length. [ 1044.601879][T14015] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 1044.674594][T14015] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 1044.695461][T13426] veth0_vlan: entered promiscuous mode [ 1045.057606][T14043] loop7: detected capacity change from 0 to 32768 [ 1045.076864][T14015] BTRFS info (device loop2): found 9 extents, stage: move data extents [ 1045.078221][T13426] veth1_vlan: entered promiscuous mode [ 1045.095182][T14043] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 10d0b88a-140c-40cc-be74-29431ba39fad [ 1045.105928][T14043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2373 (14043) [ 1045.162302][T14015] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 1045.184288][T14043] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1045.195384][T14043] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1045.221790][T14015] BTRFS info (device loop2): balance: ended with status: 0 [ 1045.324036][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.428301][T14043] BTRFS info (device loop7): enabling ssd optimizations [ 1045.435329][T14043] BTRFS info (device loop7): enabling free space tree [ 1045.528363][T13426] veth0_macvtap: entered promiscuous mode [ 1045.614888][T13426] veth1_macvtap: entered promiscuous mode [ 1045.706046][T10352] BTRFS info (device loop7): last unmount of filesystem 10d0b88a-140c-40cc-be74-29431ba39fad [ 1045.758499][T13490] veth0_vlan: entered promiscuous mode [ 1045.779046][T13426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.830374][T13426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.873326][T14063] loop8: detected capacity change from 0 to 512 [ 1045.889764][T13490] veth1_vlan: entered promiscuous mode [ 1045.952241][T14063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1045.967735][ T6371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.003795][T12582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.015180][T14063] System zones: 0-7 [ 1046.053282][T14063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.093477][T12582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.138792][T12582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.148300][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1046.226363][T13490] veth0_macvtap: entered promiscuous mode [ 1046.377643][T13490] veth1_macvtap: entered promiscuous mode [ 1046.498305][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.568195][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.631188][ T6000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.674105][ T6000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.712694][ T6000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.762461][ T6000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.771936][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.790686][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.916596][T14070] loop7: detected capacity change from 0 to 64 [ 1046.977918][ T6439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.994956][ T6439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.392286][ T6854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.418078][ T6854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.287850][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.322811][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.236229][ T8701] IPVS: starting estimator thread 0... [ 1049.360717][T14089] IPVS: using max 23 ests per chain, 55200 per kthread [ 1049.405209][T14092] loop7: detected capacity change from 0 to 1024 [ 1049.432203][T14095] loop2: detected capacity change from 0 to 8 [ 1049.469096][T14095] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2383'. [ 1049.553431][T14097] loop1: detected capacity change from 0 to 2048 [ 1049.555401][T10227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.564112][T14097] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1049.624291][T14100] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.635572][T14097] syz.1.2384: attempt to access beyond end of device [ 1049.635572][T14097] loop1: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 1051.729193][ T51] Bluetooth: hci1: unexpected event for opcode 0x200a [ 1051.806575][T14135] loop1: detected capacity change from 0 to 512 [ 1051.834565][T14135] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1051.848848][T14135] System zones: 0-7 [ 1051.856270][T14135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.287345][T14144] loop7: detected capacity change from 0 to 2048 [ 1052.356527][T14144] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1052.530698][ T30] audit: type=1326 audit(35293594.315:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.8.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084338eec9 code=0x7fc00000 [ 1052.575820][T14150] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1052.832890][T14155] loop8: detected capacity change from 0 to 512 [ 1052.881382][T14155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1052.924822][T14155] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1052.987071][T14155] EXT4-fs (loop8): 1 truncate cleaned up [ 1053.033195][T14155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.105873][T14164] loop2: detected capacity change from 0 to 512 [ 1053.166558][T14164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.201214][T14162] loop7: detected capacity change from 0 to 2048 [ 1053.217997][T14164] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2410: corrupted xattr block 19: overlapping e_value [ 1053.242378][T14164] EXT4-fs (loop2): Remounting filesystem read-only [ 1053.255113][T14162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.499997][T10227] EXT4-fs error (device loop8): ext4_readdir:262: inode #11: block 54: comm syz-executor: path /221/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1053.673054][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.676026][T10227] EXT4-fs error (device loop8): ext4_empty_dir:3119: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1053.965710][T10227] EXT4-fs error (device loop8): ext4_readdir:262: inode #11: block 54: comm syz-executor: path /221/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1054.042738][T10227] EXT4-fs error (device loop8): ext4_empty_dir:3119: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1054.101714][T10227] EXT4-fs error (device loop8): ext4_readdir:262: inode #11: block 54: comm syz-executor: path /221/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1054.160778][T10227] EXT4-fs error (device loop8): ext4_empty_dir:3119: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1054.231781][T10227] EXT4-fs error (device loop8): ext4_readdir:262: inode #11: block 54: comm syz-executor: path /221/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1054.385020][T10227] EXT4-fs error (device loop8): ext4_empty_dir:3119: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1054.520451][T10227] EXT4-fs error (device loop8): ext4_readdir:262: inode #11: block 54: comm syz-executor: path /221/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1054.542002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1054.588592][T10227] EXT4-fs error (device loop8): ext4_empty_dir:3119: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1055.406593][T14180] trusted_key: encrypted_key: insufficient parameters specified [ 1057.001499][T14183] loop7: detected capacity change from 0 to 32768 [ 1057.014388][T14183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2415 (14183) [ 1057.033379][T14183] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1057.043591][T14183] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1057.056197][T13490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.183721][T14183] BTRFS info (device loop7): enabling ssd optimizations [ 1057.191026][T14183] BTRFS info (device loop7): enabling free space tree [ 1057.471420][T14203] loop1: detected capacity change from 0 to 1024 [ 1058.156512][T14183] BTRFS info (device loop7): balance: start -d -m [ 1058.164483][T14183] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata [ 1058.164524][T11494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.287669][T14183] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata [ 1058.368693][T14183] BTRFS info (device loop7): found 9 extents, stage: move data extents [ 1058.421582][T14183] BTRFS info (device loop7): found 1 extents, stage: update data pointers [ 1058.464272][T14183] BTRFS info (device loop7): balance: ended with status: 0 [ 1058.916122][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.169433][T14215] loop1: detected capacity change from 0 to 40427 [ 1059.190765][T14215] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (0, 24) [ 1059.198574][T14215] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1059.206931][T14215] F2FS-fs (loop1): build fault injection rate: 6 [ 1059.213310][T14215] F2FS-fs (loop1): build fault injection type: 0x0 [ 1059.222715][T14215] F2FS-fs (loop1): invalid crc value [ 1059.313653][T14215] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1059.332629][T14215] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1059.339677][T14215] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1059.357473][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.417864][T14215] syz.1.2424: attempt to access beyond end of device [ 1059.417864][T14215] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1059.516294][T13490] syz-executor: attempt to access beyond end of device [ 1059.516294][T13490] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1059.595273][T13490] CPU: 0 UID: 0 PID: 13490 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1059.595323][T13490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1059.595346][T13490] Call Trace: [ 1059.595358][T13490] [ 1059.595372][T13490] dump_stack_lvl+0x16c/0x1f0 [ 1059.595442][T13490] f2fs_handle_critical_error+0x624/0x9f0 [ 1059.595492][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.595538][T13490] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1059.595587][T13490] f2fs_write_end_io+0x958/0xcf0 [ 1059.595642][T13490] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1059.595703][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.595762][T13490] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1059.595810][T13490] bio_endio+0x713/0x860 [ 1059.595873][T13490] submit_bio_noacct+0x306/0x1ed0 [ 1059.595930][T13490] __submit_merged_bio+0x33c/0x770 [ 1059.595988][T13490] __submit_merged_write_cond+0x319/0x3f0 [ 1059.596053][T13490] f2fs_write_cache_pages+0x2067/0x2570 [ 1059.596145][T13490] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1059.596213][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.596258][T13490] ? __lock_acquire+0x62e/0x1ce0 [ 1059.596308][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.596352][T13490] ? __lock_acquire+0x62e/0x1ce0 [ 1059.596435][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.596480][T13490] ? check_irq_usage+0xcb/0x920 [ 1059.596567][T13490] ? check_path.constprop.0+0x24/0x50 [ 1059.596629][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.596690][T13490] f2fs_write_data_pages+0x4ad/0xd90 [ 1059.596758][T13490] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1059.596833][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.596881][T13490] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1059.596944][T13490] do_writepages+0x27a/0x600 [ 1059.596993][T13490] ? __pfx_do_writepages+0x10/0x10 [ 1059.597030][T13490] ? do_raw_spin_unlock+0x172/0x230 [ 1059.597078][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.597124][T13490] ? _raw_spin_unlock+0x28/0x50 [ 1059.597186][T13490] filemap_fdatawrite_wbc+0x104/0x160 [ 1059.597231][T13490] __filemap_fdatawrite_range+0xb9/0x100 [ 1059.597286][T13490] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1059.597340][T13490] ? check_path.constprop.0+0x24/0x50 [ 1059.597464][T13490] ? find_held_lock+0x2b/0x80 [ 1059.597520][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.597567][T13490] ? do_raw_spin_unlock+0x172/0x230 [ 1059.597614][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.597672][T13490] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1059.597757][T13490] block_operations+0x2b0/0xfe0 [ 1059.597823][T13490] ? __pfx___schedule+0x10/0x10 [ 1059.597884][T13490] ? __pfx_block_operations+0x10/0x10 [ 1059.598007][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598053][T13490] ? down_write+0x14d/0x200 [ 1059.598092][T13490] ? __pfx_down_write+0x10/0x10 [ 1059.598136][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598181][T13490] ? rcu_is_watching+0x12/0xc0 [ 1059.598243][T13490] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1059.598316][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598362][T13490] ? kfree+0x2b4/0x4d0 [ 1059.598426][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598476][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598520][T13490] ? rcu_is_watching+0x12/0xc0 [ 1059.598574][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.598620][T13490] ? kthread_stop+0x272/0x630 [ 1059.598674][T13490] kill_f2fs_super+0x3c2/0x470 [ 1059.598737][T13490] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1059.598797][T13490] ? lockdep_hardirqs_on+0x7c/0x110 [ 1059.598882][T13490] deactivate_locked_super+0xc1/0x1a0 [ 1059.598933][T13490] deactivate_super+0xde/0x100 [ 1059.598984][T13490] cleanup_mnt+0x225/0x450 [ 1059.599039][T13490] task_work_run+0x150/0x240 [ 1059.599088][T13490] ? __pfx_task_work_run+0x10/0x10 [ 1059.599131][T13490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.599182][T13490] ? __pfx___x64_sys_umount+0x10/0x10 [ 1059.599251][T13490] exit_to_user_mode_loop+0xdd/0x100 [ 1059.599302][T13490] do_syscall_64+0x419/0x4e0 [ 1059.599345][T13490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.599383][T13490] RIP: 0033:0x7fd7ea9901f7 [ 1059.599414][T13490] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1059.599452][T13490] RSP: 002b:00007ffca85c79f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1059.599488][T13490] RAX: 0000000000000000 RBX: 00007fd7eaa11d7d RCX: 00007fd7ea9901f7 [ 1059.599513][T13490] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca85c7ab0 [ 1059.599537][T13490] RBP: 00007ffca85c7ab0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.599562][T13490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca85c8b40 [ 1059.599587][T13490] R13: 00007fd7eaa11d7d R14: 0000000000102a56 R15: 00007ffca85c8b80 [ 1059.599641][T13490] [ 1059.599660][T13490] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1059.638864][T14227] loop2: detected capacity change from 0 to 512 [ 1060.118574][T10352] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1060.170721][T14227] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 1060.178861][T14227] System zones: 0-7 [ 1060.191293][T14227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.216506][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.416736][T13100] IPVS: starting estimator thread 0... [ 1060.530744][T14234] IPVS: using max 21 ests per chain, 50400 per kthread [ 1060.652792][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.763592][T14239] loop0: detected capacity change from 0 to 256 [ 1060.801907][T11556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.830039][T11556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.839580][T11556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.871016][T11556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.880120][T11556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1063.141470][T11556] Bluetooth: hci3: command tx timeout [ 1064.311697][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.318178][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.453767][T14240] chnl_net:caif_netlink_parms(): no params data found [ 1064.586880][ T13] bridge_slave_1: left allmulticast mode [ 1064.616162][ T13] bridge_slave_1: left promiscuous mode [ 1064.657266][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.772581][ T13] bridge_slave_0: left allmulticast mode [ 1064.778268][ T13] bridge_slave_0: left promiscuous mode [ 1064.827787][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.917990][T14269] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1065.017759][T14269] CIFS mount error: No usable UNC path provided in device string! [ 1065.017759][T14269] [ 1065.057469][T14269] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1065.188044][T11556] Bluetooth: hci3: command tx timeout [ 1067.350676][T11556] Bluetooth: hci3: command tx timeout [ 1068.048408][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.551733][T14292] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1069.020688][ T7054] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1069.057633][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.852172][T14302] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1069.861472][T14302] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1069.875064][T11556] Bluetooth: hci3: command tx timeout [ 1069.880230][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.918458][ T13] bond0 (unregistering): Released all slaves [ 1069.940631][ T7054] usb 8-1: Using ep0 maxpacket: 32 [ 1069.952219][ T7054] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.975042][ T7054] usb 8-1: config 0 has no interfaces? [ 1070.173367][ T7054] usb 8-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 1070.213466][ T7054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.281952][ T7054] usb 8-1: config 0 descriptor?? [ 1070.666875][T14297] ------------[ cut here ]------------ [ 1070.673094][T14297] WARNING: CPU: 1 PID: 14297 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1070.684279][T14297] Modules linked in: [ 1070.688843][T14297] CPU: 1 UID: 0 PID: 14297 Comm: syz.7.2450 Not tainted syzkaller #0 PREEMPT(full) [ 1070.698811][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1070.709059][T14297] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1070.715843][T14297] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 da 94 fb fe 83 fe 0a 0f 86 0a fe ff ff 80 3d ee 74 33 0e 00 75 0b c6 05 e5 74 33 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1070.736227][T14297] RSP: 0018:ffffc9000b3577f0 EFLAGS: 00010246 [ 1070.744027][T14297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1070.752675][T14297] RDX: 0000000000000000 RSI: 000000000000002c RDI: 0000000000040d40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1070.760900][T14297] RBP: 000000000000002c R08: 0000000000000005 R09: 0000000000000009 [ 1070.768891][T14297] R10: 000000000000002c R11: 0000000000000000 R12: 0000000000040d40 [ 1070.777046][T14297] R13: 1ffff9200166af13 R14: ffffffff9a8c2d64 R15: 000000000000002c [ 1070.785093][T14297] FS: 00007f42c5dc26c0(0000) GS:ffff888124f72000(0000) knlGS:0000000000000000 [ 1070.794483][T14297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.801161][T14297] CR2: 0000200000001000 CR3: 000000005eb71000 CR4: 0000000000350ef0 [ 1070.809159][T14297] Call Trace: [ 1070.812518][T14297] [ 1070.815457][T14297] ? do_syscall_64+0xcd/0x4e0 [ 1070.820158][T14297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.826333][T14297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1070.832788][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.839111][T14297] ? kasan_quarantine_put+0x10a/0x240 [ 1070.845834][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.852087][T14297] ? lockdep_hardirqs_on+0x7c/0x110 [ 1070.857340][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.863408][T14297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.869352][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.875108][T14297] ? policy_nodemask+0xea/0x4e0 [ 1070.880015][T14297] alloc_pages_mpol+0x1fb/0x550 [ 1070.884971][T14297] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1070.890403][T14297] ? v9fs_fid_get_acl+0x7a/0x120 [ 1070.895448][T14297] ___kmalloc_large_node+0xed/0x160 [ 1070.900736][T14297] ? v9fs_fid_get_acl+0x7a/0x120 [ 1070.905707][T14297] __kmalloc_large_node_noprof+0x1c/0x70 [ 1070.911453][T14297] __kmalloc_noprof.cold+0xc/0x61 [ 1070.916611][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.922557][T14297] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1070.928584][T14297] v9fs_fid_get_acl+0x7a/0x120 [ 1070.933464][T14297] v9fs_get_acl+0xee/0x530 [ 1070.937923][T14297] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1070.943543][T14297] v9fs_mount+0x4fd/0xa90 [ 1070.949236][T14297] ? rcu_is_watching+0x12/0xc0 [ 1070.954704][T14297] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.959603][T14297] ? aa_get_newest_label+0xd2/0x250 [ 1070.964925][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.970644][T14297] ? apparmor_capable+0x114/0x1d0 [ 1070.975727][T14297] ? __pfx_v9fs_mount+0x10/0x10 [ 1070.980694][T14297] legacy_get_tree+0x10c/0x220 [ 1070.985519][T14297] vfs_get_tree+0x8e/0x340 [ 1070.989961][T14297] path_mount+0x1516/0x2060 [ 1070.994600][T14297] ? __pfx_path_mount+0x10/0x10 [ 1070.999513][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.005235][T14297] ? kmem_cache_free+0x2d1/0x4d0 [ 1071.010208][T14297] ? putname+0x154/0x1a0 [ 1071.014569][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.020467][T14297] ? putname+0x154/0x1a0 [ 1071.025777][T14297] ? __x64_sys_mount+0x28d/0x310 [ 1071.030831][T14297] __x64_sys_mount+0x28d/0x310 [ 1071.035646][T14297] ? __pfx___x64_sys_mount+0x10/0x10 [ 1071.041039][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.046724][T14297] do_syscall_64+0xcd/0x4e0 [ 1071.052620][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.058551][T14297] RIP: 0033:0x7f42c4f8eec9 [ 1071.063596][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.083479][T14297] RSP: 002b:00007f42c5dc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1071.091980][T14297] RAX: ffffffffffffffda RBX: 00007f42c51e5fa0 RCX: 00007f42c4f8eec9 [ 1071.099971][T14297] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1071.108050][T14297] RBP: 00007f42c5011f91 R08: 0000200000000500 R09: 0000000000000000 [ 1071.116105][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.124161][T14297] R13: 00007f42c51e6038 R14: 00007f42c51e5fa0 R15: 00007ffe7f5162d8 [ 1071.132239][T14297] [ 1071.135269][T14297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1071.142569][T14297] CPU: 1 UID: 0 PID: 14297 Comm: syz.7.2450 Not tainted syzkaller #0 PREEMPT(full) [ 1071.151963][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1071.162032][T14297] Call Trace: [ 1071.165315][T14297] [ 1071.168249][T14297] dump_stack_lvl+0x3d/0x1f0 [ 1071.172896][T14297] vpanic+0x6e8/0x7a0 [ 1071.176896][T14297] ? __pfx_vpanic+0x10/0x10 [ 1071.181426][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.187103][T14297] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1071.193206][T14297] panic+0xca/0xd0 [ 1071.196946][T14297] ? __pfx_panic+0x10/0x10 [ 1071.201402][T14297] check_panic_on_warn+0xab/0xb0 [ 1071.206361][T14297] __warn+0xf6/0x3c0 [ 1071.210268][T14297] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1071.216365][T14297] report_bug+0x3c3/0x580 [ 1071.220729][T14297] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1071.226825][T14297] handle_bug+0x184/0x210 [ 1071.231171][T14297] exc_invalid_op+0x17/0x50 [ 1071.235688][T14297] asm_exc_invalid_op+0x1a/0x20 [ 1071.240550][T14297] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1071.247256][T14297] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 da 94 fb fe 83 fe 0a 0f 86 0a fe ff ff 80 3d ee 74 33 0e 00 75 0b c6 05 e5 74 33 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1071.266875][T14297] RSP: 0018:ffffc9000b3577f0 EFLAGS: 00010246 [ 1071.272955][T14297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1071.280933][T14297] RDX: 0000000000000000 RSI: 000000000000002c RDI: 0000000000040d40 [ 1071.288910][T14297] RBP: 000000000000002c R08: 0000000000000005 R09: 0000000000000009 [ 1071.296884][T14297] R10: 000000000000002c R11: 0000000000000000 R12: 0000000000040d40 [ 1071.304856][T14297] R13: 1ffff9200166af13 R14: ffffffff9a8c2d64 R15: 000000000000002c [ 1071.312855][T14297] ? do_syscall_64+0xcd/0x4e0 [ 1071.317545][T14297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.323643][T14297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1071.330018][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.335700][T14297] ? kasan_quarantine_put+0x10a/0x240 [ 1071.341109][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.346766][T14297] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.352014][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.357667][T14297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1071.363591][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.369241][T14297] ? policy_nodemask+0xea/0x4e0 [ 1071.374134][T14297] alloc_pages_mpol+0x1fb/0x550 [ 1071.379017][T14297] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1071.384432][T14297] ? v9fs_fid_get_acl+0x7a/0x120 [ 1071.389393][T14297] ___kmalloc_large_node+0xed/0x160 [ 1071.394637][T14297] ? v9fs_fid_get_acl+0x7a/0x120 [ 1071.399596][T14297] __kmalloc_large_node_noprof+0x1c/0x70 [ 1071.405243][T14297] __kmalloc_noprof.cold+0xc/0x61 [ 1071.410296][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.415946][T14297] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1071.421960][T14297] v9fs_fid_get_acl+0x7a/0x120 [ 1071.426749][T14297] v9fs_get_acl+0xee/0x530 [ 1071.431189][T14297] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1071.436753][T14297] v9fs_mount+0x4fd/0xa90 [ 1071.441108][T14297] ? rcu_is_watching+0x12/0xc0 [ 1071.445900][T14297] ? __pfx_v9fs_mount+0x10/0x10 [ 1071.451215][T14297] ? aa_get_newest_label+0xd2/0x250 [ 1071.456447][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.462100][T14297] ? apparmor_capable+0x114/0x1d0 [ 1071.467165][T14297] ? __pfx_v9fs_mount+0x10/0x10 [ 1071.472042][T14297] legacy_get_tree+0x10c/0x220 [ 1071.476840][T14297] vfs_get_tree+0x8e/0x340 [ 1071.481276][T14297] path_mount+0x1516/0x2060 [ 1071.485821][T14297] ? __pfx_path_mount+0x10/0x10 [ 1071.490706][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.496357][T14297] ? kmem_cache_free+0x2d1/0x4d0 [ 1071.501317][T14297] ? putname+0x154/0x1a0 [ 1071.505599][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.511249][T14297] ? putname+0x154/0x1a0 [ 1071.515529][T14297] ? __x64_sys_mount+0x28d/0x310 [ 1071.520496][T14297] __x64_sys_mount+0x28d/0x310 [ 1071.525298][T14297] ? __pfx___x64_sys_mount+0x10/0x10 [ 1071.530621][T14297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.536281][T14297] do_syscall_64+0xcd/0x4e0 [ 1071.540806][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.546716][T14297] RIP: 0033:0x7f42c4f8eec9 [ 1071.551135][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.570758][T14297] RSP: 002b:00007f42c5dc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1071.579194][T14297] RAX: ffffffffffffffda RBX: 00007f42c51e5fa0 RCX: 00007f42c4f8eec9 [ 1071.587171][T14297] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1071.595149][T14297] RBP: 00007f42c5011f91 R08: 0000200000000500 R09: 0000000000000000 [ 1071.603126][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.611098][T14297] R13: 00007f42c51e6038 R14: 00007f42c51e5fa0 R15: 00007ffe7f5162d8 [ 1071.619096][T14297] [ 1071.622303][T14297] Kernel Offset: disabled [ 1071.626623][T14297] Rebooting in 86400 seconds..