last executing test programs: 36.16162187s ago: executing program 2 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x800, 0x800, 0x641, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x4, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x20e, &(0x7f0000000700)="$eJzslb9rFEEUx78zu7e5BAlYaGFzFgEjmL3djUoai9gLQiJqeZhJOJ3kwuWKJCAk2NhYi3+A/4JFKgs7rawtVBAsTGklODKzs7ezud0Ly/mj8H3g5r4zs+/Nm7ezb0AQxH/L50/fPz67ubR6BcAZzGHKjn/18me48/yHF17Dyjdbs4+PTvpjAJTK+/4p6wcAXi97wEHqVinXGpizPlfBjdbcAcdlq++CIcxiVbm1AMN9O/xwWw1305u2Qgr2oCfX1rtSRLqJdZOsd182CvHp+I8PGdYANO0SzJnf2dt/1JFAPxVSZKKhsnVGpuqKcfkz8S1z3HBSoN/XvadPDnU/tOORk78YHLHVi2BYsXoJUwjDsGW7Inb2f8HP/Xvpa0s5qLOT5mSJqCvOLpRM6RM+3nxaCr3b3xbGT/VHNhgUjuDfy2qZ0HHUt+KtUavgFD9i8pjZyRHmHonzx0dvR62+/NP0TiZM4QLgTj3Xx+b9jJS3Sq3OFUYuVnwygS0IlUcirR/MBy459cl3boX2YHO7vbO3v9Dd7GyIDbGVJIvXo6tRdC1pm9qctmPqX9PUpxnHf6Pi2YAF2O0MBv14Fxj042E/SVun4q686n0zNtzUP475H0pl14v58LKLkhXXYPbHzb9W815l8ARBEARBEARBEARBEARBELVogeHd7LCryvGT22b6VwAAAP//9qFdMQ==") openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') lseek(r6, 0x8e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2000000, &(0x7f0000000040)={[{@errors_remount}, {@nombcache}, {@noload}]}, 0x0, 0x4fa, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 34.103028468s ago: executing program 2 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x17c, &(0x7f0000000240)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) setns(r4, 0x24020000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x0, @time, 0x0, {}, 0x3f}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000058, &(0x7f0000001080)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30300000000030303030303030303030303030303030302c6769643d69676710b01c1f9d6e6f72652c6e6f6164696e6963622c756e64656c6574652c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030312c7569643d69676e6f72652c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030352c766f6c756d653d303030303030386ee5eef62188e3303030303030303030308930302c756e1202682e87dc70c6e7ea5ddae3187388c671a93c7e"], 0x1, 0xc43, &(0x7f0000000200)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) utimensat(r5, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 33.018464396s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r9, &(0x7f0000000380)='./file0\x00', r9, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000940)=[r3, r3, r4, r3, r3], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 33.003185357s ago: executing program 4 (id=270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x3, 0x238, &(0x7f0000000500)="$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") r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = add_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a2, &(0x7f0000001300)="$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") r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380006, @private0}, 0x1c) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESOCT=r7], 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 31.934328074s ago: executing program 2 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x3859, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x2922, &(0x7f00000000c0)) syz_io_uring_setup(0x247a, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x2fd, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) 31.424524846s ago: executing program 4 (id=275): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="66643d5572882c64f33f5efd461216c4c438c82a85e274724aff4e259cb926447039712ef866d3a404adde9d5c733f0c581f4a769e09000000d051a271b3d108e89e2afaac5c85a2c7347f30408201b5", @ANYRES8=r3]) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getresgid(0x0, &(0x7f00000000c0)=0x0, 0x0) setresgid(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r7}}, './file0\x00'}) sendto$inet6(r6, &(0x7f0000000200)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xffffffff}, 0x1c) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0xdf830ad0f8724dfb) fcntl$getownex(r6, 0x10, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 30.079414525s ago: executing program 4 (id=276): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="0204000001"]) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 30.048535927s ago: executing program 2 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 28.903043981s ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r7, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000000940)=[r1, r1, r2, r1, r1], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 28.739759364s ago: executing program 4 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/1924], 0x784}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000020000000000afb648a2245213d0e82c50e7effda50fa36ee08f40ce87ec275a"], 0x10}, {&(0x7f0000000440)=ANY=[@ANYBLOB="1000000029100000000000000000000084cf6527212a7f3718e9d7b409f3856b86fcf06aa8874b6e3dbd8ce073cc44f87b3c06f1"], 0x10}], 0x2}, 0x0) r10 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32, @ANYBLOB="3e9aa8e9a55ea27e16f328b441459f770d0fae217f7aa1873e6f8c838a3407fc183c180712d7fa59049493dda10a938ecb13d2a2769193307dcdd76d7bef7ee3cef5ca88641c4e6c9a9bff99558e8772603c56e0857a0b5b455dd435da0e12bccd36558edd33332ead137065c3e5434f62373e3b80ca7b6cf2ca736e4b4aba5d", @ANYBLOB="ba0f2bed16228fd41e2f7134373f4be75c3bb494542fe40ba39fc978276a0df4ebcd5d5d70b506fb3e196e2f9660dcc55ab6cffeca1a48775b45d0f8", @ANYRES64=0x0], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=0x0, @ANYBLOB="00000000000064676576650a000100be77f8fd6f5e30afdae13237cfe697cab375ddb7d47643f6df3eac0c6858a3cd8f2d"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="680f0000080211000000ffffffffffff0802110000008efffffffffffeffffffffffffff0802110000015d002838ed2955319e11a7deca1ddfb7c9f317064685e4323fb7df7096561e753a180d87aca5796adb991a1efe673aab0969e7fb29a33e2e420c72af472009b4ccc49c5dd2e16cea005a03bcc9f87d0b36ff392a7ca7bedeeda17ff7f6b3ac00"], 0x8a) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xa00}], 0x1000000000000076, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f0000000280)="c7f445099371ebced758fab0428c82d7cfee856dd905591b1484c4f94791e7a926ef20ed3115755a286cb6e5b1fb9b6bd0c27f488ea0757292b0d1d2e6927fe0ed711b5fc67b4e098c9d428546de68fb90bb88177bf9f48b18", 0x59, 0x3, 0x0, 0x0, r11}, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x0, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0x0) 24.534604746s ago: executing program 4 (id=288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r1) fcntl$setsig(r0, 0xa, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(0xffffffffffffffff, 0x540f, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff58"], 0x3, 0x377, &(0x7f00000002c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r8, 0x0) ftruncate(r8, 0x6) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync() capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000640)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7e}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0x4, 0x2, 0x0, 0x6, 0x1}, @jmp={0x5, 0x0, 0x2, 0x5, 0x7, 0xffffffffffffffff, 0x8}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000180)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) sync_file_range(r8, 0x0, 0x0, 0x6) close_range(r7, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000bfa200000000000007020000f8ffffffb703000008000000b704000000000000009e0000009500"/61], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r9}, 0x10) 24.074329923s ago: executing program 2 (id=289): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) syz_open_procfs(r0, &(0x7f0000000240)='net/softnet_stat\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) sync() 13.356686144s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 11.739003726s ago: executing program 0 (id=316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x3, 0x238, &(0x7f0000000500)="$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") r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = add_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a2, &(0x7f0000001300)="$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") r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380006, @private0}, 0x1c) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESOCT=r7], 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 11.223004838s ago: executing program 0 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r1, 0x400, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r8, &(0x7f0000000380)='./file0\x00', r8, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x2, &(0x7f0000000940)=[r2, r2, r3, r2, r2], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 7.698109844s ago: executing program 0 (id=324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x3, 0x238, &(0x7f0000000500)="$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") r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = add_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a2, &(0x7f0000001300)="$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") r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380006, @private0}, 0x1c) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESOCT=r7], 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 6.669470618s ago: executing program 0 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 6.52397227s ago: executing program 0 (id=328): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000dc0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0x122) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x68060200) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@init_itable}, {@quota}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@noblock_validity}, {@noload}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@sysvgroups}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_ordered}]}, 0x1, 0x5ef, &(0x7f0000000600)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x968040, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/241, 0xf1}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) pread64(r2, &(0x7f0000001880)=""/4096, 0x1000, 0x100) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x409, 0x2}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x10, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, 0xab852ebbeefbd445, 0x0, 0x0, 0x0, 0xe11, 0x0, 0x0, 0x3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x6, &(0x7f0000000080)=[{0x45, 0x1, 0x4, 0x9}, {0x0, 0x40, 0x0, 0x1000000}, {0x2, 0x0, 0x0, 0x4}, {0x1}, {0x0, 0x0, 0x6}, {0x6, 0x2, 0x30}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) 5.766233752s ago: executing program 1 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000003dc0)="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", 0xfe1}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000f80)="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", 0x257}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x2) r3 = dup(r2) write$nbd(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0x40345410, &(0x7f0000000180)={0x3}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x80e85411, &(0x7f00000003c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c80)="a85e2ee4619fdebb42dec9e5fd6a63541d0b6a2cd8572f61a3a36c52b87eb43afa0240dd8793e2bd2daee1902275da55eceb3870dc8bf4ca25f022061aa5e6945a83df3f3b67a4326e99cbd5e1ac91ca1cc2a071d3d6f163d90100001000000000b1492d6b0cff875a2f044cdab789c10004000013a15d5d99059a6d30ee1147982e5448ba62daff2a5069403fb21875c41b0233cd2e886cd51e8a7b7180fc15161342fc0775", 0xa6}, {&(0x7f0000000680)="3a75b19fb2be2d5b3fd46b18754c3c1aba9086251e7c4d40751093005e4e5d9c1ef3421eee1a7d73c14f83ff56382c3433778b25d2c36bf6bff13a2a662dd9557bb0f5217133c7d80dc25e0afcd48411a86d392615aefbbccc632afd0626c3a37278c4be50aca0b5974b8c56669e079fc331b1175e04b45f6a2054b60aa3ccececf117a4b8b3ef6f818014854d", 0x8d}, {&(0x7f0000002e00)="b201c54f415df9915611b8f46a", 0xd}], 0x3, &(0x7f00000016c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000069e4f64000200000000000000000000795b5c0d1311d5a318974b5720bfe1db0f17d130f0000075f337049d3af285a2df03f95ff8616f49b0e0e6", @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB="0000008000000000000001c30000726fdd635d74b656ab8411677b02c7f656dc70731d866469ee2797bddfc4554a8efa498f955eff10068dd6da8767cead7e39eb962ce2f2d6cb84f416dca13e642db53248f1d8ac6a6e912526c54cc8296500478556d044d3d2beba9013f98363265f1fb0ee8d63777cfbe9a09a840beea38986c09e40502f9f9b2d4a38ef798681b83d18556ee563a6a1b955c3fdfe8425a1d3", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX=r2, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRES32=r0, @ANYRES16, @ANYBLOB="020000000200000000000000ee1c5a53e18fc875e86b3590bbf967035b", @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="56fedacfb444abdfa4b6b530d9c9f06fae8a3a75a937bb4cc5d2248da163e61d470ed703034fe975e35eeb2b4d3153260b2020b13696a711d40eb7a385a302844c54469bdd54ecfc0500c41ad7d335651202ee44e1a3c2d72c7164f312519454c32cd22584e56cae9106414254a9a7510ab8423791f59fade416c23595aead626c5dfced0bffa47280ad2182d72b720f05f6a6206494006c7cbb07cf7dc819ad914219b24a8bc4d857f0ce816abbe245c55171d6390b64c6a722501cb47d419915602bd9bd9aaa772d320c8aa409d0c6721ac2282c1e1a1db9a0bd90430000000000000000000000002435dc833e852821125886529fa53d8676c84a22d928a7cb4cdd2dafd4f98d41eaba411129ed0c6e22730d8cc9e32221"], 0x158, 0xc8815}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0xfffffffffffffebc, r6, 0xfdd1df4705532f1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x756, 0x1, 0x7, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c051}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="bb152452885c63bfe19ce3a2eb1a59e98c7faf74018229c0d87dd129db470448f99f70fae2b9cbcdfddf7f5838a27bf32ff8326e0fbbb94a6a4cb13b82c9e9647be7fa18d028438e7f75ba697735f2d0138f86fd6999911364b56b85fe8fdf", @ANYRES16=r6, @ANYBLOB="00032bbd7000ffdbdf2501000000000000000841000000140018000000047564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000081) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000ddd3156041a811cf75a8afe0b00f940000bf4862e05e49ea2b602a0c25ac18a12e1401cb3a5401e6a9832ac74fac6a6d345d2c5e6df3ef3f8388d2a7a1e56062897f7fd799b129f3d27dbc921af9167a72d4918605bd9ccb196256072f97cbd32bf3", @ANYRES16=r6, @ANYBLOB="02002cbd7000fcdbdf2501000000000000000b0000000014000062726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000840), r7, &(0x7f0000000100)) setreuid(r7, 0xee01) setfsuid(0x0) setfsuid(0xee01) 5.490226184s ago: executing program 1 (id=331): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="0204000001"]) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.539668421s ago: executing program 1 (id=333): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="66643d5572882c64f33f5efd461216c4c438c82a85e274724aff4e259cb926447039712ef866d3a404adde9d5c733f0c581f4a769e09000000d051a271b3d108e89e2afaac5c85a2c7347f30408201b5", @ANYRES8=r3]) gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getresgid(0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r6}}, './file0\x00'}) sendto$inet6(r5, &(0x7f0000000200)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xffffffff}, 0x1c) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0xdf830ad0f8724dfb) fcntl$getownex(r5, 0x10, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 3.777161643s ago: executing program 3 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 2.644406145s ago: executing program 1 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r1, 0x400, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r8, &(0x7f0000000380)='./file0\x00', r8, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x2, &(0x7f0000000940)=[r2, r2, r3, r2, r2], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 2.275299956s ago: executing program 3 (id=336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x3, 0x238, &(0x7f0000000500)="$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") r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = add_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a2, &(0x7f0000001300)="$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") r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380006, @private0}, 0x1c) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbuepd4Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgw8njYiPRMRn8vt/Iabyf50AwHnWbi9Ee6E7DQCcd2k+BpakpYhI06ITUOqM4T0XF9Jao9m6fq+xtb7SGSu7FDPpvbVa9eblud9/Jz94JsnSi3lenp+nK8fStyLickT8cO6pPF1abtRWxtPlAYCJ93R3+x8R/5hL01Kpr1N7fKsHADwx5sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBnmhm+4LJ1VcTnncSfnPmZQHGo+fDvOd7bn7Qj/+HIH5nBP9Xrn28//F/czzD+WL8HybXhxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jDLHws30XvvfGzFn9rZ75xvRRX3G4V/5GdsURVycdei0G2ng4qljje08CRuPRTT/ukgAAAAAAAAAAAAAAAKcZxX9dGncdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL/+EwAA//+4xcs4") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESOCT=r7], 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 1.549623825s ago: executing program 3 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r7, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000000940)=[r1, r1, r2, r1, r1], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 1.393662357s ago: executing program 3 (id=338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 1.274353637s ago: executing program 3 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/1924], 0x784}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r8, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000020000000000afb648a2245213d0e82c50e7effda50fa36ee08f40ce87ec275a"], 0x10}, {&(0x7f0000000440)=ANY=[@ANYBLOB="1000000029100000000000000000000084cf6527212a7f3718e9d7b409f3856b86fcf06aa8874b6e3dbd8ce073cc44f87b3c06f1"], 0x10}], 0x2}, 0x0) r9 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32, @ANYBLOB="3e9aa8e9a55ea27e16f328b441459f770d0fae217f7aa1873e6f8c838a3407fc183c180712d7fa59049493dda10a938ecb13d2a2769193307dcdd76d7bef7ee3cef5ca88641c4e6c9a9bff99558e8772603c56e0857a0b5b455dd435da0e12bccd36558edd33332ead137065c3e5434f62373e3b80ca7b6cf2ca736e4b4aba5d", @ANYBLOB="ba0f2bed16228fd41e2f7134373f4be75c3bb494542fe40ba39fc978276a0df4ebcd5d5d70b506fb3e196e2f9660dcc55ab6cffeca1a48775b45d0f8", @ANYRES64=0x0], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="00000000000064676576650a000100be77f8fd6f5e30afdae13237cfe697cab375ddb7d47643f6df3eac0c6858a3cd8f2d"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="680f0000080211000000ffffffffffff0802110000008efffffffffffeffffffffffffff0802110000015d002838ed2955319e11a7deca1ddfb7c9f317064685e4323fb7df7096561e753a180d87aca5796adb991a1efe673aab0969e7fb29a33e2e420c72af472009b4ccc49c5dd2e16cea005a03bcc9f87d0b36ff392a7ca7bedeeda17ff7f6b3ac00"], 0x8a) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xa00}], 0x1000000000000076, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000280)="c7f445099371ebced758fab0428c82d7cfee856dd905591b1484c4f94791e7a926ef20ed3115755a286cb6e5b1fb9b6bd0c27f488ea0757292b0d1d2e6927fe0ed711b5fc67b4e098c9d428546de68fb90bb88177bf9f48b18", 0x59, 0x3, 0x0, 0x0, r10}, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x0, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0x0) 1.052694175s ago: executing program 1 (id=340): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="66643d5572882c64f33f5efd461216c4c438c82a85e274724aff4e259cb926447039712ef866d3a404adde9d5c733f0c581f4a769e09000000d051a271b3d108e89e2afaac5c85a2c7347f30408201b5", @ANYRES8=r3]) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getresgid(0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r7}}, './file0\x00'}) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xffffffff}, 0x1c) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0xdf830ad0f8724dfb) fcntl$getownex(r6, 0x10, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 57.568916ms ago: executing program 3 (id=341): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="0204000001"]) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 0s ago: executing program 1 (id=342): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): = 0 [ 64.686233][ T3642] Bluetooth: hci4: Injecting HCI hardware error event [ 64.696804][ T48] Bluetooth: hci4: hardware error 0x00 [ 64.843138][ T3765] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.222441][ T3777] loop2: detected capacity change from 0 to 1024 [ 65.250376][ T3777] EXT4-fs (loop2): barriers disabled [ 65.259340][ T3777] JBD2: no valid journal superblock found [ 65.265306][ T3777] EXT4-fs (loop2): error loading journal [ 65.412665][ T154] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.766568][ T3765] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 65.782139][ T154] usb 4-1: Using ep0 maxpacket: 32 [ 65.982214][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 66.161411][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 66.254243][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.463830][ T154] usb 4-1: string descriptor 0 read error: -71 [ 66.470662][ T154] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 66.516933][ T154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.648122][ T3790] loop2: detected capacity change from 0 to 512 [ 66.655769][ T154] usb 4-1: config 0 descriptor?? [ 66.789591][ T154] usb 4-1: can't set config #0, error -71 [ 66.909283][ T154] usb 4-1: USB disconnect, device number 2 [ 66.938767][ T3790] ext4: Bad value for 'auto_da_alloc' [ 67.036696][ T3799] loop1: detected capacity change from 0 to 256 [ 67.136245][ T3799] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 67.154223][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 67.162117][ T27] audit: type=1326 audit(1724094246.993:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6579e79 code=0x7ffc0000 [ 67.586001][ T27] audit: type=1326 audit(1724094246.993:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06f6579e79 code=0x7ffc0000 [ 67.620909][ T3804] loop3: detected capacity change from 0 to 8 [ 67.656835][ T27] audit: type=1326 audit(1724094246.993:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06f6579eb3 code=0x7ffc0000 [ 67.696115][ T3799] FAT-fs (loop1): Filesystem has been set read-only [ 68.123886][ T27] audit: type=1326 audit(1724094246.993:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06f657895f code=0x7ffc0000 [ 68.230224][ T3804] SQUASHFS error: Failed to read block 0x6e6: -5 [ 68.262121][ T27] audit: type=1326 audit(1724094247.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f06f6579f07 code=0x7ffc0000 [ 68.266186][ T3804] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 68.284777][ T27] audit: type=1326 audit(1724094247.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f6578810 code=0x7ffc0000 [ 68.303285][ T3811] loop4: detected capacity change from 0 to 128 [ 68.314258][ T3804] SQUASHFS error: Unable to read directory block [6e4:0] [ 68.360754][ T3813] loop0: detected capacity change from 0 to 256 [ 68.380217][ T27] audit: type=1326 audit(1724094247.003:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06f6579a7b code=0x7ffc0000 [ 68.431892][ T27] audit: type=1326 audit(1724094247.033:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06f6578b0a code=0x7ffc0000 [ 68.481887][ T27] audit: type=1326 audit(1724094247.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06f6578b0a code=0x7ffc0000 [ 68.511895][ T27] audit: type=1326 audit(1724094247.063:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3798 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f06f6578717 code=0x7ffc0000 [ 69.417981][ T3813] ipt_CLUSTERIP: Please specify destination IP [ 69.496787][ T48] Bluetooth: to_multiplier 7 < 10 [ 69.589651][ T3819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22'. [ 69.874247][ T3834] loop2: detected capacity change from 0 to 512 [ 69.975574][ T3834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.999337][ T3834] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 71.155148][ T3853] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 71.168596][ T3853] device bond0 entered promiscuous mode [ 71.181835][ T3853] device bond_slave_0 entered promiscuous mode [ 71.199239][ T3853] device bond_slave_1 entered promiscuous mode [ 71.306368][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 71.326080][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.362335][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388860][ T3857] Bluetooth: MGMT ver 1.22 [ 71.394335][ T3857] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 72.004480][ T48] Bluetooth: hci2: command tx timeout [ 72.030674][ T3853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.194139][ T3862] loop1: detected capacity change from 0 to 512 [ 72.323369][ T3862] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.32: inode #1: comm syz.1.32: iget: illegal inode # [ 72.878819][ T3862] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.32: error while reading EA inode 1 err=-117 [ 73.384465][ T3862] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.32: inode #1: comm syz.1.32: iget: illegal inode # [ 73.552042][ T3862] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.32: error while reading EA inode 1 err=-117 [ 73.712122][ T3862] EXT4-fs (loop1): 1 orphan inode deleted [ 73.718179][ T3862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.770263][ T3852] device bond0 left promiscuous mode [ 73.787224][ T3852] device bond_slave_0 left promiscuous mode [ 73.807867][ T3852] device bond_slave_1 left promiscuous mode [ 74.192510][ T3876] fuse: Unknown parameter 'gr¢¸—±M9ëoup_i00000000000000000000' [ 74.223971][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 74.224255][ T27] audit: type=1326 audit(1724094254.193:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3859 comm="syz.1.32" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06f6579e79 code=0x0 [ 74.812765][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 74.897916][ T3881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 75.122228][ T27] audit: type=1326 audit(1724094255.053:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.3.34" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2d79e79 code=0x0 [ 75.764019][ T3849] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 75.874434][ T27] audit: type=1326 audit(1724094255.843:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3890 comm="syz.0.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75df79e79 code=0x0 [ 76.086446][ T3881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 76.304951][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 76.556582][ T151] cfg80211: failed to load regulatory.db [ 76.585297][ T3883] loop2: detected capacity change from 0 to 2048 [ 77.142152][ T3911] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.352768][ T3883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.619268][ T27] audit: type=1326 audit(1724094257.593:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3915 comm="syz.0.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75df79e79 code=0x0 [ 78.432294][ T27] audit: type=1800 audit(1724094258.083:40): pid=3896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.35" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 78.619795][ T3924] loop0: detected capacity change from 0 to 256 [ 78.752408][ T3924] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.742449][ T3934] loop4: detected capacity change from 0 to 32768 [ 79.749995][ T3934] ======================================================= [ 79.749995][ T3934] WARNING: The mand mount option has been deprecated and [ 79.749995][ T3934] and is ignored by this kernel. Remove the mand [ 79.749995][ T3934] option from the mount to silence this warning. [ 79.749995][ T3934] ======================================================= [ 79.785161][ T3934] xfs: Unknown parameter 'appraise' [ 81.217609][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 81.274179][ T3936] loop3: detected capacity change from 0 to 512 [ 81.318199][ T3936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.395876][ T3936] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 81.509119][ T3943] loop0: detected capacity change from 0 to 512 [ 81.530746][ T3936] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.45: Directory hole found for htree leaf block 0 [ 81.628483][ T3943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.647782][ T3943] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 81.804845][ T3954] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.45: Directory hole found for htree leaf block 0 [ 81.820680][ T3943] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.46: Directory hole found for htree leaf block 0 [ 81.852760][ T3956] loop4: detected capacity change from 0 to 512 [ 81.862744][ T3956] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.877731][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 81.901513][ T3956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.921046][ T3956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.944198][ T3956] EXT4-fs (loop4): 1 truncate cleaned up [ 81.955288][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 81.981621][ T3956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.995139][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 82.089740][ T3936] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.45: Directory hole found for htree leaf block 0 [ 82.105495][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 82.116397][ T3936] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.45: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 82.177386][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 82.230295][ T3964] loop2: detected capacity change from 0 to 8 [ 82.286119][ T3964] SQUASHFS error: Unable to read inode 0x11f [ 82.352280][ T3958] can: request_module (can-proto-0) failed. [ 82.378129][ T3936] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.45: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 83.524308][ T3962] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.46: Directory hole found for htree leaf block 0 [ 83.539551][ T3936] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.45: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 83.608663][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 83.663967][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 83.698007][ T3943] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 18: comm syz.0.46: lblock 23 mapped to illegal pblock 18 (length 1) [ 83.759340][ T3643] EXT4-fs (loop3): unmounting filesystem. [ 83.791439][ T3977] loop4: detected capacity change from 0 to 128 [ 83.835746][ T48] Bluetooth: hci2: Malformed LE Event: 0x0b [ 83.906580][ T3943] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.46: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 83.916180][ T3980] loop3: detected capacity change from 0 to 2048 [ 84.010853][ T3980] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 84.065598][ T3978] loop1: detected capacity change from 0 to 2048 [ 84.155424][ T3793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.174258][ T3978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.277084][ T3982] Bluetooth: MGMT ver 1.22 [ 84.959011][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 85.186683][ T3989] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure [ 85.569681][ T27] audit: type=1326 audit(1724094265.393:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 85.685720][ T27] audit: type=1326 audit(1724094265.393:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 85.716524][ T27] audit: type=1326 audit(1724094265.393:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 85.744755][ T27] audit: type=1326 audit(1724094265.393:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 85.775707][ T27] audit: type=1326 audit(1724094265.393:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 86.252352][ T27] audit: type=1326 audit(1724094265.393:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 86.600243][ T27] audit: type=1326 audit(1724094265.533:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 86.648572][ T27] audit: type=1326 audit(1724094265.533:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x7ffc0000 [ 86.748543][ T4001] netlink: 'syz.4.58': attribute type 11 has an invalid length. [ 87.298495][ T4009] loop2: detected capacity change from 0 to 1024 [ 87.315995][ T4006] loop1: detected capacity change from 0 to 2048 [ 87.345918][ T4009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.473477][ T4006] EXT4-fs: Ignoring removed orlov option [ 87.839347][ T3645] EXT4-fs (loop0): unmounting filesystem. [ 87.881878][ T4006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.950867][ T4006] EXT4-fs (loop1): shut down requested (0) [ 88.028238][ T4015] device pim6reg1 entered promiscuous mode [ 88.048451][ T4020] loop0: detected capacity change from 0 to 256 [ 88.060710][ T3726] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.117328][ T3726] EXT4-fs (loop1): Remounting filesystem read-only [ 88.122740][ T4020] FAT-fs (loop0): Unrecognized mount option "²*uni_xla;ø¶ÿ›“p_xlate=1" or missing value [ 88.164858][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.63'. [ 88.164972][ T27] audit: type=1326 audit(1724094268.143:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4018 comm="syz.0.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75df79e79 code=0x0 [ 88.203259][ T4021] sch_tbf: burst 88 is lower than device macsec0 mtu (1482) ! [ 88.247976][ T27] audit: type=1326 audit(1724094268.223:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.4.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 88.281690][ T4023] loop3: detected capacity change from 0 to 1024 [ 88.316973][ T4024] loop0: detected capacity change from 0 to 256 [ 88.331445][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 88.496216][ T4024] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 88.522737][ T3680] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.245939][ T4017] infiniband syz2: set active [ 89.278286][ T4017] infiniband syz2: added team_slave_1 [ 89.299672][ T4017] rdma_rxe: unable to create cq [ 89.305991][ T4017] infiniband syz2: Couldn't create ib_mad CQ [ 89.318043][ T4017] infiniband syz2: Couldn't open port 1 [ 89.406542][ T4017] RDS/IB: syz2: added [ 89.411129][ T4017] smc: adding ib device syz2 with port count 1 [ 89.449453][ T4017] smc: ib device syz2 port 1 has pnetid [ 89.548703][ T4033] loop3: detected capacity change from 0 to 1024 [ 89.594954][ T3948] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.691516][ T4035] loop0: detected capacity change from 0 to 512 [ 89.740449][ T4033] loop3: detected capacity change from 0 to 1024 [ 89.771432][ T4035] EXT4-fs (loop0): 1 orphan inode deleted [ 89.782257][ T3680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.797468][ T4035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.802043][ T3680] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.815556][ T3680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.832189][ T3680] usb 3-1: config 0 descriptor?? [ 89.861869][ T4035] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 90.094565][ C1] eth0: bad gso: type: 1, size: 1408 [ 90.761047][ T3680] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 90.774904][ T3680] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 90.877241][ T3645] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 90.940733][ T3645] EXT4-fs (loop0): Remounting filesystem read-only [ 90.955316][ C1] eth0: bad gso: type: 1, size: 1408 [ 91.012901][ T3645] EXT4-fs (loop0): unmounting filesystem. [ 91.026531][ T4050] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET) [ 91.048815][ T3680] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 91.293337][ T48] Bluetooth: hci0: SCO packet for unknown connection handle 1955 [ 91.295397][ T4046] loop3: detected capacity change from 0 to 1024 [ 91.445409][ T3724] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.597652][ T3724] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.731951][ T3724] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.769982][ T4058] tc_dump_action: action bad kind [ 91.787367][ T3636] usb 3-1: USB disconnect, device number 2 [ 91.859048][ T3724] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.913216][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 91.913229][ T27] audit: type=1326 audit(1724094271.893:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.4.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 91.973757][ T3642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.990105][ T3642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.999024][ T3642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.012851][ T3642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.021786][ T3642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.032074][ T3642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.164550][ T4063] loop3: detected capacity change from 0 to 128 [ 92.214593][ T4063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.226689][ T4063] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 92.266542][ T4063] EXT4-fs (loop3): shut down requested (2) [ 92.305915][ T4063] syz.3.74 (pid 4063) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.974423][ T48] Bluetooth: hci0: hardware error 0xdf [ 93.381231][ T4078] fuse: Unknown parameter '0x0000000000000005' [ 93.466032][ T3643] EXT4-fs (loop3): unmounting filesystem. [ 93.483336][ T4078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 93.516288][ T4059] chnl_net:caif_netlink_parms(): no params data found [ 93.580483][ T4086] loop3: detected capacity change from 0 to 8 [ 94.062302][ T27] audit: type=1326 audit(1724094273.953:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4085 comm="syz.3.78" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2d79e79 code=0x0 [ 94.147410][ T3642] Bluetooth: hci4: command tx timeout [ 94.374617][ T4106] Zero length message leads to an empty skb [ 94.483544][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.508588][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.570363][ T4059] device bridge_slave_0 entered promiscuous mode [ 94.577452][ C1] eth0: bad gso: type: 1, size: 1408 [ 94.621286][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.630815][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.648240][ T4059] device bridge_slave_1 entered promiscuous mode [ 94.826498][ T4113] mmap: syz.4.81 (4113): VmData 176009216 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 95.140291][ T4118] loop3: detected capacity change from 0 to 2048 [ 95.162344][ T4118] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 95.182326][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 95.571279][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.594888][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.658636][ T4113] Bluetooth: hci3: unsupported parameter 45054 [ 95.696313][ T4113] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 95.757092][ T4119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.820261][ T4119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.888350][ T4059] team0: Port device team_slave_0 added [ 95.909909][ T4059] team0: Port device team_slave_1 added [ 96.352617][ T4130] loop3: detected capacity change from 0 to 1024 [ 96.468310][ T48] Bluetooth: hci4: command tx timeout [ 96.493029][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 96.537172][ T3948] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.241242][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.257918][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.316994][ T4059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.331498][ T4143] loop4: detected capacity change from 0 to 256 [ 97.533967][ T4139] loop2: detected capacity change from 0 to 512 [ 97.545277][ T4143] FAT-fs (loop4): Unrecognized mount option "iocharse" or missing value [ 97.664441][ T4139] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.731664][ T4139] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.86: iget: bad i_size value: -67835469387268086 [ 97.763229][ T4139] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 97.781825][ T4139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.793079][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.800061][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.813275][ T4139] ext2 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 97.856966][ T4059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.532132][ T48] Bluetooth: hci4: command tx timeout [ 98.687333][ T4059] device hsr_slave_0 entered promiscuous mode [ 98.712416][ T4059] device hsr_slave_1 entered promiscuous mode [ 98.740693][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 98.756598][ T4059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.925978][ T4059] Cannot create hsr debugfs directory [ 99.690759][ T4185] loop3: detected capacity change from 0 to 256 [ 99.756797][ T4185] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.793276][ T4185] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 99.824345][ T4185] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.898100][ T27] audit: type=1326 audit(1724094279.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4183 comm="syz.3.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed2d79e79 code=0x0 [ 99.948494][ T3647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.958961][ T3647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.967265][ T3647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.976094][ T3647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.209592][ T27] audit: type=1326 audit(1724094280.183:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.4.93" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 100.233402][ T3647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.246436][ T3647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.612151][ T3647] Bluetooth: hci4: command tx timeout [ 100.830284][ T4204] loop4: detected capacity change from 0 to 256 [ 100.903332][ T4204] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 101.078163][ T4211] loop2: detected capacity change from 0 to 1024 [ 101.298864][ T3948] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.697737][ T3724] device hsr_slave_0 left promiscuous mode [ 101.706154][ T4204] loop4: detected capacity change from 0 to 512 [ 101.715480][ T3724] device hsr_slave_1 left promiscuous mode [ 101.754394][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.857457][ T4204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.895540][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.907594][ T4204] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 101.924339][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.933848][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.954803][ T3724] device bridge_slave_1 left promiscuous mode [ 101.963131][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.130271][ T3724] device bridge_slave_0 left promiscuous mode [ 102.153836][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.486687][ T3724] device veth1_macvtap left promiscuous mode [ 102.510823][ T3724] device veth0_macvtap left promiscuous mode [ 102.537644][ T3724] device veth1_vlan left promiscuous mode [ 102.567300][ T3724] device veth0_vlan left promiscuous mode [ 102.822120][ T48] Bluetooth: hci4: command tx timeout [ 102.972240][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 102.984662][ T151] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.988267][ T48] Bluetooth: hci5: command tx timeout [ 103.074918][ T4231] loop4: detected capacity change from 0 to 256 [ 103.125307][ T27] audit: type=1326 audit(1724094283.103:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.4.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 103.232252][ T151] usb 4-1: Using ep0 maxpacket: 8 [ 103.256033][ T4237] ipt_CLUSTERIP: Please specify destination IP [ 103.540952][ T4243] loop2: detected capacity change from 0 to 256 [ 104.755447][ T3724] team0 (unregistering): Port device team_slave_1 removed [ 104.821889][ T3724] team0 (unregistering): Port device team_slave_0 removed [ 104.875246][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.931884][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.012311][ T48] Bluetooth: hci5: command tx timeout [ 105.372251][ T3724] bond0 (unregistering): Released all slaves [ 106.185448][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 106.362238][ T151] usb 4-1: string descriptor 0 read error: -71 [ 106.370599][ T4259] loop2: detected capacity change from 0 to 256 [ 106.403377][ T151] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 106.434079][ T151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.449911][ T4262] x_tables: duplicate underflow at hook 2 [ 106.465641][ T4259] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.478910][ T151] usb 4-1: config 0 descriptor?? [ 106.574799][ T4259] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 106.631496][ T4259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.652318][ T151] usb 4-1: can't set config #0, error -71 [ 106.678668][ T151] usb 4-1: USB disconnect, device number 3 [ 107.086140][ T27] audit: type=1326 audit(1724094287.053:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4258 comm="syz.2.104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cf579e79 code=0x0 [ 107.153344][ T48] Bluetooth: hci5: command tx timeout [ 107.521275][ T4277] loop4: detected capacity change from 0 to 256 [ 107.544749][ T4277] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 107.582274][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.693352][ T4286] loop4: detected capacity change from 0 to 512 [ 107.780448][ T4286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.792330][ T4286] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 107.826535][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 107.962306][ T7] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 107.974865][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.999531][ T7] usb 4-1: config 0 descriptor?? [ 108.093346][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 108.181046][ T4059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.243992][ T4059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.285969][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.298745][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.313910][ T4298] fuse: Bad value for 'user_id' [ 108.333044][ T4192] device bridge_slave_0 entered promiscuous mode [ 108.353263][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.360381][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.383255][ T4192] device bridge_slave_1 entered promiscuous mode [ 108.465629][ T4059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.497146][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.521078][ T4059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.547717][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.656888][ T4192] team0: Port device team_slave_0 added [ 108.686763][ T4192] team0: Port device team_slave_1 added [ 108.687748][ T4306] loop4: detected capacity change from 0 to 2048 [ 108.732693][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 108.759991][ T7] asix: probe of 4-1:0.0 failed with error -71 [ 108.802295][ T7] usb 4-1: USB disconnect, device number 4 [ 108.810320][ T4306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.843953][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.851022][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.293944][ T48] Bluetooth: hci5: command tx timeout [ 109.485130][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.549040][ T27] audit: type=1800 audit(1724094289.513:60): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.110" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 109.724379][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.736146][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.755456][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.894860][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.968665][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.085413][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.100660][ T4059] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.142906][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.901808][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.931705][ T3849] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.938869][ T3849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.080993][ T4192] device hsr_slave_0 entered promiscuous mode [ 111.120328][ T4192] device hsr_slave_1 entered promiscuous mode [ 111.182802][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.229600][ T4192] Cannot create hsr debugfs directory [ 111.526765][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.712223][ T3647] Bluetooth: hci5: command tx timeout [ 112.148440][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.214684][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.279500][ T3849] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.286699][ T3849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.316738][ T4343] loop2: detected capacity change from 0 to 512 [ 112.382330][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.409526][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.442488][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.451710][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.475213][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.491365][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.501866][ T4343] ext4 filesystem being mounted at /32/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 112.505198][ T4325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.528989][ T4325] netlink: 43 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.539313][ T4325] netlink: 'syz.3.113': attribute type 6 has an invalid length. [ 112.540765][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.555559][ T4325] netlink: 43 bytes leftover after parsing attributes in process `syz.3.113'. [ 112.608571][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.648688][ T4343] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.116: Directory hole found for htree leaf block 0 [ 112.662703][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.697736][ T4343] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.116: Directory hole found for htree leaf block 0 [ 112.748281][ T4343] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.116: Directory hole found for htree leaf block 0 [ 112.769243][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.790993][ T4059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.832156][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.920334][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.963179][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.041265][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 113.058797][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 113.257974][ T4353] loop2: detected capacity change from 0 to 16 [ 113.310842][ T4353] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.331243][ T4356] loop4: detected capacity change from 0 to 1024 [ 113.338475][ T4356] hfsplus: unable to parse mount options [ 116.110358][ T4192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.265908][ T4364] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 116.310652][ T4192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.436515][ T4192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.515377][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.523098][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.535842][ T4059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.582992][ T4192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.626724][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.643709][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.681501][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.691245][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.713408][ T4059] device veth0_vlan entered promiscuous mode [ 116.731527][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.750958][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.786705][ T4059] device veth1_vlan entered promiscuous mode [ 116.851869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.867327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.877798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.887071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.898728][ T4059] device veth0_macvtap entered promiscuous mode [ 116.926826][ T4059] device veth1_macvtap entered promiscuous mode [ 116.937681][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.967074][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.998006][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.040039][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.092711][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.117673][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.128077][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.149001][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.170266][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.191578][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.213575][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.224897][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.245266][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.258143][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.273960][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.285080][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.296859][ T3635] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 117.299033][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.317275][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.328406][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.332122][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.339242][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.358466][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.369933][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.375468][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 117.380377][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.399607][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.415699][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.423736][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.453986][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.487161][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.537380][ T4059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.577245][ T4384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.120'. [ 117.579749][ T4059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.636888][ T27] audit: type=1326 audit(1724094297.613:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.4.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 117.667849][ T4386] Bluetooth: hci3: unsupported parameter 45054 [ 117.669040][ T4059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.699109][ T4386] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 117.705556][ T4059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.918447][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.961305][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.995600][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.011567][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.023084][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.825411][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.879890][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.893185][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.957319][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.963552][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.977585][ T4401] loop2: detected capacity change from 0 to 512 [ 118.992607][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.018484][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.025646][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.045043][ T4401] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.095279][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.112740][ T4401] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 119.128792][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.142528][ T4401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 119.182269][ T4401] System zones: 0-2, 18-18, 34-34 [ 119.232630][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.256464][ T4401] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.122: bad orphan inode 15 [ 119.298171][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.307965][ T4401] ext4_test_bit(bit=14, block=18) = 1 [ 119.323096][ T4401] is_bad_inode(inode)=0 [ 119.323238][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.327266][ T4401] NEXT_ORPHAN(inode)=2264924160 [ 119.334397][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.412516][ T4401] max_ino=32 [ 119.415835][ T4401] i_nlink=0 [ 119.419279][ T4401] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 119.429203][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.515022][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.555626][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.585777][ T4401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.122: bg 0: block 80: padding at end of block bitmap is not set [ 119.600068][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.600859][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.668089][ T4411] loop0: detected capacity change from 0 to 512 [ 119.684041][ T4401] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 119.689137][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.732763][ T4401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.775651][ T4411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.776085][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.812859][ T4411] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 119.846316][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.004424][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.444205][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 120.448626][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.529893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.549703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.752301][ T4425] tipc: Started in network mode [ 120.791591][ T4425] tipc: Node identity 821ca2d91e2b, cluster identity 4711 [ 120.884763][ T4425] tipc: Enabled bearer , priority 0 [ 121.238260][ T4424] tipc: Disabling bearer [ 121.271762][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.282185][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.290228][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.313109][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.320626][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 121.329163][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.374113][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.381664][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.438617][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.452487][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 121.521798][ T4440] cgroup: name respecified [ 121.608262][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.686536][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.472321][ T3647] Bluetooth: hci6: command tx timeout [ 123.559326][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 123.572481][ T4192] device veth0_vlan entered promiscuous mode [ 123.585573][ T4192] device veth1_vlan entered promiscuous mode [ 123.611499][ T4192] device veth0_macvtap entered promiscuous mode [ 123.632212][ T4192] device veth1_macvtap entered promiscuous mode [ 123.716131][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.726962][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.746232][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.660820][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.693138][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.708122][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.720099][ T3647] Bluetooth: hci1: SCO packet for unknown connection handle 1955 [ 124.724492][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.751207][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.769146][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.781338][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.899336][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.925365][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.972017][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.011927][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.103037][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.159344][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.179833][ T4485] x_tables: duplicate underflow at hook 4 [ 125.208179][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.243801][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.283501][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.295854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.319508][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.336573][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.357047][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.377690][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.400533][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.421362][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.446351][ T27] audit: type=1326 audit(1724094305.423:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cf579e79 code=0x0 [ 125.449633][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.479349][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.482617][ T3647] Bluetooth: hci6: command tx timeout [ 125.496405][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.528436][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.539283][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.558978][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.582261][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.607385][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.629436][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.638645][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.852824][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.865399][ T4501] loop4: detected capacity change from 0 to 512 [ 125.920805][ T4504] loop2: detected capacity change from 0 to 512 [ 125.921874][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.956424][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.978282][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.989942][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.027710][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.042215][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.051202][ T4504] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 126.088442][ T4501] ext4 filesystem being mounted at /36/bus supports timestamps until 2038 (0x7fffffff) [ 126.309701][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.344351][ T4437] chnl_net:caif_netlink_parms(): no params data found [ 126.457748][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.136'. [ 126.842507][ T3636] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.094743][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.252324][ T3636] usb 5-1: Using ep0 maxpacket: 32 [ 127.260330][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.315408][ T4499] input: syz0 as /devices/virtual/input/input7 [ 127.329854][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 127.372392][ T3636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.389024][ T3636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.399345][ T3636] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 127.409175][ T3636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.427823][ T3636] usb 5-1: config 0 descriptor?? [ 127.552929][ C1] eth0: bad gso: type: 1, size: 1408 [ 127.557926][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.562285][ T3647] Bluetooth: hci6: command tx timeout [ 127.573528][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.581690][ T4437] device bridge_slave_0 entered promiscuous mode [ 127.602064][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.634894][ T4535] loop2: detected capacity change from 0 to 256 [ 127.646360][ T4535] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.657978][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.658364][ T4535] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 127.678385][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.690772][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.710189][ T4437] device bridge_slave_1 entered promiscuous mode [ 127.794565][ T4535] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.877073][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.898138][ T3694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.912794][ T27] audit: type=1326 audit(1724094307.893:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.2.140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cf579e79 code=0x0 [ 127.920178][ T3694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.506869][ T4437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.519410][ T4437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.529906][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.707529][ T4544] loop0: detected capacity change from 0 to 16 [ 128.820250][ T4544] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.112517][ T27] audit: type=1326 audit(1724094309.083:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.90" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 129.172434][ T3636] usbhid 5-1:0.0: can't add hid device: -71 [ 129.259404][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 129.279138][ T3636] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.418825][ T3636] usb 5-1: USB disconnect, device number 2 [ 129.673754][ T3647] Bluetooth: hci6: command tx timeout [ 129.687000][ T4437] team0: Port device team_slave_0 added [ 129.746704][ T4437] team0: Port device team_slave_1 added [ 130.099781][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.112912][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.171246][ T4437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.386307][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.411019][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.485701][ T4437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.499274][ T4059] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 130.554447][ T4059] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 130.582717][ T4059] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 130.955423][ T4437] device hsr_slave_0 entered promiscuous mode [ 130.994776][ T4437] device hsr_slave_1 entered promiscuous mode [ 131.008615][ T4437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.313273][ T4437] Cannot create hsr debugfs directory [ 131.856029][ T4592] loop0: detected capacity change from 0 to 256 [ 131.866816][ T4592] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.877985][ T4592] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 131.891288][ T4592] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 131.998127][ T27] audit: type=1326 audit(1724094311.973:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 132.792292][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800092][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.434175][ T4611] Illegal XDP return value 4294967274 on prog (id 71) dev N/A, expect packet loss! [ 133.862150][ T9] device hsr_slave_0 left promiscuous mode [ 133.892383][ T9] device hsr_slave_1 left promiscuous mode [ 133.955423][ T27] audit: type=1800 audit(1724094313.933:66): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 133.960848][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.032353][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.078450][ C1] eth0: bad gso: type: 1, size: 1408 [ 134.110022][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.122938][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.171473][ T9] device bridge_slave_1 left promiscuous mode [ 134.181047][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.432865][ T9] device bridge_slave_0 left promiscuous mode [ 134.439122][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.232712][ T4608] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 135.389785][ T9] device veth1_macvtap left promiscuous mode [ 135.984222][ T9] device veth0_macvtap left promiscuous mode [ 136.019890][ T9] device veth1_vlan left promiscuous mode [ 136.047074][ T9] device veth0_vlan left promiscuous mode [ 136.230324][ T4641] x_tables: duplicate underflow at hook 2 [ 136.893733][ T3636] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.484056][ T3636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.538220][ T3636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.554980][ T3636] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.595043][ T3636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.769329][ T3636] usb 2-1: config 0 descriptor?? [ 138.064931][ T9] team0 (unregistering): Port device team_slave_1 removed [ 138.120159][ T9] team0 (unregistering): Port device team_slave_0 removed [ 138.173757][ T4660] loop0: detected capacity change from 0 to 256 [ 138.189476][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.207953][ T4660] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.218691][ T4660] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 138.250501][ T4660] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.278538][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.300282][ T27] audit: type=1326 audit(1724094318.273:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.0.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 138.337033][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.350784][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.391900][ T3636] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 138.424443][ T3636] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input8 [ 138.546446][ T3636] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 138.772504][ T3636] usb 2-1: USB disconnect, device number 2 [ 138.869529][ T9] bond0 (unregistering): Released all slaves [ 139.065104][ T4648] tipc: Started in network mode [ 139.070021][ T4648] tipc: Node identity 1, cluster identity 4711 [ 139.086261][ T4648] tipc: Node number set to 1 [ 139.091489][ T4648] tipc: Cannot configure node identity twice [ 139.263040][ T4668] loop2: detected capacity change from 0 to 512 [ 139.289922][ T4668] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.415556][ T4668] EXT4-fs (loop2): 1 truncate cleaned up [ 139.421265][ T4668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.442992][ T4437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.458843][ T4679] loop4: detected capacity change from 0 to 16 [ 139.467602][ T4437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.470707][ T4668] EXT4-fs (loop2): shut down requested (2) [ 139.476349][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.495544][ T4437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.511373][ T27] audit: type=1326 audit(1724094319.483:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 139.546322][ T4437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.548524][ T4679] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.579287][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 139.595753][ T27] audit: type=1326 audit(1724094319.513:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 139.630735][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.707504][ T4677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 139.836314][ T4437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.876251][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.897132][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.929017][ T4437] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.972873][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.995331][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.019230][ T3849] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.026599][ T3849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.078379][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.092976][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.111843][ T3849] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.119011][ T3849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.139603][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.162131][ T27] audit: type=1326 audit(1724094320.133:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.211448][ T4691] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 140.261082][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.318476][ T27] audit: type=1326 audit(1724094320.133:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.379705][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.502505][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.561608][ T27] audit: type=1326 audit(1724094320.133:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.586974][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.589747][ T27] audit: type=1326 audit(1724094320.133:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.619846][ T3633] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 140.620621][ T4693] loop0: detected capacity change from 0 to 16 [ 140.632707][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 140.641675][ T27] audit: type=1326 audit(1724094320.133:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.675923][ T4693] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.683488][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 140.694572][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.703384][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 140.719579][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.730745][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.738852][ T27] audit: type=1326 audit(1724094320.133:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.775722][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.818586][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.852123][ T27] audit: type=1326 audit(1724094320.133:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x7fc00000 [ 140.901497][ T3647] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 140.908408][ T4437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.928201][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.622802][ T4703] loop4: detected capacity change from 0 to 131072 [ 143.124633][ T4703] F2FS-fs (loop4): invalid crc value [ 143.130332][ T3647] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 143.156987][ T4706] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 143.215762][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.225492][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.249029][ T4706] syz.0.165 (4706) used greatest stack depth: 19344 bytes left [ 143.374523][ T4703] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.433072][ T4703] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 143.960337][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 143.960353][ T27] audit: type=1326 audit(1724094323.933:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.1.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 144.774368][ T4725] loop0: detected capacity change from 0 to 512 [ 144.900562][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.909840][ T4725] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 144.936134][ T4740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.002954][ T4741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.205008][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.238287][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.280568][ T4437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.492432][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.545610][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.676868][ T4750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 146.193919][ T4437] device veth0_vlan entered promiscuous mode [ 146.297737][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.323950][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.391651][ T4437] device veth1_vlan entered promiscuous mode [ 146.393747][ T4753] loop2: detected capacity change from 0 to 512 [ 146.414903][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.452862][ T4753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.462838][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.463472][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.506029][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.562579][ T4437] device veth0_macvtap entered promiscuous mode [ 146.584502][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.602710][ T4753] EXT4-fs (loop2): 1 truncate cleaned up [ 146.622042][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.648208][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.700138][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.744566][ T4753] EXT4-fs (loop2): shut down requested (2) [ 146.775188][ T4437] device veth1_macvtap entered promiscuous mode [ 146.847414][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.878367][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.918968][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.950098][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.978380][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.016781][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.050167][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.085659][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.122095][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.152333][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.202618][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.211509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.254386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.287295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.334473][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.382073][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.433256][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.469603][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.510161][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.540060][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.567356][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.602179][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.631265][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.655989][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.701624][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 147.710075][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 147.710673][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.786170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.816519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.839789][ T4437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.853683][ T4437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.864838][ T4437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.892440][ T4437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.536411][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.552123][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.599988][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.633486][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.654679][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.672387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.203190][ T27] audit: type=1326 audit(1724094329.173:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4789 comm="syz.3.124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dcc379e79 code=0x0 [ 150.935734][ T4802] xt_socket: unknown flags 0x8 [ 150.940996][ T4802] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 151.165930][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 151.250011][ T4813] loop3: detected capacity change from 0 to 16 [ 151.317746][ T4813] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.263115][ T4817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.187'. [ 152.276840][ T4826] loop4: detected capacity change from 0 to 256 [ 152.299225][ T4826] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.403042][ T4826] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 152.766468][ T4826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.191732][ T4833] loop0: detected capacity change from 0 to 256 [ 153.232210][ T4833] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.277724][ T4833] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 153.332753][ T4835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.348715][ T4833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.382086][ T4836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.453264][ T27] audit: type=1326 audit(1724094333.433:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.0.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 153.971483][ T4844] loop4: detected capacity change from 0 to 16 [ 154.162987][ T4844] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.373702][ T4848] loop0: detected capacity change from 0 to 128 [ 156.107371][ T4848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.117176][ T4848] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 156.521820][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 156.542203][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.649881][ T4859] device bridge_slave_1 left promiscuous mode [ 156.701543][ T4860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.704514][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.843714][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'. [ 157.039901][ T4867] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 158.292129][ T48] Bluetooth: hci6: command tx timeout [ 159.706505][ T3633] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 159.733035][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 159.759788][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 159.986980][ T4882] loop2: detected capacity change from 0 to 256 [ 160.154993][ T4877] loop3: detected capacity change from 0 to 1024 [ 160.199851][ T4882] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.200512][ T4877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.222134][ T4882] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 160.378100][ T4888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.387721][ T4888] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.643883][ T4882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.030285][ T4877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.037426][ T27] audit: type=1326 audit(1724094341.003:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 161.152343][ T27] audit: type=1326 audit(1724094341.053:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.0.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 162.124212][ T4899] sp0: Synchronizing with TNC [ 162.257687][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.272372][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.286961][ T4909] Option ' ' to dns_resolver key: bad/missing value [ 162.329503][ T4437] EXT4-fs (loop3): unmounting filesystem. [ 163.398471][ T4924] loop4: detected capacity change from 0 to 16 [ 163.411560][ T4922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.438287][ T4909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.208'. [ 163.469293][ T4924] erofs: (device loop4): mounted with root inode @ nid 36. [ 163.665551][ T4929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.461410][ T4922] device bridge_slave_1 left promiscuous mode [ 164.482220][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.660995][ T4938] loop2: detected capacity change from 0 to 16 [ 165.418416][ T4927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 165.452524][ T4938] erofs: (device loop2): mounted with root inode @ nid 36. [ 166.069289][ T4949] loop3: detected capacity change from 0 to 16 [ 166.095284][ T4949] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.232732][ T4953] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 166.372190][ T4955] loop0: detected capacity change from 0 to 256 [ 166.392042][ T4955] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.422506][ T4955] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 166.495551][ T4955] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 166.645801][ T27] audit: type=1326 audit(1724094346.623:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.0.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 167.737569][ T48] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 168.608197][ T4971] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 168.641623][ T4976] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 168.682597][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.722990][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.236008][ T3633] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 169.266848][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 169.301656][ T3633] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 169.450063][ T4980] loop0: detected capacity change from 0 to 256 [ 169.528506][ T4980] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 169.533338][ T4982] loop4: detected capacity change from 0 to 1024 [ 169.578073][ T4982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.616519][ T4982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.631088][ T3635] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 169.703256][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 169.752212][ T4982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.761424][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 169.834269][ T4982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.542299][ T27] audit: type=1326 audit(1724094350.513:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cf579e79 code=0x0 [ 171.304947][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 171.323039][ T4994] loop2: detected capacity change from 0 to 256 [ 171.525954][ T4994] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 171.571488][ T4999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.763676][ T4999] device bridge_slave_1 left promiscuous mode [ 171.807894][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.303763][ T5006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.332353][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 172.945203][ T5015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.230'. [ 172.996253][ T5015] netlink: 'syz.1.230': attribute type 21 has an invalid length. [ 173.013908][ T4437] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 173.016338][ T5015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.230'. [ 173.076439][ T5015] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 173.085708][ T4437] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 173.108431][ T4437] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 173.195747][ T5015] netlink: 'syz.1.230': attribute type 5 has an invalid length. [ 173.204194][ T5015] netlink: 3 bytes leftover after parsing attributes in process `syz.1.230'. [ 173.924035][ T5020] loop4: detected capacity change from 0 to 2048 [ 173.953600][ T5020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.980286][ T5026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.015859][ T27] audit: type=1326 audit(1724094354.997:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.4.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65bf79e79 code=0x0 [ 174.047351][ T5026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.167956][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 174.354154][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 176.207949][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 176.214293][ T3647] Bluetooth: hci1: command 0x0406 tx timeout [ 176.268351][ T5045] loop2: detected capacity change from 0 to 256 [ 177.698431][ T5045] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 178.417356][ T5058] loop0: detected capacity change from 0 to 16 [ 178.425486][ T5058] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.479159][ T5055] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.490702][ T5055] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.501715][ T5055] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.512644][ T5055] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 178.522857][ T5055] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 179.513533][ T5063] loop4: detected capacity change from 0 to 256 [ 179.520191][ T5063] exfat: Deprecated parameter 'utf8' [ 179.525611][ T5063] exfat: Deprecated parameter 'utf8' [ 179.561080][ T5063] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 179.860282][ T5069] loop2: detected capacity change from 0 to 16 [ 179.918468][ T5069] erofs: (device loop2): mounted with root inode @ nid 36. [ 181.923999][ T5089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.941323][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 181.989702][ T5083] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 182.033934][ T5089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.053437][ T5083] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 182.359769][ T5095] loop0: detected capacity change from 0 to 512 [ 182.969357][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 183.108090][ T5095] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.250: casefold flag without casefold feature [ 183.128332][ T5095] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #3: comm syz.0.250: corrupted inode contents [ 183.150585][ T5095] EXT4-fs error (device loop0): ext4_dirty_inode:6083: inode #3: comm syz.0.250: mark_inode_dirty error [ 183.167998][ T5095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.250: bg 0: block 64: padding at end of block bitmap is not set [ 183.189644][ T5095] Quota error (device loop0): write_blk: dquota write failed [ 183.197721][ T5095] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 183.207699][ T5095] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.250: Failed to acquire dquot type 0 [ 183.223619][ T5095] EXT4-fs (loop0): 1 truncate cleaned up [ 183.229285][ T5095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.238372][ T5095] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 183.490347][ T5093] EXT4-fs (loop0): shut down requested (2) [ 184.077752][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 184.460267][ T154] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.579915][ T5116] binder: BINDER_SET_CONTEXT_MGR already set [ 184.587071][ T5116] binder: 5110:5116 ioctl 4018620d 200002c0 returned -16 [ 185.632079][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.649403][ T5121] binder: Unknown parameter 'ôcfž„a:£½êk\l%³4Á°Âg—' [ 185.894228][ T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.955210][ T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.105987][ T154] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.327209][ T154] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 186.367581][ T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.402167][ T22] usb 1-1: device descriptor read/64, error -71 [ 186.457546][ T154] usb 5-1: config 0 descriptor?? [ 186.482132][ T154] usb 5-1: can't set config #0, error -71 [ 186.494788][ T3635] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 186.555135][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 186.590564][ T154] usb 5-1: USB disconnect, device number 3 [ 186.593047][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 186.627704][ T3642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.663503][ T3642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.673539][ T3642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.827294][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.839360][ T3642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.849083][ T3642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.856846][ T3642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.710226][ T5135] loop4: detected capacity change from 0 to 164 [ 188.901824][ T5151] loop2: detected capacity change from 0 to 512 [ 188.922182][ T3642] Bluetooth: hci3: command tx timeout [ 188.996595][ T5151] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 190.088096][ T5147] loop2: detected capacity change from 0 to 16 [ 190.145405][ T5147] erofs: Unknown parameter '€' [ 190.232792][ T5147] loop2: detected capacity change from 0 to 512 [ 190.323571][ T5147] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.263: iget: bad i_size value: -67835469387268086 [ 190.425118][ T5161] loop0: detected capacity change from 0 to 512 [ 190.443104][ T5147] EXT4-fs (loop2): Remounting filesystem read-only [ 190.489076][ T5167] loop4: detected capacity change from 0 to 164 [ 190.497967][ T5161] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.266: casefold flag without casefold feature [ 190.511769][ T5161] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.266: missing EA_INODE flag [ 190.524647][ T5161] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.266: error while reading EA inode 2 err=-117 [ 190.545131][ T5161] EXT4-fs (loop0): 1 orphan inode deleted [ 190.550937][ T5161] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.575867][ T5147] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.263: couldn't read orphan inode 15 (err -117) [ 190.597204][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.603965][ T5161] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.266: Directory hole found for htree leaf block 0 [ 190.622200][ T5147] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 190.719439][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 190.795845][ T27] audit: type=1326 audit(1724094371.777:132): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=5154 comm="syz.1.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 190.818633][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 190.831453][ T3786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.861483][ T5161] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.266: Directory hole found for htree leaf block 0 [ 190.891454][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 191.079701][ T5176] loop2: detected capacity change from 0 to 16 [ 191.092526][ T3642] Bluetooth: hci3: command tx timeout [ 191.105712][ T5176] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.834225][ T3786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.931938][ T3786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.957545][ T5184] loop4: detected capacity change from 0 to 256 [ 191.999171][ T5184] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 192.017015][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.041216][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.049921][ T5125] device bridge_slave_0 entered promiscuous mode [ 192.095200][ T3786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.127694][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 192.138916][ T5184] loop4: detected capacity change from 0 to 512 [ 192.151427][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.160693][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.169549][ T5125] device bridge_slave_1 entered promiscuous mode [ 192.273746][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.286629][ T5184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.293986][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.342097][ T5184] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 192.378591][ T5191] loop0: detected capacity change from 0 to 512 [ 192.393561][ T5191] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.538262][ T5125] team0: Port device team_slave_0 added [ 192.556530][ T5191] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 192.567817][ T5125] team0: Port device team_slave_1 added [ 192.610512][ T5191] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 192.905590][ T5191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 193.069062][ T5191] System zones: 0-2, 18-18, 34-34 [ 193.172157][ T3642] Bluetooth: hci3: command tx timeout [ 193.261461][ T5191] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 193.341251][ T5191] EXT4-fs (loop0): 1 truncate cleaned up [ 193.347657][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.411809][ T5191] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 193.430038][ T3633] EXT4-fs (loop4): unmounting filesystem. [ 193.450784][ T27] audit: type=1326 audit(1724094374.427:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5202 comm="syz.1.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 193.517084][ T5201] loop2: detected capacity change from 0 to 256 [ 193.529880][ T5191] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.271: path /43/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 193.564982][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.590525][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.674413][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.686937][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.694079][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.723849][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.768720][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.786865][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.961479][ T5225] usb usb8: check_ctrlrecip: process 5225 (syz.4.276) requesting ep 01 but needs 81 [ 194.989804][ T5226] loop2: detected capacity change from 0 to 16 [ 195.002380][ T5225] usb usb8: usbfs: process 5225 (syz.4.276) did not claim interface 0 before use [ 195.033576][ T5226] erofs: (device loop2): mounted with root inode @ nid 36. [ 195.242076][ T3642] Bluetooth: hci3: command tx timeout [ 196.195373][ T5125] device hsr_slave_0 entered promiscuous mode [ 196.228213][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.301236][ T5125] device hsr_slave_1 entered promiscuous mode [ 196.323194][ T4059] EXT4-fs (loop0): unmounting filesystem. [ 196.378944][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.399792][ T5125] Cannot create hsr debugfs directory [ 196.664404][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 197.373488][ T3642] Bluetooth: hci3: command tx timeout [ 197.535447][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.169341][ T27] audit: type=1326 audit(1724094380.147:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.1.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94cb79e79 code=0x0 [ 199.775626][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 200.098828][ T3686] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 200.362286][ T3686] usb 1-1: Using ep0 maxpacket: 8 [ 200.533159][ T3686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.551241][ T5292] loop4: detected capacity change from 0 to 256 [ 200.564842][ T3686] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.587494][ T3686] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.631516][ T5292] FAT-fs (loop4): Directory bread(block 64) failed [ 200.639099][ T5292] FAT-fs (loop4): Directory bread(block 65) failed [ 200.667726][ T5292] FAT-fs (loop4): Directory bread(block 66) failed [ 200.697674][ T5292] FAT-fs (loop4): Directory bread(block 67) failed [ 200.712210][ T5292] FAT-fs (loop4): Directory bread(block 68) failed [ 200.754249][ T5292] FAT-fs (loop4): Directory bread(block 69) failed [ 200.783140][ T3686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.793123][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.801330][ T3686] usb 1-1: Product: syz [ 200.802161][ T3635] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 200.806152][ T3686] usb 1-1: Manufacturer: syz [ 200.818463][ T5292] FAT-fs (loop4): Directory bread(block 70) failed [ 200.826216][ T5292] FAT-fs (loop4): Directory bread(block 71) failed [ 200.843287][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 200.852286][ T3686] usb 1-1: SerialNumber: syz [ 200.882711][ T5292] FAT-fs (loop4): Directory bread(block 72) failed [ 200.889446][ T5292] FAT-fs (loop4): Directory bread(block 73) failed [ 200.896824][ T3635] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 200.900735][ T5296] usb usb8: check_ctrlrecip: process 5296 (syz.1.290) requesting ep 01 but needs 81 [ 200.926608][ T5296] usb usb8: usbfs: process 5296 (syz.1.290) did not claim interface 0 before use [ 201.052962][ T3786] device hsr_slave_0 left promiscuous mode [ 201.169172][ T3786] device hsr_slave_1 left promiscuous mode [ 201.187649][ T3786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.206723][ T3786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.218356][ T5292] syz.4.288: attempt to access beyond end of device [ 201.218356][ T5292] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 201.232751][ T3786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.240306][ T3786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.248234][ T5292] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 201.307617][ T3786] device bridge_slave_0 left promiscuous mode [ 202.269281][ T5304] loop2: detected capacity change from 0 to 256 [ 202.488901][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.613171][ T3686] cdc_ncm 1-1:1.0: skipping garbage [ 202.620563][ T3686] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 202.633032][ T3686] cdc_ncm 1-1:1.0: bind() failure [ 202.642330][ T3686] usb 1-1: USB disconnect, device number 4 [ 202.650429][ T3786] device veth1_macvtap left promiscuous mode [ 202.693255][ T3786] device veth0_macvtap left promiscuous mode [ 202.712300][ T3786] device veth1_vlan left promiscuous mode [ 202.730590][ T3786] device veth0_vlan left promiscuous mode [ 203.406312][ T3786] team0 (unregistering): Port device team_slave_1 removed [ 203.477932][ T3786] team0 (unregistering): Port device team_slave_0 removed [ 203.519663][ T3786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.248961][ T3786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.749047][ T5326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.013822][ T5328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.213567][ T3786] bond0 (unregistering): Released all slaves [ 206.289223][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 206.303045][ T5327] device bridge_slave_1 left promiscuous mode [ 206.309290][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.323848][ T5328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 206.361627][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.444449][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.479616][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.481875][ T5344] usb usb8: check_ctrlrecip: process 5344 (syz.1.300) requesting ep 01 but needs 81 [ 206.506430][ T5344] usb usb8: usbfs: process 5344 (syz.1.300) did not claim interface 0 before use [ 206.647842][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.223438][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.247199][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.255908][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.266920][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.296524][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.319141][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.357837][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.365273][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.466423][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.510224][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.553537][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.594129][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.601433][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.711532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.808428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.895934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.964704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.052890][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.075296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.122681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.147658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.171020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.202790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.233088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.674809][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.689536][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.751464][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.852694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.872572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.926698][ T5125] device veth0_vlan entered promiscuous mode [ 209.972919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.009111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.032894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.061320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.091875][ T5125] device veth1_vlan entered promiscuous mode [ 210.210697][ T5125] device veth0_macvtap entered promiscuous mode [ 210.228755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.245035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.276123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.354768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.636830][ T5125] device veth1_macvtap entered promiscuous mode [ 210.747106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.829027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.994468][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.048072][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.082204][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.122091][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.146601][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.188916][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.199976][ T5403] usb usb8: check_ctrlrecip: process 5403 (syz.1.311) requesting ep 01 but needs 81 [ 211.232144][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.252138][ T5403] usb usb8: usbfs: process 5403 (syz.1.311) did not claim interface 0 before use [ 211.292239][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.344629][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.383445][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.414650][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.777492][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.817089][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.896250][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.918078][ T3647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.932681][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.941174][ T3647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.963191][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.971026][ T3647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.978731][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.034603][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.112146][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.123127][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.152096][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.179303][ T3647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.188921][ T3647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.200790][ T3647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.215552][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.215601][ T3647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.233805][ T3647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.242918][ T3647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.250052][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.320368][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.342491][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.397642][ T5436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.402244][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.465079][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.478482][ T5427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.504336][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.530045][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.616912][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.653501][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.675331][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.686672][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.022580][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.065696][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.161310][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.210676][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.310918][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.417682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.661525][ T5450] loop3: detected capacity change from 0 to 128 [ 214.827181][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.836171][ T5450] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 214.871474][ T5450] ./file0: Can't open blockdev [ 214.907852][ T5450] process 'syz.3.252' launched './file1' with NULL argv: empty string added [ 215.002556][ T3647] Bluetooth: hci0: command tx timeout [ 215.111931][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 215.870656][ T3642] Bluetooth: hci6: command tx timeout [ 215.986107][ T5469] usb usb8: check_ctrlrecip: process 5469 (syz.1.320) requesting ep 01 but needs 81 [ 215.998738][ T5125] EXT4-fs (loop3): unmounting filesystem. [ 216.055194][ T5469] usb usb8: usbfs: process 5469 (syz.1.320) did not claim interface 0 before use [ 216.445946][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.478208][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.695899][ T5418] device bridge_slave_0 entered promiscuous mode [ 217.006922][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.072507][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.081225][ T5418] device bridge_slave_1 entered promiscuous mode [ 217.112167][ T3642] Bluetooth: hci0: command tx timeout [ 217.122573][ T5422] chnl_net:caif_netlink_parms(): no params data found [ 217.280414][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.333942][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.381106][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.864532][ T5502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.883529][ T3647] Bluetooth: hci6: command tx timeout [ 218.072507][ T5499] device bridge_slave_1 left promiscuous mode [ 218.080079][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.124407][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 218.319133][ T5418] team0: Port device team_slave_0 added [ 218.367597][ T5418] team0: Port device team_slave_1 added [ 219.022942][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.049577][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.162205][ T3642] Bluetooth: hci0: command tx timeout [ 219.224551][ T5523] xt_socket: unknown flags 0x50 [ 219.258959][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.273857][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.280908][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.307279][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.396094][ T27] audit: type=1326 audit(1724094400.377:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.0.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d4379e79 code=0x0 [ 219.962059][ T3647] Bluetooth: hci6: command tx timeout [ 220.023048][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.047009][ T5531] usb usb8: check_ctrlrecip: process 5531 (syz.1.331) requesting ep 01 but needs 81 [ 220.061313][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.070226][ T5422] device bridge_slave_0 entered promiscuous mode [ 220.094150][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.101543][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.103327][ T5531] usb usb8: usbfs: process 5531 (syz.1.331) did not claim interface 0 before use [ 220.114976][ T5422] device bridge_slave_1 entered promiscuous mode [ 220.151285][ T5418] device hsr_slave_0 entered promiscuous mode [ 220.159046][ T5418] device hsr_slave_1 entered promiscuous mode [ 220.165932][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.173729][ T5418] Cannot create hsr debugfs directory [ 220.201855][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.288267][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.804059][ T5422] team0: Port device team_slave_0 added [ 221.165666][ T5422] team0: Port device team_slave_1 added [ 221.206138][ T5545] loop3: detected capacity change from 0 to 16 [ 221.230365][ T5545] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.242087][ T48] Bluetooth: hci0: command tx timeout [ 221.502349][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.126941][ T3647] Bluetooth: hci4: command 0x0406 tx timeout [ 222.133224][ T3642] Bluetooth: hci6: command tx timeout [ 222.157993][ T5551] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 222.268880][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.429495][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.517100][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.536867][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.650103][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.669768][ T5557] loop3: detected capacity change from 0 to 256 [ 222.685013][ T5557] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 222.737490][ T5418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.845819][ T5559] loop3: detected capacity change from 0 to 512 [ 222.924869][ T5559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.987405][ T5418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.007100][ T5559] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 223.245868][ T5418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.310308][ T5125] EXT4-fs (loop3): unmounting filesystem. [ 223.330535][ T5422] device hsr_slave_0 entered promiscuous mode [ 223.352866][ T5422] device hsr_slave_1 entered promiscuous mode [ 223.397761][ T5422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.407583][ T5422] Cannot create hsr debugfs directory [ 223.508201][ T5418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.651490][ T5569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.742482][ T5569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.815257][ T5569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 224.875089][ T5577] usb usb8: check_ctrlrecip: process 5577 (syz.3.341) requesting ep 01 but needs 81 [ 224.932184][ T5577] usb usb8: usbfs: process 5577 (syz.3.341) did not claim interface 0 before use [ 227.002149][ T3642] Bluetooth: hci5: command 0x0406 tx timeout [ 229.333509][ T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.349978][ T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.360263][ T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.371143][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.378736][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.386248][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.626189][ T5584] chnl_net:caif_netlink_parms(): no params data found [ 231.482107][ T3647] Bluetooth: hci7: command tx timeout [ 233.244492][ T3849] kworker/u4:13: attempt to access beyond end of device [ 233.244492][ T3849] loop4: rw=1048577, sector=1224, nr_sectors = 4 limit=256 [ 233.252196][ T28] INFO: task syz-executor:3634 blocked for more than 143 seconds. [ 233.278457][ T3849] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 233.282011][ T28] Not tainted 6.1.106-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.299398][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.332077][ T28] task:syz-executor state:D stack:20152 pid:3634 ppid:1 flags:0x00004004 [ 233.341620][ T28] Call Trace: [ 233.391114][ T28] [ 233.412158][ T28] __schedule+0x143f/0x4570 [ 233.417048][ T28] ? release_firmware_map_entry+0x186/0x186 [ 233.440239][ T28] schedule+0xbf/0x180 [ 233.444653][ T28] schedule_timeout+0xac/0x300 [ 233.449656][ T28] ? console_conditional_schedule+0x40/0x40 [ 233.456592][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 233.463280][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 233.468586][ T28] ? wait_for_completion+0x2f9/0x610 [ 233.474294][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.479530][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 233.485695][ T28] ? wait_for_completion+0x2f9/0x610 [ 233.491097][ T28] wait_for_completion+0x350/0x610 [ 233.496404][ T28] ? io_schedule+0x100/0x100 [ 233.501015][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 233.511782][ T28] ? kthread_unpark+0x175/0x200 [ 233.520916][ T28] kthread_stop+0x1ab/0x690 [ 233.525566][ T28] ext4_stop_mmpd+0x43/0xb0 [ 233.530530][ T28] ext4_put_super+0xb49/0x10e0 [ 233.544962][ T28] ? ext4_put_super+0x3cc/0x10e0 [ 233.549953][ T28] ? ext4_drop_inode+0x2e0/0x2e0 [ 233.561879][ T28] generic_shutdown_super+0x130/0x340 [ 233.562101][ T3647] Bluetooth: hci7: command tx timeout [ 233.570640][ T28] kill_block_super+0x7a/0xe0 [ 233.582131][ T28] deactivate_locked_super+0xa0/0x110 [ 233.587576][ T28] cleanup_mnt+0x490/0x520 [ 233.601391][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 233.606765][ T28] task_work_run+0x246/0x300 [ 233.611390][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 233.627126][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 233.633170][ T28] exit_to_user_mode_loop+0xde/0x100 [ 233.638534][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 233.653776][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 233.659886][ T28] do_syscall_64+0x47/0xb0 [ 233.671762][ T28] ? clear_bhb_loop+0x45/0xa0 [ 233.678643][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.691928][ T28] RIP: 0033:0x7f06f657b1a7 [ 233.696418][ T28] RSP: 002b:00007fffc9b67378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 233.712013][ T28] RAX: 0000000000000000 RBX: 00007f06f65e77b4 RCX: 00007f06f657b1a7 [ 233.720008][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc9b67430 [ 233.738765][ T28] RBP: 00007fffc9b67430 R08: 0000000000000000 R09: 0000000000000000 [ 233.750612][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc9b684b0 [ 233.768539][ T28] R13: 00007f06f65e77b4 R14: 000000000001537b R15: 00007fffc9b684f0 [ 233.778718][ T28] [ 233.781772][ T28] INFO: task kmmpd-loop1:4011 blocked for more than 143 seconds. [ 233.798979][ T28] Not tainted 6.1.106-syzkaller #0 [ 233.806960][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.822072][ T28] task:kmmpd-loop1 state:D stack:26496 pid:4011 ppid:2 flags:0x00024000 [ 233.831313][ T28] Call Trace: [ 233.844202][ T28] [ 233.847179][ T28] __schedule+0x143f/0x4570 [ 233.851703][ T28] ? rcuwait_wake_up+0x18/0x220 [ 233.864278][ T28] ? release_firmware_map_entry+0x186/0x186 [ 233.870227][ T28] ? print_irqtrace_events+0x210/0x210 [ 233.882000][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 233.887243][ T28] schedule+0xbf/0x180 [ 233.891504][ T28] ? percpu_rwsem_wait+0x343/0x450 [ 233.912551][ T28] percpu_rwsem_wait+0x3b9/0x450 [ 233.917547][ T28] ? trace_contention_begin+0x1a0/0x1a0 [ 233.931631][ T28] ? percpu_up_write+0x90/0x90 [ 233.937536][ T28] ? rcu_is_watching+0x11/0xb0 [ 233.943150][ T28] __percpu_down_read+0xe6/0x130 [ 233.948116][ T28] ? kmmpd+0x263/0xa70 [ 233.953061][ T28] write_mmp_block+0x2ee/0x390 [ 233.957852][ T28] kmmpd+0x263/0xa70 [ 233.961766][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 233.967677][ T28] ? __kthread_parkme+0x168/0x1c0 [ 233.972878][ T28] kthread+0x28d/0x320 [ 233.976988][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 233.982612][ T28] ? kthread_blkcg+0xd0/0xd0 [ 233.987305][ T28] ret_from_fork+0x1f/0x30 [ 233.991856][ T28] [ 233.994984][ T28] [ 233.994984][ T28] Showing all locks held in the system: [ 234.002839][ T28] 1 lock held by rcu_tasks_kthre/12: [ 234.008122][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 234.018744][ T28] 1 lock held by rcu_tasks_trace/13: [ 234.024098][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 234.035240][ T28] 3 locks held by kworker/1:0/22: [ 234.040450][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.051495][ T28] #1: ffffc900001c7d20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.071396][ T28] #2: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 234.082310][ T28] 1 lock held by khungtaskd/28: [ 234.087172][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 234.106809][ T28] 2 locks held by getty/3388: [ 234.111520][ T28] #0: ffff88814b416098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 234.125940][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 234.141698][ T28] 1 lock held by syz-executor/3634: [ 234.147788][ T28] #0: ffff88805b0b80e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 234.158176][ T28] 2 locks held by kworker/0:3/3678: [ 234.163419][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.176228][ T28] #1: ffffc9000448fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.187837][ T28] 3 locks held by kworker/u4:5/3692: [ 234.193996][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.214418][ T28] #1: ffffc90004627d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 234.224949][ T28] #2: ffffffff8e4f88a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 234.234071][ T28] 2 locks held by kworker/u4:10/3726: [ 234.239456][ T28] 1 lock held by kmmpd-loop1/4011: [ 234.244632][ T28] #0: ffff88805b0b8460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 234.253852][ T28] 1 lock held by syz.4.288/5301: [ 234.258805][ T28] #0: ffff88805b0b80e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 234.269007][ T28] 1 lock held by syz.2.289/5304: [ 234.274585][ T28] #0: ffff88805b0b80e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 234.284904][ T28] 3 locks held by syz-executor/5418: [ 234.302793][ T28] 5 locks held by syz-executor/5422: [ 234.308198][ T28] #0: ffff88807dc0c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 234.326204][ T28] #1: ffff888059ac0888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 234.340106][ T28] #2: ffff888021fa2578 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 234.351031][ T28] #3: ffffffff8de22148 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 234.361507][ T28] #4: ffff88805a06a0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 234.376160][ T28] 1 lock held by syz.0.328/5517: [ 234.381127][ T28] #0: ffffffff8e4ec550 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 234.390811][ T28] 2 locks held by dhcpcd/5575: [ 234.395783][ T28] #0: ffff88802326a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd00 [ 234.405648][ T28] #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 234.420610][ T28] 2 locks held by syz.3.341/5576: [ 234.425856][ T28] #0: ffff888059145610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 234.436431][ T28] #1: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 234.447561][ T28] 1 lock held by syz.1.342/5578: [ 234.453196][ T28] #0: ffff888059165610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 234.463666][ T28] 1 lock held by syz-executor/5584: [ 234.468870][ T28] #0: ffffffff8e4f88a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 234.478869][ T28] [ 234.481326][ T28] ============================================= [ 234.481326][ T28] [ 234.499529][ T28] NMI backtrace for cpu 1 [ 234.503880][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 234.511779][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.521833][ T28] Call Trace: [ 234.525117][ T28] [ 234.528050][ T28] dump_stack_lvl+0x1e3/0x2cb [ 234.532746][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 234.538221][ T28] ? panic+0x764/0x764 [ 234.542292][ T28] ? vprintk_emit+0x622/0x740 [ 234.546980][ T28] ? printk_sprint+0x490/0x490 [ 234.551748][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 234.556884][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 234.561932][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 234.568120][ T28] ? _printk+0xd1/0x111 [ 234.572271][ T28] ? panic+0x764/0x764 [ 234.576349][ T28] ? __wake_up_klogd+0xcc/0x100 [ 234.581562][ T28] ? panic+0x764/0x764 [ 234.585645][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 234.592000][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 234.598093][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 234.604511][ T28] watchdog+0xf88/0xfd0 [ 234.608665][ T28] ? watchdog+0x1f8/0xfd0 [ 234.613006][ T28] kthread+0x28d/0x320 [ 234.617090][ T28] ? hungtask_pm_notify+0x50/0x50 [ 234.622129][ T28] ? kthread_blkcg+0xd0/0xd0 [ 234.626729][ T28] ret_from_fork+0x1f/0x30 [ 234.631198][ T28] [ 234.635426][ T28] Sending NMI from CPU 1 to CPUs 0: [ 234.640670][ C0] NMI backtrace for cpu 0 [ 234.640682][ C0] CPU: 0 PID: 3726 Comm: kworker/u4:10 Not tainted 6.1.106-syzkaller #0 [ 234.640697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.640705][ C0] Workqueue: bat_events batadv_nc_worker [ 234.640730][ C0] RIP: 0010:__lock_acquire+0x813/0x1f80 [ 234.640753][ C0] Code: 84 c0 0f 85 c4 00 00 00 8b 03 41 38 c7 41 0f b6 cf 41 89 c7 44 0f 42 f9 84 c0 44 0f 44 f9 49 ff c6 48 8b 44 24 28 0f b6 04 10 <84> c0 0f 85 be 00 00 00 48 8b 44 24 18 48 63 00 48 83 c5 28 49 83 [ 234.640766][ C0] RSP: 0018:ffffc900047179a0 EFLAGS: 00000002 [ 234.640778][ C0] RAX: 0000000000000000 RBX: ffffffff904815d8 RCX: 0000000000000004 [ 234.640788][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff9073b2f0 [ 234.640797][ C0] RBP: ffff88802813a8e8 R08: dffffc0000000000 R09: fffffbfff20e765f [ 234.640808][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 234.640817][ C0] R13: ffff88802813a8e8 R14: 0000000000000002 R15: 0000000000000004 [ 234.640827][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 234.640839][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.640849][ C0] CR2: 00007f2949c47d60 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 234.640862][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.640870][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.640879][ C0] Call Trace: [ 234.640884][ C0] [ 234.640890][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 234.640911][ C0] ? read_lock_is_recursive+0x10/0x10 [ 234.640932][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 234.640959][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 234.640981][ C0] ? nmi_handle+0x12e/0x440 [ 234.641002][ C0] ? nmi_handle+0x25/0x440 [ 234.641022][ C0] ? __lock_acquire+0x813/0x1f80 [ 234.641041][ C0] ? default_do_nmi+0x62/0x150 [ 234.641055][ C0] ? exc_nmi+0xa8/0x100 [ 234.641067][ C0] ? end_repeat_nmi+0x16/0x31 [ 234.641090][ C0] ? __lock_acquire+0x813/0x1f80 [ 234.641110][ C0] ? __lock_acquire+0x813/0x1f80 [ 234.641129][ C0] ? __lock_acquire+0x813/0x1f80 [ 234.641149][ C0] [ 234.641152][ C0] [ 234.641163][ C0] lock_acquire+0x1f8/0x5a0 [ 234.641181][ C0] ? batadv_nc_worker+0xc7/0x610 [ 234.641202][ C0] ? read_lock_is_recursive+0x10/0x10 [ 234.641223][ C0] ? batadv_nc_worker+0xc7/0x610 [ 234.641240][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 234.641261][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 234.641284][ C0] batadv_nc_worker+0xe8/0x610 [ 234.641301][ C0] ? batadv_nc_worker+0xc7/0x610 [ 234.641323][ C0] ? batadv_nc_worker+0xc7/0x610 [ 234.641342][ C0] ? process_one_work+0x7a9/0x11d0 [ 234.641358][ C0] process_one_work+0x8a9/0x11d0 [ 234.641379][ C0] ? worker_detach_from_pool+0x260/0x260 [ 234.641397][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 234.641412][ C0] ? kthread_data+0x4e/0xc0 [ 234.641433][ C0] ? wq_worker_running+0x97/0x190 [ 234.641455][ C0] worker_thread+0xa47/0x1200 [ 234.641471][ C0] ? _raw_spin_unlock+0x40/0x40 [ 234.641487][ C0] ? release_firmware_map_entry+0x186/0x186 [ 234.641509][ C0] ? _raw_spin_unlock+0x40/0x40 [ 234.641528][ C0] kthread+0x28d/0x320 [ 234.641541][ C0] ? worker_clr_flags+0x190/0x190 [ 234.641555][ C0] ? kthread_blkcg+0xd0/0xd0 [ 234.641569][ C0] ret_from_fork+0x1f/0x30 [ 234.641592][ C0] [ 234.656018][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 234.656047][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 234.656065][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.656074][ T28] Call Trace: [ 234.656079][ T28] [ 234.656085][ T28] dump_stack_lvl+0x1e3/0x2cb [ 234.656113][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 234.656134][ T28] ? panic+0x764/0x764 [ 234.656149][ T28] ? llist_add_batch+0x160/0x1d0 [ 234.656172][ T28] ? vscnprintf+0x59/0x80 [ 234.656192][ T28] panic+0x318/0x764 [ 234.656208][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 234.656235][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 234.656254][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 234.656274][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 234.656297][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 234.656320][ T28] watchdog+0xfc7/0xfd0 [ 234.656345][ T28] ? watchdog+0x1f8/0xfd0 [ 234.656367][ T28] kthread+0x28d/0x320 [ 234.656381][ T28] ? hungtask_pm_notify+0x50/0x50 [ 234.656398][ T28] ? kthread_blkcg+0xd0/0xd0 [ 234.656413][ T28] ret_from_fork+0x1f/0x30 [ 234.656442][ T28] [ 234.665054][ T28] Kernel Offset: disabled [ 235.096638][ T28] Rebooting in 86400 seconds..