last executing test programs: 2m21.856578733s ago: executing program 2 (id=283): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000400d240f01100000000000ce0a0206241a00000008241c090007ffff090581030004ff24000904010000020d00000904010102020d000009058207000200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x80, 0x1c, {0x8, 0x101, 0x4, 0x5a6a, 0x6, 0x4, 0x8001, 0x2, 0x100, 0x7, 0xc4d, 0x6a}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m18.799192156s ago: executing program 2 (id=296): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 2m18.393362079s ago: executing program 2 (id=298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcec, &(0x7f0000001380)}}, 0x10) 2m18.062312921s ago: executing program 2 (id=300): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7}}, {@hide}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x92fb}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0x45}}, {}]}, 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 2m17.806687724s ago: executing program 2 (id=301): bpf$PROG_LOAD(0x5, 0x0, 0x11) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xa0, 0xa0, 0xa0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@multicast1, @local, 0xffffff00, 0x0, 'veth1_to_bond\x00', 'pimreg1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0xc}, {0x2, 0x6}, 0x9, 0x10001}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb, 0x39, "eb124141fc85ae1be975173c3a416237066883d2d172cbe14e08595968b5"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffff00, 'bond_slave_0\x00', 'wlan1\x00', {}, {}, 0xff, 0x2, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x0, 0xf}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0x7ff, 0x6, [0x35, 0x34, 0x7, 0x3b, 0xa, 0x23, 0x15, 0x2, 0x27, 0x29, 0x28, 0xa, 0x1e, 0x15, 0x2a, 0x20], 0x1, 0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000300)={0x2}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000240)={0xf0f01b, 0x6}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f00000001c0)) 2m16.9056626s ago: executing program 2 (id=305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="3f5e978e345482212cf7cd37be", 0xffffff85}, {&(0x7f0000000400)='\x00'/14, 0x3}], 0x2, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0xfeff27cc}], 0x18, 0x2a048090}], 0x1, 0x2402c080) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 2m16.723157654s ago: executing program 32 (id=305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="3f5e978e345482212cf7cd37be", 0xffffff85}, {&(0x7f0000000400)='\x00'/14, 0x3}], 0x2, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0xfeff27cc}], 0x18, 0x2a048090}], 0x1, 0x2402c080) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 2m5.671149277s ago: executing program 4 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000440)="64f3a49a2ac80eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66fc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fcea090000009d00ce670f35", 0x53}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000880)={{}, "fbed3476294e7560970eaf561963b8b472307180b64357998cf0b60e996552af07c534daab942590570e8d1d197e249a9dcb4317d81fd20030eeb8b0fb1ce02e118771d1dd9ea8b97cafdf88771d263f2313ef926a573a92b45bb7c9d52d4acd1caab3d24fbb4fa81aadc12e37f754746961b676a260b339438d82513e7a626e9a69e9aa0b493aa80cf6c2d09bf4f7c69806187d15b024efdc954cb097c8b37a93003fb8a73d77533b00cdc902db4b58e0003ab4d4be2aca50c42931c357cfcc82ac0d06fb2880f859a5e6b7d8de5176ad355c1d0905ad1ead341deaf64360474829ea56af3a812517e35a1fc0f8f9813d6a95a346cfaf4d6f0841d4ba85b070e25aa320777c05de1151935e936491f8c9d7444945f0f784cd553d163b3dda0848cffb532611ac9bf6846cd70a83caebc97b0b6f48201f698cc78e95ccb936333337fc5c4caf99d39d91322daeb21512dfda1ebd797809e8621a47fba7fb0f8a38a29b3d5b3dfcf958cb2a0bad7983a3bfd8a1e86d5d0e5641ba161bc0ee5cfb6ea1bbdb847986fa8aefc9d44b62afddd4199a693aebdcbac023e4ac50d995e371c4461fd9901276b673c012846afef11c5d2789d3191de18c1d91d92acff3d6a47837165ac7c63ffbb4a77c0ba45bde293dccdad807fc571e3e4e448b3eb5c1d9b83ce72e7152ab8562f49e29c4d150c245cc39fe41a7b307a751b40877a7799696bf43b1f8f1fce835c84e6e22be57f107eb5f8e2c227beb1f90180050a9c56b61076b27279dac2ba7b666b333f2830d0ae015ecae3a523fffd6d9003c78b66c61aec938567b4318f6178eb655095a2c1f860a9515862d7d882eb6f22a7711001351480beed8a1f71270605e5fb082baaa225181b3d689e90edac47000288a68f3b24d7d93ed6565ced73099e588f9c6b2b993fb577ab7e9429fc5f12b91c06446eb7707e3a4596a9fac5cc97618b9f76057b1771322c7d16e3c963fcf381b9ccf30764523c2388e4e4bc9d07f435d385aeeda770d000acd7e06e6f76e13f64712e8d72313b0084ee10fea3883054dc8f136519752602e40d2128c67dc3e645002fd74767594e3b3d470538f53d08779d14b9302dcc342c111678ba53def4104ff0ee6880e257c20d2d769f651c656fac87e1170d5464be14891acaa147b3aadf7618f506ed451369a1e96d2fabeb6200105f499e7a4ea4b5acad11366c5ebb4cf40fd869bf4977f11e6c21a832341e9455c96390273a6f63428ac9d3967f951b6fd48632d4ecd0d56e6e4473aebf1067363fb6d9dfc7a2cf364a4e9d019bc31c20e0543952a17481c704e77063e709b820364f011cb0773b19a5357d901515b939eb2ee730c7b93fc79ea0fc372f7f33eb89dd4537a03f2a5690cb72d7ab2fef4367354fd088af996535248a74be80fe27b22c300cd702c328d5fc3ce6776120f110fe1aac917a201e497f765cd5bc2778bd18d9457210045ae9b22832a7400b1e7a55ac81bbef7698e7330011c187fd1d9e6ee856643ba6f1662a7ab13a00f37afac83c381ccadd6e7ba717b643d7f79305fd1f822dbf8874e270d7974544cdf44b7ed8be48c2014a939f4d2beb7f39f2fce2aa916e0b70f2ae712c3498ea2f1b184bdd7af9e4dac9bdce090bd750332cceaf79d7f8ecde42fe620c0f05753b43d9b51e9e0157043821af9f32a45dbb7cda41bcac2a89f76d26278ee173f84eccb0f53c8b2c219e412f9b3085bbcfb7ee51f66c5fcf68a6dc0eaea384edbeba68b3530c2b8dfd2cad503f140264064b78731caceb5f1cd985b447dd968af2ffa5a8305685a380fd98e57d6dc875ed669c0882204729a86de9724662f81692bf2eed0f44fcce6704c0f7e1a65e063cfef8c5eb25bd2e93dfd4f85e144f7632b67a8fdfa9e8db424ca594fe6adf9dc91458846ffe4f2c19ec0624e97afe0b4407deda7d566dcd6b069dbde7bdd01ed2597734693b0cea69d889f4f77e313c2b60186b8dd4f2537b28e782139d91a44562002225a042290e7de5945f05bca6a6c65c21d59cbefb528ec7a01e0de76115859a8d783f5d42b6f3a159681bfdfdf141cb5533f0f6141ba8639ece69b2f0185e1820411c66ea8f64290b0331b01ad73f8c6484cb5920a4c70520824d629544f4fa1f8d22d3ce4d3376ebfd40afc570372bdcbc7f5e6fe0e3de7d34abc490432325f4a94d16fcde9aa2ce631d82de3f2741caefb2f80059700c9a7e8d92675a7e38fc2236e53bf8bd958c7ab9417df570563e05cbae5cb7f904f972d2c2c0746a7896cfec70fbae7b2291d1e4d230ceba2546af1c8fc94c3825759b4650ba22ccb4e7b3b2d87dd1c5e04fe62a552019f0d3cce0faf6fc50f2bfbd05093fc929390e8743d4393e0a6c9f120cd4d79297b05cc86e5dbd0d067ce99cac154994ae49dc593167ca6e83d7714877a5433c2f19d1096636882f43f18730a683f76d27e44eae0fd56ef1950e56d4bb02f2ad2f2366640dbc165bb55921e7140f09005e040e3bee6cc4360ee7b5773c8152d7d098debf3e2b342ac28565268b3fe4fd80fd017d895899e8575e09f60c162fbcef0fe42b212479389b1fca4e0ee8d942861d7948273f8250b7357eab3df36b5121b3219c084db4e268a61dd4a08d2d57c97de372daf11acb264dbd4cd7195dc5b01a12b8fd458ff1e93750a00f9a5abfa76ab2a776f636282735ba6be8935cf36951a9b43ca0813f7292cdd1f64430821f12c6cef29e198acc35eb1dd1448f728f93c8de213cbf8b8aa0019d7cdc6290a6f044ccc6ad79d6e91c91d317aa109d9c7d2459bfaf253575119568f657c42595a64e4a446310e1f7ddf67ebee7c022dd405fcc72f228da2a8c906a724ca7380f2f558c044fe524c9aaed70fcd0b5afd6aa25d3d89d5816b4c687d37523e2686d6b1646ee8b6dfb1e63decd32792dd64f4c42457e8f7cb590caecd86fbf16481af7302547881ef8acc42acd7fbf03a0821281fe0380603727bc5600f89098b0561bd2becedc0c0225df821b154042ad8ef55aaff239510bbef4cae1f89bb990f8e60ebc0614425e9c9c05c3bd826899e6e925926a6f068fa823c028e98b0ab771a25ddbfb11ec79fd182f389b37c226027540dc8aa0ead183c13f5df0a414f3dd083a88caa2285df6bd41d3724f0d314adc36e3d94666b61f0e923d196854435a4154d81c882cf6fb55617b835b77de2679732f354b5f61d4b79afb87eeb0f95bdbc7a390bc302346c99e9d3f49df4ef86bf7b3e9c15cfb91b3479996466553f9a303673b930bebfe360f0f78c85011824e648c8d76bab1eca5a4854139d645ca9dfa422add7101b3e79f97eb626c356b715b4de15dd3d441cebb4ecc88bf51a4805e606ac7b66f1eed2382824b78694924cb00d9f2f6de978af61d4b0a4dd39a9062d3f88c21b859c8fac708285898a0dd012fe07f4cdd7e56ea04bc86d4fea750315cc1fccfbdb516df0e1c54ec2c6a933e5619b00445201afccfb5b89f8ba3e5f82bcda57c112f410e06774e69d51dffc137ce4aa41185575d417ddd0ea49c0d83bdea1f7e9dfbc97a8ac0765bcda504058188adb7af99b93757bfb3dd96f0ed3865cd5ed62ba7bfd56c401751309d14b9f8d04047bad348571b79a1da863f3d38be5153a8360823965f33b6d401c11e0cb30660c8710d839f05673cedf5b7c088b8ef9e58b28fe324536d115cb3861a5a7d4443b7ab8e544211d492aa6b64b10d6f9dd672ad7f3f4fa81f7238860bda54270dc2ee7b35a6b0a8a664b3e5c46f7bb99c47ee15427648288678d09d2fece5e1636531b27336a16a862e60738fe10258b7ff77f9a1a92469b3b0375701395e34dd2223e77a1b17c7aea51532384d51fd3225b22a14b226121008661e70fe95ea651eb12b15ea32f6a220ef62cb1cabc74c10a940bd8b2b0ad3e666e59dc19ffe1ce0af16c1bbe26405cb2dcd7ff2dff0a36517a4b7c8f1c29f71e9d01c31b9c316b83059ecd71dc600651b3e48d7ad74aaf8ae4e68152bc96a86d32552762111f4b819b744aa60afb797fa3e5325e6193b2367c3d66f0f1250ef1b046f2affcdf44f002d6a1aeeac421e0ab88f5dcdfb298476fe652cf1815bb3d192d75c64f720eac20460b6d8d5fe74d622390f419fca19aeeca144b629610676362438ebf92046f9dabaf6fb99626cceab3b1a2f00cee476f59a12de8ccce253cbf4db2ee3a69bc3c9c85ce7e0e27311ebe75fa9b90c939142c49d9daa03171e6e67034e3bf028f459a50acf711c6debf0bed3d28e6686c70ae410a14b2f0ab9803fdc4c9c3698fe27a7978fd791b8d51e45cf2e61eaec9e643d90ba0ec8f1f79860ae48f9a0a7aa47bfb498a78b2f0d8dc6046d877882c96faafaed85147a4a292e0a0f7bcf4f1a23a5c566a9a6792b7f22e6240b2173460570bf25312603659f3258b76eb6f2c2f17d0dc6bec63e761bf1a790bd1cda6aa7ed4f773ec3a35e97dd49569e4b714f4a46bc486b23363a10c0001ab65ac920da37f7060c8cc286973045c24800829abc70304a2d665efc3e06bce1db9778f979bddf5a58aacf1044c58597735476800549dc24b31f675dc87cf23accba293942f90804f7632af92db64b86a78bfb0ec6f98546340ec70cd2dde2bcea73de3e46cfed3355e9fd0b0beda4c535f3a8394a41857b37698f7e39713224f49bbe929fc0cbf14387c91fe65794040b940ed4187f555868b3ee243fd5b2ab7b2f62d1bef9e5c6b8bfe14d7e7c6beec29629bdef59ddf18fa5f3dd1545d9c15b8c788fc7bec0c04a800d6ec930c2d440ebc08a07c163233b0c43c0d59212596ad3de978aca6ed05630a01e824dbb6ab7654d34578efb058793dee1976f7acdf196e9bfb76f7285a2e2065b9c86e1221f7e74806574a8a6cda486f0d9cd266efd7b6846611b7f429b0c81635b69067ae62a97a663949c8b9c76a577afa28380c0f7cb74e5324b5d7066f10a2524e1f96ba78c2daa09c1edf37c494d322cf7eb40c13ad7a01bbfbeb74a850d210bb9ebed217da8f93dcb8695b2b89836261cb5841a6aadc35d10024819cd4b63149025db806f785afca8bcd3b6a9b4f735f15d109f3551a8a60cff6b8fc24c9b3323fe9ba423bc76c9b966e3169be20c525eea55496d2492000b19108a6f840ce1827607f48a90375f4e9861f3552ba4986f34bf3d8a24b7a88b71ec2cf3ec3183db0bfa027e16574f53165b853e3de496bb32d33a3ebcdf426c8029f1edf81fa17ef68d30b11d557cd61c2c2c1d858e72bafc4382c48a012499e9ccc11a263322749525e04e69c37ee23e18d972ad54f2f9c387c0954f83a31bdb4f3fd54d44e8f911dc324715cba17aa680b6a101da353fa84434c85665910fde7ac5f2d08d77ef4febc35be757d055dd150636b303ddfd9573562af766d888142164d30d5dcbcd800a0a9a6ff7af71c321bf6785c8655f6ceff4c9a26162f1a02ffebfc76b32bca8d91b9e0c4b2dfc410e328ca51a8df01e7279e26a8c63fd0f50d021a7cfa11784ee0d72b776278b32829008a9054f168701b6871a60f34082202b033b7338ac6ad8ce0192a41d00e435da5133c1f43f562b6ce43d104d060bd63cc2acba40757dd90ce82e06bd33ec362dcef33de972ca7305c078cc163d10ac398ae6c641470bd8140cdc4b7447c4e60091efb8457bdf690487d924324f487ec8e804fb106db128d4f4ecce8eb8937f1e117caccfb6fab8c5e1fe753e372d9897023d88bb574f26b8c53ddb0e37cd82f1c6ccada3e6eccb4419cd02c"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") 2m1.939924517s ago: executing program 4 (id=353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x10006}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @empty, 0x10005}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m1.404078046s ago: executing program 4 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) 2m0.202878291s ago: executing program 4 (id=359): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7}}, {@hide}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x92fb}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0x45}}, {}]}, 0x1, 0x54e, &(0x7f00000008c0)="$eJzs3V1v01gawPHHfYEoK1WrZYVQVeBQdqUileAkEBSxN17nJD2Q2JHtoPYKVTRFFSmsKCtte8Nyw8xIMx+CuZwPMd8IzUeYke2kLzSJgb5O9f9FcE7sY5/npJYfuY2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nWU1mlsL/Nbe2/7WhxbInQPFmH5FrPif5HJyLV107e97q6/G/83LXPpuTnJxkZOdv1z966MrUxOD7ccE/FV+/sY9bW3vvFzt9bpvjiuQc+j65dHrGtozoW9aTkMrE/qqWqnY95bqoaqbpg5Xwki3lBtoJ/IDteDeUcVqtax0YcXveI2a09SDhQ/vlmy7oh4X2toJQt+797gQukum2TReI2kTr47bPIwPxCcmUpF2Wkqtb/S65awBxI2KX9KolNWoZJdKxWKpVKw8qD54aNtThxbYn5FDLY7voMWf0zGevYGjmejnf2mKEU86sixq6MuVmgTiS2vE+r5B/v/nPT223/35f5Dlr+2tnpUk/99I390Ylf9HxHJ6ry3Zlh15KavSk5505c0J9jVz5qM9/GqIFk+MhOKLkZY4yRLVX6KkKhWpiC3PZEnqEoqSuhhpipZQViSUSHRyRLkSiBZHIvElECUL4sodUVKUqlSlLEq0FGRFfOmIJw2piZPsZV02ks+9LMoaFeNuo+LIYeQHx11XSmNGS/7H0R3r+Rs4it8H+R8AAAAAAFxYVvLb9/j6f1quJ7W6aWr7rMMCAAAAAADHKPnL/1xcTMe162Jx/Q8AAAAAwEVjJffYWSKSl5tpbV2s5HYpfgkAAAAAAMAFkfz9/0ZcJHOg3BRrd7oUrv8BAAAAALggvs+cYz9sX7Z+/U2CYNp6317+h7WZzM3rbE6m201+vseoPmvN9HeSFJW0mJpy9ZyVSxvtToL5qV+sZ8Vh7QXg7Abw/68J4MqU/Ci30ja31tJybbAm7SVfN01dcP3mo6I4zsxEpJej/77a+J8kw//Ba81YOdnodQvPX/fWkljex3t5v9mfQPHQPIpjYnmbzLeQ3HMxdMTTyY0Y/X7zlqxv9Lr2/vFPpJtPHOzx3cyYPj/IfNpqvj/jbf7g+HNxn8XCqNH3oygeceQf5Hba5vbC7bQYEkUpK4rS/iiGfxZHj6KcFUX5iFEAwFlZz8hClhzKu99wlvu27C5fmd0/yELaZmE2ObFOzQ45o9tZZ3R7fHabzIril0PPQBqVY+N+f/osq36MN/g4MquGzZIVf4STbzf/I1e3tnfubmyuvui+6L4qlcoV+75tPyjJdDKMfkHuAQAMsf8ZO9bQ/J/5FB7rfsZV9d92v1JQkOfyWnqyJovJ3QbJNw6G7jW/72sIixlXrfkkTaZPeFkcc1V3KbnLYbDf0ti2B2Mon8JPAgCA0zOfkYe/JP8vZlx3H8zl46+O8/ue1gYAAE6GDj5Z+eg7KwhM+1mxWi060ZJWge8+UYGpNbQyXqQDd8nxGlq1Az/yXb8ZV56amg5V2Gm3/SBSdT9QbT80y8n0gar/6PdQtxwvMm7Ybmon1Mr1vchxI1UzofuvduffTRMu6SDZOGxr19SN60TG91TodwJXF5QKtVZ7DU1Ne5Gpm7jqqXZgWk6QU0/9ZqelVU2HbmDakZ/ucNCX8ep+0Ep2e+msP2wAAM6Jre2dl6u9XvfNCVaGdpw79aECAIC+jCwNAAAAAAAAAAAAAAAAAAAAAADOgdO4/4/KBa8MpoI+L/FQOYZK5qnj3YmfnACcqD8CAAD//x6LT3Q=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001a40)={0x2020}, 0x2020) 1m59.945621814s ago: executing program 4 (id=360): link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m58.073969235s ago: executing program 4 (id=365): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="caf1ebe2d6eeee", 0x7}], 0x1, 0x0, 0x0, 0x51}], 0x1, 0x40800) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f0000000040)=ANY=[], 0xfd, 0x1fe, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x40004) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r2, 0x3}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m57.842347235s ago: executing program 33 (id=365): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="caf1ebe2d6eeee", 0x7}], 0x1, 0x0, 0x0, 0x51}], 0x1, 0x40800) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f0000000040)=ANY=[], 0xfd, 0x1fe, &(0x7f0000000440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x40004) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r2, 0x3}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m50.519230118s ago: executing program 1 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, r1, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) tee(r0, r3, 0x100000001, 0x9) 1m49.917640335s ago: executing program 1 (id=388): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1m49.867371022s ago: executing program 1 (id=389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0xc, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x30, 0x19}, {0x54000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0x10, 0x5, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xc, 0x4, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x5}, {0x6000, 0x1, 0x4, 0x5, 0x81, 0x2, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0xffffffff, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x400000006, 0x0, 0x3000, [0xa4, 0x1000, 0x400000000063, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.161640021s ago: executing program 1 (id=394): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7}}, {@hide}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x92fb}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0x45}}, {}]}, 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 1m47.936300561s ago: executing program 1 (id=397): syz_usb_connect(0x5, 0x5e, 0x0, 0x0) 1m46.277643184s ago: executing program 1 (id=402): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x931766f6319eed40) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 1m45.53219997s ago: executing program 34 (id=402): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x931766f6319eed40) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 1m3.617554407s ago: executing program 5 (id=508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000b40)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {}, 0x4d, [0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)="94", 0xf000}], 0x104) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000400)="633aaf2414b741a5a4d57dbd04582a4a73238ef9282525cbb14db0917e79375a1e8932504f9813ef4a2eba0f9f8962185eccff1f0c58b0e9797491bd099b0c92c92b4f765e9d7e256d24d8f37db2e3735e9fb3ed78b4f821e8b7464871e2f52fff40e2", &(0x7f0000000480)=""/89, &(0x7f00000009c0)="dee54ea9c1c4229edb4b34045998bed9f782c5d870659fc5a23360ff11bdb5da838fc46333093eca895e5686a1f701806db3f670757570ee01cf8120890ed790389cbb9b1fcb8230353fd0443ec662b5e7c4e0f51cc47fdbedb5e4c37db1f84a651894d131b1266e417f9f5f1140623155a8d30b0f2a83acae208479b993cde5", &(0x7f0000000a40)="504589c4014e36f43a7a3cf3743f8ea20884b3c521c97000a35565bac259f7ccbc26192c173b4f15a30c6e14e914e345d8ffd6ec5e29af5bd81dcf469e1b8d97dfb21ff572e6786c70f0168fb273e9e69ded102bf36fe384b8f426d147189ac3f81ae6e7046578727e28452cd2baa2c47d8f81e17816d9ee878cd23e4af91014f644f014664d25ca148fb6cfc0a0e69343ce4b412f7d8ad8784dd524236d1914188d76340825603d911f36c8fe5fa6af95583d8dc8846c25b0e78d769604a62f68", 0x4, 0x1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) sendfile(r3, r2, 0x0, 0x8010002b) 1m1.321165813s ago: executing program 5 (id=516): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000009e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x4000}}], 0x1, 0x0) 58.145660882s ago: executing program 5 (id=519): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 53.786897463s ago: executing program 5 (id=527): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 53.43028314s ago: executing program 5 (id=529): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000500)='./file0/../file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 53.03849963s ago: executing program 5 (id=532): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @private0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x32b002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000440)) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 37.543716105s ago: executing program 35 (id=532): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @private0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x32b002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000440)) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 14.721729214s ago: executing program 3 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08"], 0x1f0}}, 0x0) 14.653363183s ago: executing program 3 (id=612): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x6e, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0x40, 0x4}}}, {{@ipv6={@local, @mcast1, [0x7fffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'caif0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6c, 0x40, 0x5, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'macvlan1\x00', 'vcan0\x00', {}, {}, 0x33, 0xf8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET3={0x0, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x3, 0x1}, {0xffffffffffffffff, 0x6, 0x5}, 0x1, 0xfffffff9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3cc) 12.737734779s ago: executing program 3 (id=617): r0 = eventfd2(0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e53000905", @ANYRES16=r0, @ANYRES64=r0], 0x0) 10.501580257s ago: executing program 6 (id=622): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x62005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 9.993785923s ago: executing program 6 (id=623): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000010c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 9.106586917s ago: executing program 3 (id=625): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 8.997741601s ago: executing program 7 (id=627): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x6e, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0x40, 0x4}}}, {{@ipv6={@local, @mcast1, [0x7fffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'caif0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6c, 0x40, 0x5, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'macvlan1\x00', 'vcan0\x00', {}, {}, 0x33, 0xf8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET3={0x0, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x3, 0x1}, {0xffffffffffffffff, 0x6, 0x5}, 0x1, 0xfffffff9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3cc) 8.994762341s ago: executing program 6 (id=628): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8e) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 7.492968125s ago: executing program 3 (id=629): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mremap(&(0x7f000081f000/0x14000)=nil, 0x14000, 0x4000, 0x6, &(0x7f0000874000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter\x00') lseek(r4, 0x9, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.292582201s ago: executing program 7 (id=631): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x5, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\r\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @local=@item_4={0x3, 0x2, 0x0, "d063770d"}, @main=@item_4={0x3, 0x0, 0x8, "04038000"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 7.281901752s ago: executing program 8 (id=632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x20040840) 7.208492812s ago: executing program 8 (id=633): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 6.952420134s ago: executing program 0 (id=634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.721454922s ago: executing program 8 (id=635): r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4.676109308s ago: executing program 6 (id=636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001"], 0x54}}, 0x4004850) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831110203010902240001000000000904000002ff47d000090509e7000080"], 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.477666183s ago: executing program 3 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) 4.463271465s ago: executing program 0 (id=638): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000000000000100010090fd1400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 4.34944746s ago: executing program 8 (id=639): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "e52cd72cb464270a33fe3c86010e6dbc23381f914f48aafcdf7c22cd3591d8dcf18c"}, 0x2d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.10961359s ago: executing program 7 (id=640): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX], 0x5, 0x25d, &(0x7f0000000f40)="$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") 3.56897227s ago: executing program 0 (id=641): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r6, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/186, 0xba, 0x1, 0x0}, 0x0) r7 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.132028016s ago: executing program 7 (id=642): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d904000003", 0x6}], 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 2.088554521s ago: executing program 7 (id=643): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x6e, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0x40, 0x4}}}, {{@ipv6={@local, @mcast1, [0x7fffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'caif0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6c, 0x40, 0x5, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'macvlan1\x00', 'vcan0\x00', {}, {}, 0x33, 0xf8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET3={0x0, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x3, 0x1}, {0xffffffffffffffff, 0x6, 0x5}, 0x1, 0xfffffff9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3cc) 1.717053319s ago: executing program 8 (id=644): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7}}, {@hide}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x92fb}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0x45}}, {}]}, 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 1.541677441s ago: executing program 0 (id=645): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.501019156s ago: executing program 7 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.500747497s ago: executing program 6 (id=647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.432719115s ago: executing program 0 (id=648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @loopback, 0x8000000}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1b8, 0xc0, 0x398, 0x2a8, 0xc0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "c180", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x3, 0xc, [0x9, 0x29, 0xb, 0x1, 0x1d, 0x36, 0x2c, 0x30, 0x40, 0x3, 0x3a, 0x2e, 0x13, 0x9, 0x31, 0x3f], 0x0, 0x0, 0x401}}}, {{@ip={@local, @local, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x6, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xc6}}, @common=@ah={{0x30}, {[0x7000000, 0x5], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, 'O.'}}, @common=@inet=@tcp={{0x30}, {[0x4e21, 0x4e23], [0x4e22, 0x4e23], 0x4, 0x8, 0x80, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xfe}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x4d5d61676ba1c8aa, 0x2, 0x7, 0xbb94e83cae91ec6a, 0x1], 0x6e, 0x5}}}, @common=@icmp={{0x28}, {0x4, "81be"}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0xcd, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) socket$inet6(0x10, 0x2, 0x0) 1.242287689s ago: executing program 8 (id=649): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adb700303a00fe880000000000000000000000000001ff020000000000000000"], 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 433.688684ms ago: executing program 0 (id=650): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x5, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\r\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @local=@item_4={0x3, 0x2, 0x0, "d063770d"}, @main=@item_4={0x3, 0x0, 0x8, "04038000"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 0s ago: executing program 6 (id=651): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x370, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): cksize (268), supports only 12 [ 101.724801][ T4716] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.936444][ T4716] F2FS-fs (loop1): invalid crc value [ 102.108842][ T4716] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.149228][ T4716] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.156630][ T4716] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.847269][ T4734] x_tables: duplicate underflow at hook 2 [ 108.721987][ T4776] loop3: detected capacity change from 0 to 4096 [ 108.885060][ T4776] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 108.937070][ T4776] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 111.766885][ T4809] loop3: detected capacity change from 0 to 40427 [ 111.893266][ T4809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 111.901089][ T4809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.912074][ T4809] F2FS-fs (loop3): invalid crc value [ 111.983815][ T4809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.076167][ T4809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 112.084297][ T4809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.879400][ T4834] x_tables: duplicate underflow at hook 2 [ 114.685449][ T4860] device syzkaller0 entered promiscuous mode [ 114.906330][ T4873] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.173'. [ 116.492901][ T4896] loop1: detected capacity change from 0 to 512 [ 116.681278][ T4896] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.755879][ T4911] syz.3.188[4911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.755991][ T4911] syz.3.188[4911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.774758][ T4914] netlink: 'syz.4.190': attribute type 3 has an invalid length. [ 116.795274][ T4914] netlink: 152 bytes leftover after parsing attributes in process `syz.4.190'. [ 116.846406][ T4896] EXT4-fs (loop1): 1 truncate cleaned up [ 116.854414][ T4896] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 116.937917][ T4919] netlink: zone id is out of range [ 116.945110][ T4919] netlink: set zone limit has 4 unknown bytes [ 117.254053][ T26] audit: type=1800 audit(1768702158.994:7): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.183" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 120.009221][ T4959] syz.4.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.441080][ T5095] loop4: detected capacity change from 0 to 512 [ 127.613525][ T5095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.679713][ T5095] EXT4-fs (loop4): 1 truncate cleaned up [ 127.703647][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 127.819771][ T5109] loop3: detected capacity change from 0 to 128 [ 128.070491][ T5111] loop4: detected capacity change from 0 to 4096 [ 129.009961][ T5122] ntfs3: loop4: ino=21, "file1" fallocate(0x20) is not supported [ 129.723965][ T4185] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 129.743003][ T4185] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 130.113740][ T5138] loop0: detected capacity change from 0 to 512 [ 130.255367][ T5138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.362364][ T5138] EXT4-fs (loop0): 1 truncate cleaned up [ 130.387711][ T5147] loop4: detected capacity change from 0 to 256 [ 130.424041][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 130.511734][ T5147] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 130.571609][ T26] audit: type=1800 audit(1768702172.316:8): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.281" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 131.238574][ T5153] loop1: detected capacity change from 0 to 40427 [ 131.250191][ T5153] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.258025][ T5153] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.272592][ T5153] F2FS-fs (loop1): invalid crc value [ 131.330350][ T5153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.392798][ T5153] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.399895][ T5153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.625512][ T5165] x_tables: duplicate underflow at hook 2 [ 131.634469][ T26] audit: type=1800 audit(1768702173.376:9): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.287" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 132.520094][ T5170] loop4: detected capacity change from 0 to 512 [ 132.543531][ T4550] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.583837][ T5170] EXT4-fs (loop4): Ignoring removed nobh option [ 132.590173][ T5170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.654473][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660833][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.673967][ T5172] loop3: detected capacity change from 0 to 512 [ 132.702298][ T5170] EXT4-fs (loop4): 1 truncate cleaned up [ 132.710478][ T5170] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 132.863366][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.292: iget: bad i_size value: 38620345925642 [ 132.910626][ T4550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.961340][ T4550] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 132.980493][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.292: couldn't read orphan inode 15 (err -117) [ 133.045266][ T4550] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.059213][ T5172] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 133.081578][ T4550] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.180207][ T5172] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.292: bg 0: block 5: invalid block bitmap [ 133.275741][ T5182] loop4: detected capacity change from 0 to 512 [ 133.290591][ T4550] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.299656][ T4550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.310454][ T4232] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 133.333915][ T4550] usb 3-1: Product: syz [ 133.358074][ T5182] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.381716][ T4550] usb 3-1: can't set config #1, error -71 [ 133.385714][ T5183] loop2: detected capacity change from 0 to 1024 [ 133.395260][ T4550] usb 3-1: USB disconnect, device number 3 [ 133.411646][ T5172] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 133.431825][ T5182] EXT4-fs (loop4): 1 truncate cleaned up [ 133.437577][ T5182] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 133.455820][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.473504][ T5172] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.473504][ T5172] [ 133.507920][ T26] audit: type=1800 audit(1768702175.246:10): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 133.576360][ T5172] EXT4-fs (loop3): Total free blocks count 0 [ 133.610538][ T5172] EXT4-fs (loop3): Free/Dirty block details [ 133.616958][ T5172] EXT4-fs (loop3): free_blocks=0 [ 133.640597][ T5172] EXT4-fs (loop3): dirty_blocks=65 [ 133.645744][ T5172] EXT4-fs (loop3): Block reservation details [ 133.680239][ T5022] hfsplus: bad catalog file entry [ 133.700579][ T5022] hfsplus: b-tree write err: -5, ino 3 [ 133.706559][ T5172] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 133.787902][ T4232] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.819972][ T4232] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.850414][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.887349][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.916640][ T4232] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 133.956616][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.987974][ T4232] usb 1-1: config 0 descriptor?? [ 134.027448][ T5193] loop2: detected capacity change from 0 to 164 [ 134.036755][ T4340] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 134.075798][ T4340] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.075798][ T4340] [ 134.200485][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 134.258558][ T4189] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 134.289525][ T4189] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 134.308715][ T4189] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 134.341257][ T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.359956][ T7] usb 2-1: config 179 has no interface number 0 [ 134.374054][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 134.396827][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 134.414771][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 134.427798][ T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 134.444089][ T7] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.459267][ T7] usb 2-1: config 179 interface 65 has no altsetting 0 [ 134.471318][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 134.487184][ T4232] holtek 0003:1241:5015.0002: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 134.501858][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.510722][ T4232] holtek 0003:1241:5015.0002: no inputs found [ 134.568650][ T7] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 134.687139][ T7] usb 1-1: USB disconnect, device number 2 [ 134.758715][ T5201] fido_id[5201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.801872][ T4232] usb 2-1: USB disconnect, device number 2 [ 134.820426][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.854426][ T4232] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.177227][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.308472][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.379086][ T5210] loop0: detected capacity change from 0 to 128 [ 135.458520][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.471773][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.484618][ T5210] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.516439][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.578500][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.697873][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.807443][ T5216] syz.0.307 (pid 5216) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 135.844108][ T5216] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 136.610477][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 136.710579][ T4248] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.741024][ T4232] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 136.749141][ T4232] usb 2-1: config 0 has no interface number 0 [ 136.778691][ T4232] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.828163][ T4232] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 136.894813][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 136.962590][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 137.029671][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.056742][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.070610][ T4232] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 137.085451][ T5213] device bridge_slave_0 entered promiscuous mode [ 137.089951][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.100101][ T4232] usb 2-1: Product: syz [ 137.104475][ T4232] usb 2-1: Manufacturer: syz [ 137.109073][ T4232] usb 2-1: SerialNumber: syz [ 137.110777][ T4248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.133562][ T4232] usb 2-1: config 0 descriptor?? [ 137.150491][ T4249] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.154852][ T4248] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.158268][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.180658][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.210585][ T4248] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.229547][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.239459][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.261462][ T5213] device bridge_slave_1 entered promiscuous mode [ 137.370723][ T4248] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 137.387876][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.397123][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.411799][ T4249] usb 1-1: Using ep0 maxpacket: 16 [ 137.411986][ T4248] usb 4-1: Product: syz [ 137.427857][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.439451][ T4248] usb 4-1: Manufacturer: syz [ 137.448096][ T4248] usb 4-1: SerialNumber: syz [ 137.457323][ T7] usb 2-1: USB disconnect, device number 3 [ 137.484691][ T4248] usb 4-1: config 0 descriptor?? [ 137.546361][ T4248] debugfs: Directory 'card3' with parent 'sound' already present! [ 137.560678][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.575735][ T4248] usb 4-1: selecting invalid altsetting 0 [ 137.603502][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.623581][ T4249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.645242][ T5213] team0: Port device team_slave_0 added [ 137.668311][ T4249] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.688266][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.698781][ T5213] team0: Port device team_slave_1 added [ 137.714335][ T4249] usb 1-1: config 0 descriptor?? [ 137.753911][ T5218] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.835961][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.856903][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.919164][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.939545][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.957474][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.027666][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.110719][ T9] device hsr_slave_0 left promiscuous mode [ 138.124082][ T9] device hsr_slave_1 left promiscuous mode [ 138.135548][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.149111][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.172482][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.180097][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.251899][ T9] device bridge_slave_1 left promiscuous mode [ 138.273251][ T4234] usb 4-1: USB disconnect, device number 3 [ 138.294352][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.346508][ T5260] loop1: detected capacity change from 0 to 40427 [ 138.366337][ T4249] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6 [ 138.403492][ T5260] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 138.410611][ T4550] Bluetooth: hci2: command 0x0409 tx timeout [ 138.411281][ T5260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.435005][ T9] device bridge_slave_0 left promiscuous mode [ 138.444429][ T4249] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 138.452794][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.457535][ T5260] F2FS-fs (loop1): invalid crc value [ 138.505151][ T4249] usb 1-1: USB disconnect, device number 3 [ 138.537363][ T5260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.588321][ T5260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.595422][ T5260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.639052][ T5267] fido_id[5267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 138.807270][ T9] device veth1_macvtap left promiscuous mode [ 138.813850][ T5274] x_tables: duplicate underflow at hook 2 [ 138.820620][ T26] audit: type=1800 audit(1768702180.566:11): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.315" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 138.880100][ T9] device veth0_macvtap left promiscuous mode [ 138.934889][ T9] device veth1_vlan left promiscuous mode [ 138.949017][ T9] device veth0_vlan left promiscuous mode [ 140.504570][ T9] team0 (unregistering): Port device team_slave_1 removed [ 140.523994][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 140.699018][ T9] team0 (unregistering): Port device team_slave_0 removed [ 140.838556][ T5300] loop0: detected capacity change from 0 to 512 [ 140.867505][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.874935][ T5303] loop3: detected capacity change from 0 to 256 [ 140.895852][ T5300] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 140.928164][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.989990][ T5300] EXT4-fs (loop0): 1 truncate cleaned up [ 141.029340][ T26] audit: type=1800 audit(1768702182.766:12): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.328" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 141.050736][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 141.088775][ T5303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.125687][ T5303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.140106][ T5303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.152604][ T5303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.175077][ T5300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.327: invalid indirect mapped block 4294901760 (level 0) [ 141.190033][ T5303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.212260][ T5300] EXT4-fs (loop0): Remounting filesystem read-only [ 141.219029][ T5300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.327: invalid indirect mapped block 4294967295 (level 1) [ 141.261861][ T5300] EXT4-fs (loop0): Remounting filesystem read-only [ 141.274251][ T9] bond0 (unregistering): Released all slaves [ 141.369825][ T5272] loop4: detected capacity change from 0 to 1024 [ 141.622399][ T5213] device hsr_slave_0 entered promiscuous mode [ 141.728593][ T5213] device hsr_slave_1 entered promiscuous mode [ 141.872782][ T5315] loop0: detected capacity change from 0 to 40427 [ 142.473491][ T5315] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 142.481335][ T5315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.494565][ T5315] F2FS-fs (loop0): invalid crc value [ 142.585384][ T5315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.629289][ T5315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.636455][ T5315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.714761][ T5320] loop1: detected capacity change from 0 to 4096 [ 142.730712][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 142.773395][ T5320] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 142.885809][ T5320] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 143.174584][ T5213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.433124][ T5213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.498331][ T5213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.597962][ T5213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.654907][ T5335] x_tables: duplicate underflow at hook 2 [ 143.669078][ T26] audit: type=1800 audit(1768702185.406:13): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 143.748968][ T5341] loop1: detected capacity change from 0 to 512 [ 143.901414][ T5341] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.002199][ T5341] EXT4-fs (loop1): shut down requested (0) [ 144.186957][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.229524][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.247928][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.361191][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.610504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.639218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.670882][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.677993][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.148881][ T5370] loop1: detected capacity change from 0 to 2048 [ 145.170320][ T5370] UDF-fs: bad mount option "uDI¬Ë-™ãÀlongad" or missing value [ 145.195054][ T4550] Bluetooth: hci2: command 0x0419 tx timeout [ 145.437365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.446344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.454980][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.462115][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.472947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.488906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.643132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.349307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.416216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.461326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.510600][ T5386] loop3: detected capacity change from 0 to 128 [ 146.517610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.536096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.589106][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.600798][ T5386] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: none. [ 146.647889][ T5386] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.705746][ T5389] loop4: detected capacity change from 0 to 512 [ 146.733483][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.798846][ T5213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.837187][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.002526][ T5389] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 147.045853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.125307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.760101][ T4550] Bluetooth: hci2: command 0x0407 tx timeout [ 147.881714][ T5389] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.346: bad orphan inode 15 [ 148.490894][ T5389] ext4_test_bit(bit=14, block=18) = 1 [ 148.496305][ T5389] is_bad_inode(inode)=0 [ 148.596152][ T5389] NEXT_ORPHAN(inode)=1023 [ 148.660672][ T5389] max_ino=32 [ 148.700474][ T5389] i_nlink=0 [ 148.704223][ T5389] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.869960][ T5389] ext2 filesystem being mounted at /78/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 148.958094][ T5406] loop3: detected capacity change from 0 to 40427 [ 149.059589][ T5413] loop1: detected capacity change from 0 to 128 [ 149.082294][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.093473][ T5350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 149.160296][ T5406] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.168149][ T5406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.187827][ T5406] F2FS-fs (loop3): invalid crc value [ 149.533623][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.570106][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.703567][ T5406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.783187][ T5406] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.790324][ T5406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.007165][ T5425] x_tables: duplicate underflow at hook 2 [ 150.016173][ T26] audit: type=1800 audit(1768702191.756:14): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.348" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 150.096159][ T5413] attempt to access beyond end of device [ 150.096159][ T5413] loop1: rw=2049, want=214, limit=128 [ 150.397097][ T5440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.484396][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.515472][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.720847][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.166679][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.182618][ T5213] device veth0_vlan entered promiscuous mode [ 151.191980][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.203477][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.228686][ T5213] device veth1_vlan entered promiscuous mode [ 151.777542][ T5213] device veth0_macvtap entered promiscuous mode [ 151.889648][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.892981][ T5460] loop4: detected capacity change from 0 to 164 [ 151.910160][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.942335][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.000632][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.025966][ T5213] device veth1_macvtap entered promiscuous mode [ 152.080506][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.094614][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.125123][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.166539][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.225584][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.300528][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.344039][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.360671][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.367492][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.374170][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.386971][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.405624][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.458417][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.533995][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.565278][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.827859][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.906117][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.922949][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.943663][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.943696][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.010444][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.029719][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.047645][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.070415][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.092420][ T13] usb 1-1: config 0 descriptor?? [ 153.098218][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.119184][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.141462][ T13] hub 1-1:0.0: USB hub found [ 153.150628][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.186665][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.240524][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.304450][ T5213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.313780][ T5213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.323905][ T5213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.332908][ T5213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.343680][ T5469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.362'. [ 153.353849][ T13] hub 1-1:0.0: 14 ports detected [ 153.370557][ T13] hub 1-1:0.0: insufficient power available to use all downstream ports [ 153.493533][ T5476] loop3: detected capacity change from 0 to 40427 [ 153.503484][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.517522][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.555808][ T5476] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 153.563645][ T5476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.572337][ T4551] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.580710][ T13] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 153.587474][ T13] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 153.597016][ T5476] F2FS-fs (loop3): invalid crc value [ 153.644215][ T5476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.686929][ T5476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.694700][ T5476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.720838][ T13] usb 1-1: USB disconnect, device number 4 [ 153.820539][ T4551] usb 2-1: Using ep0 maxpacket: 32 [ 153.874123][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.901736][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.941762][ T4551] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.966274][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.010773][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 154.055250][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.075799][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.106861][ T4551] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.110816][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.194728][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.321888][ T4551] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 154.381301][ T4551] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 154.429809][ T4551] usb 2-1: Product: syz [ 154.434561][ T4551] usb 2-1: Manufacturer: syz [ 154.439179][ T4551] usb 2-1: SerialNumber: syz [ 154.477445][ T4551] usb 2-1: config 0 descriptor?? [ 154.518485][ T5502] x_tables: duplicate underflow at hook 2 [ 154.532760][ T26] audit: type=1800 audit(1768702196.276:15): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.364" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 154.811395][ T13] usb 2-1: USB disconnect, device number 4 [ 155.810711][ T4551] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 155.942159][ T5507] chnl_net:caif_netlink_parms(): no params data found [ 157.090586][ T4551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 157.108302][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 157.130180][ T5535] loop5: detected capacity change from 0 to 128 [ 157.144074][ T5529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.372'. [ 157.154056][ T4551] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 157.218622][ T4551] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 157.310734][ T4551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.381913][ T4551] usb 1-1: config 0 descriptor?? [ 157.400701][ T5517] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.464213][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.472043][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.632016][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.636353][ T5517] udc-core: couldn't find an available UDC or it's busy [ 157.680671][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.725844][ T5517] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.739242][ T5507] device bridge_slave_0 entered promiscuous mode [ 157.783667][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.828211][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.847715][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 157.862980][ T5507] device bridge_slave_1 entered promiscuous mode [ 157.990764][ T4551] usbhid 1-1:0.0: can't add hid device: -71 [ 158.003536][ T4551] usbhid: probe of 1-1:0.0 failed with error -71 [ 158.058464][ T4551] usb 1-1: USB disconnect, device number 5 [ 158.320244][ T5548] loop1: detected capacity change from 0 to 1024 [ 158.476008][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.485309][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.542805][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.544892][ T13] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.572746][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.581901][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.583500][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.588647][ T5535] FAT-fs (loop5): Directory bread(block 3163) failed [ 158.701801][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.866037][ T5507] team0: Port device team_slave_0 added [ 158.907526][ T4327] hfsplus: b-tree write err: -5, ino 4 [ 158.910680][ T4551] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.935065][ T5507] team0: Port device team_slave_1 added [ 159.120814][ T5556] fido_id[5556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.134717][ T4550] Bluetooth: hci1: command 0x041b tx timeout [ 159.380947][ T4551] usb 1-1: device not accepting address 6, error -71 [ 159.843881][ T5563] loop0: detected capacity change from 0 to 2048 [ 159.876984][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.889146][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.077791][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.092036][ T5563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.172683][ T5570] loop5: detected capacity change from 0 to 40427 [ 160.181983][ T5572] loop1: detected capacity change from 0 to 16 [ 160.202165][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.217500][ T5570] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 160.225338][ T5570] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 160.235582][ T5570] F2FS-fs (loop5): invalid crc value [ 160.274389][ T5572] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.320514][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.369811][ T5570] F2FS-fs (loop5): Found nat_bits in checkpoint [ 160.427453][ T5570] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 160.434685][ T5570] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 160.469583][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.498985][ T5563] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.663642][ T5563] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 160.697573][ T5580] x_tables: duplicate underflow at hook 2 [ 160.710788][ T26] audit: type=1800 audit(1768702202.446:16): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.380" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 160.743932][ T5507] device hsr_slave_0 entered promiscuous mode [ 160.971255][ T5507] device hsr_slave_1 entered promiscuous mode [ 160.983199][ T5563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 160.983199][ T5563] [ 161.142181][ T5563] EXT4-fs (loop0): Total free blocks count 0 [ 161.156687][ T5563] EXT4-fs (loop0): Free/Dirty block details [ 161.192863][ T5563] EXT4-fs (loop0): free_blocks=2415919504 [ 161.210528][ T4548] Bluetooth: hci1: command 0x040f tx timeout [ 161.216758][ T5563] EXT4-fs (loop0): dirty_blocks=16 [ 161.235780][ T5563] EXT4-fs (loop0): Block reservation details [ 161.254840][ T5563] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 161.316625][ T5507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.345123][ T5507] Cannot create hsr debugfs directory [ 161.714659][ T5599] loop3: detected capacity change from 0 to 512 [ 161.716693][ T5600] loop0: detected capacity change from 0 to 256 [ 161.780780][ T5597] KVM: debugfs: duplicate directory 5597-4 [ 161.846663][ T5599] EXT4-fs (loop3): Ignoring removed nobh option [ 161.891772][ T5599] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.982855][ T26] audit: type=1800 audit(1768702203.726:17): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 162.004744][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.048485][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.137689][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.144066][ T5507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.187818][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.200772][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.243879][ T5599] EXT4-fs (loop3): 1 truncate cleaned up [ 162.245129][ T5507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.257571][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.283994][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.302666][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 162.339193][ T5618] loop5: detected capacity change from 0 to 128 [ 162.347731][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.418288][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.429602][ T5618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.440828][ T5507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.446373][ T5618] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.452828][ T5614] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.480854][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.520272][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.528406][ T5507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.533078][ T5600] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.667143][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.686544][ T5623] loop5: detected capacity change from 0 to 1024 [ 163.784286][ T4550] Bluetooth: hci1: command 0x0419 tx timeout [ 163.913105][ T5634] loop1: detected capacity change from 0 to 164 [ 163.967880][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.095776][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.118079][ T4184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 164.265006][ T4184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 164.491439][ T4184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 164.991041][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.081992][ T5640] loop3: detected capacity change from 0 to 4096 [ 165.205468][ T5640] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 165.229621][ T5507] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.261014][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.269406][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.312995][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.377176][ T5657] loop5: detected capacity change from 0 to 128 [ 165.386951][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.403548][ T5640] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 165.427095][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.434228][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.456355][ T5657] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.480712][ T5657] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.490322][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.523033][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.531605][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.538697][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.547081][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.722331][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.761015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.850581][ T4248] Bluetooth: hci1: command 0x0405 tx timeout [ 166.196180][ T5667] loop0: detected capacity change from 0 to 40427 [ 166.261089][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.332572][ T5667] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 166.340335][ T5667] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.356406][ T5667] F2FS-fs (loop0): invalid crc value [ 166.358083][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.425894][ T5667] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.429794][ T5674] loop5: detected capacity change from 0 to 512 [ 166.467637][ T5507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.504851][ T5667] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 166.511966][ T5667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.540405][ T5507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.645008][ T5674] EXT4-fs (loop5): Ignoring removed nobh option [ 166.663399][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.678580][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.690578][ T5674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.731230][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.743044][ T5674] EXT4-fs (loop5): 1 truncate cleaned up [ 166.748714][ T5674] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 166.837111][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.881889][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.927490][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.035297][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.094807][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.316085][ T5691] loop3: detected capacity change from 0 to 256 [ 167.401195][ T5691] exfat: Deprecated parameter 'utf8' [ 167.406552][ T5691] exfat: Deprecated parameter 'namecase' [ 167.418786][ T5691] exfat: Deprecated parameter 'utf8' [ 167.476045][ T5691] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 167.496269][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.514319][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.549670][ T5691] attempt to access beyond end of device [ 167.549670][ T5691] loop3: rw=524288, want=34359738496, limit=256 [ 167.577551][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.590653][ T5691] attempt to access beyond end of device [ 167.590653][ T5691] loop3: rw=0, want=34359738496, limit=256 [ 167.622385][ T26] audit: type=1800 audit(1768702209.366:18): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.407" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 167.656646][ T5691] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 167.690735][ T4548] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.716121][ T26] audit: type=1804 audit(1768702209.456:19): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.407" name="/newroot/86/file0/file1" dev="loop3" ino=1048598 res=1 errno=0 [ 167.716166][ T5691] attempt to access beyond end of device [ 167.716166][ T5691] loop3: rw=0, want=34359738496, limit=256 [ 167.776209][ T5691] attempt to access beyond end of device [ 167.776209][ T5691] loop3: rw=0, want=34359738496, limit=256 [ 167.794109][ T26] audit: type=1800 audit(1768702209.496:20): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.407" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 167.823888][ T5702] attempt to access beyond end of device [ 167.823888][ T5702] loop3: rw=0, want=276758648, limit=256 [ 167.963504][ T4548] usb 6-1: Using ep0 maxpacket: 16 [ 168.081277][ T4548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.161706][ T4548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.334151][ T4548] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.488888][ T4548] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.565906][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 168.598064][ T4548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.642596][ T4548] usb 6-1: config 0 descriptor?? [ 168.730297][ T5727] loop3: detected capacity change from 0 to 128 [ 168.805780][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.814115][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.814229][ T5727] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.861889][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.890283][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.913710][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.933566][ T5686] device bridge_slave_0 entered promiscuous mode [ 169.011516][ T5507] device veth0_vlan entered promiscuous mode [ 169.046733][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.059709][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.081606][ T5686] device bridge_slave_1 entered promiscuous mode [ 169.167065][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.232306][ T4548] usbhid 6-1:0.0: can't add hid device: -71 [ 169.238315][ T4548] usbhid: probe of 6-1:0.0 failed with error -71 [ 169.251669][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.290802][ T4548] usb 6-1: USB disconnect, device number 2 [ 169.306248][ T5507] device veth1_vlan entered promiscuous mode [ 169.324159][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 169.353050][ T5730] loop0: detected capacity change from 0 to 32768 [ 169.388616][ T5730] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.410 (5730) [ 169.460106][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.471643][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.497934][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.548450][ T5730] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 169.575212][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.575730][ T5730] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 169.630549][ T5730] BTRFS info (device loop0): use zstd compression, level 3 [ 169.649545][ T5730] BTRFS info (device loop0): using free space tree [ 169.670183][ T5730] BTRFS info (device loop0): has skinny extents [ 169.837896][ T5743] loop5: detected capacity change from 0 to 512 [ 169.850775][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.876305][ T5743] EXT4-fs (loop5): Ignoring removed nobh option [ 169.900265][ T5743] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.932277][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.960034][ T5743] EXT4-fs (loop5): 1 truncate cleaned up [ 169.993340][ T5743] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 170.008531][ T5507] device veth0_macvtap entered promiscuous mode [ 170.039541][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.063335][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.076666][ T5507] device veth1_macvtap entered promiscuous mode [ 170.151826][ T5686] team0: Port device team_slave_0 added [ 170.525766][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.572037][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.586150][ T5730] BTRFS info (device loop0): enabling ssd optimizations [ 170.701488][ T5686] team0: Port device team_slave_1 added [ 170.830198][ T9] device hsr_slave_0 left promiscuous mode [ 170.842387][ T9] device hsr_slave_1 left promiscuous mode [ 170.908963][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.931223][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.061661][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.220625][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.254456][ T9] device bridge_slave_1 left promiscuous mode [ 171.290726][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.325533][ T9] device bridge_slave_0 left promiscuous mode [ 171.354646][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.374968][ T5787] loop3: detected capacity change from 0 to 4096 [ 171.380684][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 171.438288][ T5787] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 171.528587][ T9] device veth1_macvtap left promiscuous mode [ 171.546149][ T9] device veth0_macvtap left promiscuous mode [ 171.570271][ T9] device veth1_vlan left promiscuous mode [ 171.599859][ T9] device veth0_vlan left promiscuous mode [ 171.746030][ T5787] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 172.278897][ T5800] loop0: detected capacity change from 0 to 512 [ 172.346404][ T5800] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.414045][ T5800] EXT4-fs (loop0): 1 truncate cleaned up [ 172.457501][ T5800] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 172.694852][ T5807] loop0: detected capacity change from 0 to 512 [ 172.737974][ T9] team0 (unregistering): Port device team_slave_1 removed [ 172.764903][ T5807] EXT4-fs (loop0): Ignoring removed nobh option [ 172.776800][ T5807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.789461][ T9] team0 (unregistering): Port device team_slave_0 removed [ 172.791018][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.828048][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.852366][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.863591][ T5807] EXT4-fs (loop0): 1 truncate cleaned up [ 172.869364][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 173.018519][ T9] bond0 (unregistering): Released all slaves [ 173.050464][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 173.453866][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.460942][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 173.466955][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.466981][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.472041][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.515303][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.525668][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.539603][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.558754][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.584069][ T23] usb 6-1: config 0 descriptor?? [ 173.960279][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.979668][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.075394][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.108556][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.119995][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.139117][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.149351][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.167585][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.198324][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.212436][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.219986][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.255224][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.313313][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.320537][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 174.328137][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 174.329926][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.340808][ T23] usb 6-1: USB disconnect, device number 3 [ 174.372273][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.560932][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.580463][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.600705][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.620970][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.645463][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.656257][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.670459][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.683574][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.694877][ T5813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 174.770441][ T5686] device hsr_slave_0 entered promiscuous mode [ 174.792546][ T5686] device hsr_slave_1 entered promiscuous mode [ 174.854858][ T5686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.882600][ T5686] Cannot create hsr debugfs directory [ 174.899166][ T5836] loop3: detected capacity change from 0 to 512 [ 174.905800][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.914646][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.928718][ T5507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.937809][ T5507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.990194][ T5836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.003750][ T5507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.012665][ T5507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.074366][ T5836] EXT4-fs (loop3): 1 truncate cleaned up [ 175.080046][ T5836] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 175.164210][ T26] audit: type=1800 audit(1768702216.906:21): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 175.347783][ T1324] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 175.502430][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.539481][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.677702][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.694278][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 175.717550][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 175.745943][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.771166][ T5381] Bluetooth: hci0: command 0x0419 tx timeout [ 175.790621][ T1324] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.819341][ T1324] usb 1-1: config 179 has no interface number 0 [ 175.832598][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.876299][ T1324] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 175.892116][ T5856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.437'. [ 177.239282][ T1324] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 177.259949][ T1324] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.299091][ T1324] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.357984][ T1324] usb 1-1: config 179 interface 65 has no altsetting 0 [ 177.378105][ T1324] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 177.414229][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.461226][ T5840] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.468919][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.495890][ T1324] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 177.530608][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.564004][ T5686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.603838][ T5686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 177.677076][ T5686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.698129][ T1324] usb 1-1: USB disconnect, device number 8 [ 177.722740][ T5686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.740149][ T1324] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 177.780853][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 177.900562][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.980489][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.024967][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.128180][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.168106][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.202163][ T23] usb 6-1: config 0 descriptor?? [ 178.459846][ T5900] loop0: detected capacity change from 0 to 512 [ 178.781155][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 178.788555][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 178.871955][ T23] usb 6-1: USB disconnect, device number 4 [ 179.577059][ T26] audit: type=1326 audit(1768702221.316:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 179.627939][ T5900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.650674][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.654837][ T5900] EXT4-fs (loop0): 1 truncate cleaned up [ 179.765200][ T26] audit: type=1326 audit(1768702221.386:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 179.789152][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 179.807906][ T26] audit: type=1326 audit(1768702221.386:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 180.937800][ T5921] loop3: detected capacity change from 0 to 512 [ 180.964464][ T26] audit: type=1326 audit(1768702221.386:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 181.014463][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.079664][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.105518][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.126291][ T26] audit: type=1326 audit(1768702221.386:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 181.173786][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.237784][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.347420][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.354566][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.571091][ T26] audit: type=1326 audit(1768702221.386:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.411092][ T26] audit: type=1326 audit(1768702221.386:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.434418][ T26] audit: type=1326 audit(1768702221.386:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.482978][ T26] audit: type=1326 audit(1768702221.386:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.519029][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.628033][ T5941] loop0: detected capacity change from 0 to 40427 [ 182.642365][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.677908][ T26] audit: type=1326 audit(1768702221.386:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.691136][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.714473][ T26] audit: type=1326 audit(1768702221.386:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.749725][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.756863][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.779688][ T5941] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.787487][ T5941] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.810065][ T5941] F2FS-fs (loop0): invalid crc value [ 182.862300][ T26] audit: type=1326 audit(1768702221.406:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.881893][ T5941] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.921694][ T26] audit: type=1326 audit(1768702221.406:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5310cb9 code=0x7ffc0000 [ 182.946986][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.974282][ T5941] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.981461][ T5941] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.996060][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.011201][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.035939][ T5954] loop6: detected capacity change from 0 to 256 [ 183.046673][ T5941] x_tables: duplicate underflow at hook 2 [ 183.061876][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.090967][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.100581][ T4269] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 183.110756][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.134221][ T5954] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.144973][ T5954] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 183.167261][ T5954] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 183.191914][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.334928][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.343519][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.452041][ T4269] usb 4-1: Using ep0 maxpacket: 16 [ 183.571254][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.624509][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.722359][ T4269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.942553][ T4269] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.010563][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.032053][ T5686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.060342][ T4269] usb 4-1: config 0 descriptor?? [ 184.162564][ T5686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.192030][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.240743][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.600632][ T4269] usbhid 4-1:0.0: can't add hid device: -71 [ 184.606822][ T4269] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.862889][ T4269] usb 4-1: USB disconnect, device number 4 [ 185.552145][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.559634][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.589503][ T5978] loop5: detected capacity change from 0 to 512 [ 185.656457][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.673520][ T5982] loop6: detected capacity change from 0 to 128 [ 185.707678][ T5981] loop3: detected capacity change from 0 to 512 [ 186.271122][ T5982] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.277923][ T5982] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.360913][ T5997] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.368789][ T5982] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.404260][ T5982] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.411863][ T5978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.423980][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.448638][ T5982] FAT-fs (loop6): Directory bread(block 3163) failed [ 186.465647][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.484812][ T5978] EXT4-fs (loop5): 1 truncate cleaned up [ 186.494285][ T5981] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.501410][ T5978] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 186.555570][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 186.555584][ T26] audit: type=1800 audit(1768702228.296:53): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.460" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 186.620667][ T5981] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.461: bad orphan inode 13 [ 186.638761][ T5981] ext4_test_bit(bit=12, block=18) = 1 [ 186.650630][ T5981] is_bad_inode(inode)=0 [ 186.654822][ T5981] NEXT_ORPHAN(inode)=2130706432 [ 186.666241][ T5981] max_ino=32 [ 186.669676][ T5981] i_nlink=1 [ 186.672199][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.677895][ T5981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.793971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.826851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.858588][ T26] audit: type=1326 audit(1768702228.596:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b09eccb9 code=0x7ffc0000 [ 187.762111][ T26] audit: type=1326 audit(1768702228.776:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3b09ad58e code=0x7ffc0000 [ 187.784201][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.813873][ T6017] loop0: detected capacity change from 0 to 128 [ 187.850502][ T26] audit: type=1326 audit(1768702228.776:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3b09edfd7 code=0x7ffc0000 [ 187.873637][ T26] audit: type=1326 audit(1768702228.776:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3b09eccb9 code=0x7ffc0000 [ 187.899319][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.920343][ T26] audit: type=1326 audit(1768702228.776:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3b09edfd7 code=0x7ffc0000 [ 187.935360][ T6017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 187.956475][ T26] audit: type=1326 audit(1768702228.776:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3b09ad58e code=0x7ffc0000 [ 187.982767][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.011571][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.048008][ T5686] device veth0_vlan entered promiscuous mode [ 188.066859][ T6017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.086592][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.100741][ T26] audit: type=1326 audit(1768702228.776:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b09eccb9 code=0x7ffc0000 [ 188.119160][ T6017] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 188.176002][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 188.185334][ T5686] device veth1_vlan entered promiscuous mode [ 188.215748][ T6017] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.216388][ T26] audit: type=1326 audit(1768702228.776:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b09eccb9 code=0x7ffc0000 [ 188.250791][ T26] audit: type=1326 audit(1768702228.776:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe3b09eccb9 code=0x7ffc0000 [ 188.292763][ T5686] device veth0_macvtap entered promiscuous mode [ 188.302925][ T5686] device veth1_macvtap entered promiscuous mode [ 188.320783][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.331281][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.384257][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.394951][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.404846][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.417465][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.440540][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.674602][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.685911][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.237601][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.266931][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.313287][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.326862][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.373987][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.427022][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.457308][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.484362][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.502855][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.516869][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.203386][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.244714][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.378760][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.419543][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.439717][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.467547][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.499810][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.562703][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.576901][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.648416][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.727845][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.776052][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.832322][ T5686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.855835][ T5686] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.415353][ T5686] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.424796][ T5686] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.873216][ T6057] loop0: detected capacity change from 0 to 1024 [ 192.295360][ T6057] EXT4-fs (loop0): Ignoring removed nobh option [ 192.408606][ T6057] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.472: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 192.535933][ T6057] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.472: couldn't read orphan inode 11 (err -117) [ 192.551608][ T6057] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 193.526780][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.550562][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.582708][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.747763][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.796006][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.839399][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.980585][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.403'. [ 194.106519][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.118374][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.134086][ T6094] loop6: detected capacity change from 0 to 256 [ 195.670993][ T6103] loop0: detected capacity change from 0 to 512 [ 195.729783][ T6094] FAT-fs (loop6): Directory bread(block 64) failed [ 195.740939][ T6094] FAT-fs (loop6): Directory bread(block 65) failed [ 195.755619][ T6103] EXT4-fs (loop0): Ignoring removed nobh option [ 195.780958][ T6103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.791082][ T6094] FAT-fs (loop6): Directory bread(block 66) failed [ 195.798033][ T6094] FAT-fs (loop6): Directory bread(block 67) failed [ 195.844025][ T6094] FAT-fs (loop6): Directory bread(block 68) failed [ 195.853406][ T6103] EXT4-fs (loop0): 1 truncate cleaned up [ 195.860932][ T6094] FAT-fs (loop6): Directory bread(block 69) failed [ 195.868029][ T6094] FAT-fs (loop6): Directory bread(block 70) failed [ 195.887422][ T6103] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 195.991423][ T6094] FAT-fs (loop6): Directory bread(block 71) failed [ 195.998060][ T6094] FAT-fs (loop6): Directory bread(block 72) failed [ 196.020546][ T6094] FAT-fs (loop6): Directory bread(block 73) failed [ 196.313351][ T6114] loop7: detected capacity change from 0 to 4096 [ 196.609109][ T6125] ntfs3: loop7: ino=21, "file1" fallocate(0x20) is not supported [ 197.077625][ T5686] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 197.134747][ T6129] loop6: detected capacity change from 0 to 128 [ 197.150577][ T5686] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 197.272834][ T9] device hsr_slave_0 left promiscuous mode [ 197.752699][ T9] device hsr_slave_1 left promiscuous mode [ 199.388012][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.448827][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.528162][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.558052][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.574096][ T6129] FAT-fs (loop6): Directory bread(block 3163) failed [ 199.599989][ T9] device bridge_slave_1 left promiscuous mode [ 199.610086][ T6129] FAT-fs (loop6): Directory bread(block 3163) failed [ 199.619427][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.639261][ T9] device bridge_slave_0 left promiscuous mode [ 199.646880][ T6129] FAT-fs (loop6): Directory bread(block 3163) failed [ 199.661762][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.672366][ T6129] FAT-fs (loop6): Directory bread(block 3163) failed [ 199.693414][ T6129] FAT-fs (loop6): Directory bread(block 3163) failed [ 199.708077][ T9] device veth1_macvtap left promiscuous mode [ 199.727555][ T9] device veth0_macvtap left promiscuous mode [ 199.749247][ T9] device veth1_vlan left promiscuous mode [ 199.774367][ T9] device veth0_vlan left promiscuous mode [ 199.941892][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 199.941906][ T26] audit: type=1326 audit(1768702241.686:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 200.043950][ T26] audit: type=1326 audit(1768702241.716:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 200.154897][ T26] audit: type=1326 audit(1768702241.736:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 200.192109][ T26] audit: type=1326 audit(1768702241.736:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 200.214422][ T26] audit: type=1326 audit(1768702241.736:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 200.311621][ T6151] loop0: detected capacity change from 0 to 256 [ 200.512044][ T6151] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 200.978716][ T26] audit: type=1326 audit(1768702241.736:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 201.154183][ T26] audit: type=1326 audit(1768702241.736:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 201.290377][ C0] sched: RT throttling activated [ 201.307604][ T26] audit: type=1326 audit(1768702241.736:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 201.443874][ T26] audit: type=1326 audit(1768702241.736:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 201.606672][ T26] audit: type=1326 audit(1768702241.736:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 201.741956][ T6155] loop5: detected capacity change from 0 to 512 [ 201.919046][ T9] team0 (unregistering): Port device team_slave_1 removed [ 202.009626][ T9] team0 (unregistering): Port device team_slave_0 removed [ 202.038041][ T6155] loop5: detected capacity change from 0 to 1024 [ 202.045680][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.171279][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.919235][ T9] bond0 (unregistering): Released all slaves [ 203.607421][ T6137] device bridge1 entered promiscuous mode [ 208.413223][ T6221] loop6: detected capacity change from 0 to 512 [ 208.464801][ T6221] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 208.527419][ T6223] input: syz0 as /devices/virtual/input/input8 [ 208.529083][ T6221] EXT4-fs (loop6): 1 truncate cleaned up [ 208.542093][ T6221] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 210.696106][ T6256] loop0: detected capacity change from 0 to 512 [ 210.741113][ T6256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.796674][ T6256] EXT4-fs (loop0): 1 truncate cleaned up [ 210.860697][ T6256] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 211.002393][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 211.002407][ T26] audit: type=1800 audit(1768702252.746:91): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.515" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 211.295134][ T6271] loop0: detected capacity change from 0 to 164 [ 211.680601][ T6269] capability: warning: `syz.6.512' uses deprecated v2 capabilities in a way that may be insecure [ 211.733754][ T4186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 211.807346][ T6276] 9pnet: p9_fd_create_tcp (6276): problem connecting socket to 127.0.0.1 [ 211.879074][ T4186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 218.262665][ T6328] loop3: detected capacity change from 0 to 4096 [ 218.403898][ T6328] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 218.498771][ T6328] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 218.564227][ T6340] loop6: detected capacity change from 0 to 164 [ 219.037779][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.847672][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 220.172432][ T6361] xt_TCPMSS: Only works on TCP SYN packets [ 221.045372][ T6365] loop0: detected capacity change from 0 to 128 [ 221.200542][ T6365] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 221.358226][ T6365] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.454816][ T6365] ext2 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.666287][ T6365] EXT4-fs error (device loop0): make_indexed_dir:2333: inode #2: block 18: comm syz.0.534: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 221.945727][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.7.538'. [ 221.970717][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.977985][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.119847][ T6406] loop6: detected capacity change from 0 to 164 [ 223.256121][ T6404] loop7: detected capacity change from 0 to 4096 [ 223.410559][ T6404] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 223.507034][ T6404] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 223.511727][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 223.558399][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 223.780566][ T6413] loop0: detected capacity change from 0 to 4096 [ 224.095031][ T6421] hub 8-0:1.0: USB hub found [ 224.103996][ T6421] hub 8-0:1.0: 1 port detected [ 224.170660][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.545'. [ 225.655691][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 225.680533][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 228.836782][ T6438] loop6: detected capacity change from 0 to 4096 [ 229.019069][ T6438] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 229.182425][ T6438] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 229.644997][ T6458] loop0: detected capacity change from 0 to 1024 [ 229.750541][ T6458] EXT4-fs (loop0): Ignoring removed bh option [ 229.789857][ T6458] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 229.829701][ T6458] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 230.043772][ T26] audit: type=1804 audit(1768702271.786:92): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.554" name="/newroot/125/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 230.853838][ T6489] loop0: detected capacity change from 0 to 256 [ 230.870761][ T6489] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.881602][ T6489] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 230.892766][ T6489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 232.800529][ T4269] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 233.080549][ T4269] usb 1-1: Using ep0 maxpacket: 32 [ 233.200745][ T4269] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.211506][ T4269] usb 1-1: config 0 has no interface number 0 [ 233.217615][ T4269] usb 1-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 233.259053][ T4269] usb 1-1: config 0 interface 2 has no altsetting 0 [ 233.455781][ T4269] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 233.495002][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.513418][ T4269] usb 1-1: Product: syz [ 233.517608][ T4269] usb 1-1: Manufacturer: syz [ 233.584305][ T4269] usb 1-1: SerialNumber: syz [ 233.610946][ T4269] usb 1-1: config 0 descriptor?? [ 235.900662][ T4269] usb 1-1: invalid MIDI in EP 0 [ 236.050912][ T4269] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 236.110293][ T4269] usb 1-1: USB disconnect, device number 9 [ 236.401473][ T4900] udevd[4900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.090065][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 237.821224][ T6085] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.988280][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.995700][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.023642][ T6538] device bridge_slave_0 entered promiscuous mode [ 238.107166][ T6085] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.241501][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.258889][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.297455][ T6560] loop0: detected capacity change from 0 to 256 [ 238.311522][ T6538] device bridge_slave_1 entered promiscuous mode [ 238.362739][ T6085] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.570546][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 238.609282][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.858990][ T6085] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.970855][ T6560] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.990427][ T6560] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 239.035067][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.093526][ T6560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 239.787824][ T6538] team0: Port device team_slave_0 added [ 239.928128][ T6538] team0: Port device team_slave_1 added [ 240.549099][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.561909][ T6589] loop0: detected capacity change from 0 to 512 [ 240.568465][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.600473][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.633087][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.640051][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.674067][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.686086][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 240.767518][ T6589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.886425][ T6538] device hsr_slave_0 entered promiscuous mode [ 240.897717][ T6538] device hsr_slave_1 entered promiscuous mode [ 241.013032][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.040842][ T6538] Cannot create hsr debugfs directory [ 242.687533][ T6538] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.709807][ T6538] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.732506][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 242.962163][ T6538] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.226691][ T6538] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.797098][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.836549][ T4269] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.865033][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.890113][ T6152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.899876][ T6152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.959649][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.988712][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.009967][ T3039] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.017095][ T3039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.066254][ T4269] usb 1-1: device descriptor read/64, error -71 [ 244.086927][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.111468][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.152018][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.166870][ T3039] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.174005][ T3039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.233234][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.268281][ T6085] device hsr_slave_0 left promiscuous mode [ 244.283283][ T6085] device hsr_slave_1 left promiscuous mode [ 244.307642][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.333939][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.339825][ T6646] loop6: detected capacity change from 0 to 4096 [ 244.341505][ T4269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 244.378740][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.388383][ T6646] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 244.419054][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.439890][ T6085] device bridge_slave_1 left promiscuous mode [ 244.462110][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.500916][ T6085] device bridge_slave_0 left promiscuous mode [ 244.512745][ T6646] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 244.518641][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.580682][ T4269] usb 1-1: device descriptor read/64, error -71 [ 244.591680][ T6085] device veth1_macvtap left promiscuous mode [ 244.599791][ T6085] device veth0_macvtap left promiscuous mode [ 244.729459][ T6085] device veth1_vlan left promiscuous mode [ 244.755261][ T4269] usb usb1-port1: attempt power cycle [ 244.764343][ T6085] device veth0_vlan left promiscuous mode [ 244.810542][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 244.826913][ T6655] loop7: detected capacity change from 0 to 512 [ 244.855826][ T6657] loop3: detected capacity change from 0 to 512 [ 244.875669][ T6655] EXT4-fs (loop7): Ignoring removed nobh option [ 244.909520][ T6655] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 244.941645][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.964123][ T6655] EXT4-fs (loop7): 1 truncate cleaned up [ 244.969804][ T6655] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 245.312860][ T4269] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.410246][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 245.418709][ T4269] usb 1-1: device descriptor read/8, error -71 [ 245.506984][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 245.572010][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.620898][ T4315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 245.720816][ T4269] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 245.854188][ T4269] usb 1-1: device descriptor read/8, error -71 [ 245.968862][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.993334][ T4269] usb usb1-port1: unable to enumerate USB device [ 246.256273][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.275619][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.299453][ T4315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.325551][ T4315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.342530][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.378640][ T4315] usb 4-1: config 0 descriptor?? [ 247.104583][ T4315] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 247.805973][ T4315] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 248.016112][ T4315] usb 4-1: USB disconnect, device number 5 [ 248.284402][ T6684] fido_id[6684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 248.768410][ T6692] process 'syz.7.589' launched '/dev/fd/8' with NULL argv: empty string added [ 249.401077][ T6695] loop7: detected capacity change from 0 to 128 [ 249.675735][ T6695] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.710739][ T6695] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.744719][ T6085] bond0 (unregistering): Released all slaves [ 249.945158][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.955084][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.979376][ T6701] loop3: detected capacity change from 0 to 512 [ 249.982570][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.022218][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.051317][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.059876][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.082082][ T6701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.091393][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.105503][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.121333][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.138298][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.201725][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.386848][ T6711] loop7: detected capacity change from 0 to 256 [ 250.397909][ T6711] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.408677][ T6711] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 250.503314][ T6711] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 250.534774][ T26] audit: type=1326 audit(1768702292.276:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 250.641055][ T26] audit: type=1326 audit(1768702292.306:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 250.857539][ T26] audit: type=1326 audit(1768702292.306:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 250.880051][ T26] audit: type=1326 audit(1768702292.306:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e4479cb9 code=0x7ffc0000 [ 251.707699][ T4241] Bluetooth: hci5: command 0x0405 tx timeout [ 251.727398][ T6726] futex_wake_op: syz.3.598 tries to shift op by -1; fix this program [ 251.745421][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.755370][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.795609][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.010526][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.269987][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.294912][ T23] usb 7-1: device descriptor read/64, error -71 [ 252.323486][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.491639][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.514594][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.555940][ T6538] device veth0_vlan entered promiscuous mode [ 252.568336][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.587295][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.595115][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 252.991459][ T6538] device veth1_vlan entered promiscuous mode [ 253.585559][ T23] usb 7-1: device descriptor read/64, error -71 [ 253.684988][ T6538] device veth0_macvtap entered promiscuous mode [ 253.715543][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.725423][ T23] usb usb7-port1: attempt power cycle [ 253.848390][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.881795][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.177064][ T6755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.602'. [ 254.623443][ T6538] device veth1_macvtap entered promiscuous mode [ 254.642243][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.650948][ T4315] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.752166][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.797118][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.834283][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.865132][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.910451][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.930430][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 254.950620][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.995379][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.040778][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.056169][ T4315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.080692][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 255.104991][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.129968][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 255.147789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.162366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.182872][ T4315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.199289][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.227960][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.264155][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.298049][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.329555][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.364353][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.397705][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.414397][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.430826][ T4315] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 255.433783][ T6764] loop6: detected capacity change from 0 to 40427 [ 255.448392][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.465666][ T4315] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 255.474247][ T6538] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.500428][ T4315] usb 1-1: Product: syz [ 255.510624][ T4315] usb 1-1: Manufacturer: syz [ 255.518674][ T6538] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.525603][ T4315] usb 1-1: SerialNumber: syz [ 255.535322][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.541722][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.546751][ T4315] usb 1-1: config 0 descriptor?? [ 255.554829][ T6538] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.565349][ T6538] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.578197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.588327][ T6764] F2FS-fs (loop6): Found nat_bits in checkpoint [ 255.598328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.792807][ T6764] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 255.878204][ T4233] usb 1-1: USB disconnect, device number 14 [ 256.638685][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.741377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.829978][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.845673][ T5022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.884778][ T5022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.928474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.317610][ T6822] netlink: 260 bytes leftover after parsing attributes in process `syz.3.610'. [ 257.334794][ T5507] attempt to access beyond end of device [ 257.334794][ T5507] loop6: rw=2049, want=45104, limit=40427 [ 258.971077][ T1324] Bluetooth: hci5: command 0x0407 tx timeout [ 259.212285][ T4315] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 259.249100][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.311725][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 259.420616][ T4315] usb 8-1: device descriptor read/64, error -71 [ 259.435750][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 259.501749][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.563905][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.577883][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.599760][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 259.660717][ T4269] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 259.720470][ T4315] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 260.322082][ T6859] loop6: detected capacity change from 0 to 164 [ 260.334630][ T6861] netlink: 52 bytes leftover after parsing attributes in process `syz.8.618'. [ 260.370609][ T4269] usb 4-1: Using ep0 maxpacket: 16 [ 260.440677][ T4315] usb 8-1: device descriptor read/64, error -71 [ 260.500810][ T4269] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 260.516824][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.527637][ T4269] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 260.560258][ T4269] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.566154][ T5507] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.570083][ T4315] usb usb8-port1: attempt power cycle [ 260.600560][ T4269] usb 4-1: config 0 has no interface number 0 [ 260.615030][ T4269] usb 4-1: config 0 interface 104 has no altsetting 1 [ 260.632427][ T5820] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 260.811679][ T4269] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 260.870536][ T5820] usb 9-1: Using ep0 maxpacket: 32 [ 260.990943][ T5820] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.063394][ T5820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 261.286896][ T5820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.443140][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.451286][ T4269] usb 4-1: Product: syz [ 261.455455][ T4269] usb 4-1: Manufacturer: syz [ 261.461069][ T5820] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.463121][ T4269] usb 4-1: SerialNumber: syz [ 261.494085][ T4269] usb 4-1: config 0 descriptor?? [ 261.534958][ T4315] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 261.574548][ T4269] asix: probe of 4-1:0.104 failed with error -22 [ 261.733930][ T5820] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 261.753560][ T5820] usb 9-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 261.782461][ T5820] usb 9-1: Product: syz [ 261.802436][ T5820] usb 9-1: Manufacturer: syz [ 261.807067][ T5820] usb 9-1: SerialNumber: syz [ 261.820752][ T4315] usb 8-1: device not accepting address 4, error -71 [ 261.858448][ T5820] usb 9-1: config 0 descriptor?? [ 261.884202][ T4269] usb 4-1: USB disconnect, device number 6 [ 262.116042][ T5820] usb 9-1: USB disconnect, device number 2 [ 262.432735][ T6896] loop0: detected capacity change from 0 to 128 [ 262.857722][ T6896] EXT4-fs (loop0): Test dummy encryption mode enabled [ 262.909132][ T6896] EXT4-fs (loop0): Test dummy encryption mode enabled [ 262.918252][ T6896] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 262.947848][ T6896] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 262.966771][ T6896] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.265323][ T6904] loop6: detected capacity change from 0 to 1024 [ 264.788333][ T6904] EXT4-fs (loop6): Test dummy encryption mode enabled [ 264.796065][ T6904] EXT4-fs (loop6): inline encryption not supported [ 264.845023][ T6926] loop0: detected capacity change from 0 to 164 [ 264.885505][ T6904] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 265.022798][ T6929] loop8: detected capacity change from 0 to 512 [ 265.093555][ T4186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 265.127558][ T4186] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 265.190652][ T4315] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 265.206355][ T6929] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.268521][ T6929] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.584706][ T4315] usb 8-1: device descriptor read/64, error -71 [ 265.795051][ T6942] capability: warning: `syz.8.633' uses 32-bit capabilities (legacy support in use) [ 267.302180][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 267.512407][ T4315] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 267.521140][ T6948] netlink: 52 bytes leftover after parsing attributes in process `syz.6.636'. [ 267.740635][ T4315] usb 8-1: device descriptor read/64, error -71 [ 267.870822][ T4315] usb usb8-port1: attempt power cycle [ 268.153928][ T5820] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 268.438956][ T6967] loop7: detected capacity change from 0 to 128 [ 270.450548][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 270.562170][ T6985] loop8: detected capacity change from 0 to 164 [ 270.582088][ T5820] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 270.589770][ T5820] usb 7-1: can't read configurations, error -71 [ 270.825555][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.049138][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.425581][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.567198][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.625388][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.656569][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.744517][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.789486][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.848624][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.897160][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.936000][ T4269] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.954871][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.986468][ T6538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 272.086093][ T7011] loop6: detected capacity change from 0 to 256 [ 272.165033][ T6538] [ 272.167395][ T6538] ====================================================== [ 272.174404][ T6538] WARNING: possible circular locking dependency detected [ 272.181417][ T6538] syzkaller #0 Not tainted [ 272.185813][ T6538] ------------------------------------------------------ [ 272.192815][ T6538] syz-executor/6538 is trying to acquire lock: [ 272.198953][ T6538] ffff88801ab8f120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x142/0x360 [ 272.209392][ T6538] [ 272.209392][ T6538] but task is already holding lock: [ 272.216740][ T6538] ffffffff8d57a7e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 272.226290][ T6538] [ 272.226290][ T6538] which lock already depends on the new lock. [ 272.226290][ T6538] [ 272.236678][ T6538] [ 272.236678][ T6538] the existing dependency chain (in reverse order) is: [ 272.245672][ T6538] [ 272.245672][ T6538] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 272.253391][ T6538] __mutex_lock_common+0x1e3/0x2400 [ 272.259102][ T6538] mutex_lock_nested+0x17/0x20 [ 272.264376][ T6538] hci_remote_features_evt+0x5f5/0xa40 [ 272.270336][ T6538] hci_event_packet+0x63a/0x1370 [ 272.275779][ T6538] hci_rx_work+0x255/0xa10 [ 272.280731][ T6538] process_one_work+0x85f/0x1010 [ 272.286187][ T6538] worker_thread+0xaa6/0x1290 [ 272.291363][ T6538] kthread+0x436/0x520 [ 272.295932][ T6538] ret_from_fork+0x1f/0x30 [ 272.300937][ T6538] [ 272.300937][ T6538] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 272.308211][ T6538] __mutex_lock_common+0x1e3/0x2400 [ 272.313914][ T6538] mutex_lock_nested+0x17/0x20 [ 272.319180][ T6538] sco_sock_connect+0x18f/0x910 [ 272.324705][ T6538] __sys_connect+0x3cb/0x450 [ 272.329796][ T6538] __x64_sys_connect+0x76/0x80 [ 272.335058][ T6538] do_syscall_64+0x4c/0xa0 [ 272.339982][ T6538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.346381][ T6538] [ 272.346381][ T6538] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 272.355481][ T6538] __lock_acquire+0x2c42/0x7d10 [ 272.360836][ T6538] lock_acquire+0x19e/0x400 [ 272.365838][ T6538] lock_sock_nested+0x44/0x100 [ 272.371101][ T6538] sco_conn_del+0x142/0x360 [ 272.376106][ T6538] hci_conn_hash_flush+0x107/0x220 [ 272.381723][ T6538] hci_dev_do_close+0x991/0x1030 [ 272.387160][ T6538] hci_unregister_dev+0x2d7/0x580 [ 272.392681][ T6538] vhci_release+0x73/0xc0 [ 272.397514][ T6538] __fput+0x234/0x930 [ 272.401998][ T6538] task_work_run+0x125/0x1a0 [ 272.407088][ T6538] do_exit+0x626/0x20c0 [ 272.411754][ T6538] do_group_exit+0x12e/0x300 [ 272.416848][ T6538] __x64_sys_exit_group+0x3b/0x40 [ 272.422375][ T6538] do_syscall_64+0x4c/0xa0 [ 272.427292][ T6538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.433689][ T6538] [ 272.433689][ T6538] other info that might help us debug this: [ 272.433689][ T6538] [ 272.443896][ T6538] Chain exists of: [ 272.443896][ T6538] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 272.443896][ T6538] [ 272.458118][ T6538] Possible unsafe locking scenario: [ 272.458118][ T6538] [ 272.465547][ T6538] CPU0 CPU1 [ 272.470891][ T6538] ---- ---- [ 272.476234][ T6538] lock(hci_cb_list_lock); [ 272.480713][ T6538] lock(&hdev->lock); [ 272.487279][ T6538] lock(hci_cb_list_lock); [ 272.494281][ T6538] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 272.500151][ T6538] [ 272.500151][ T6538] *** DEADLOCK *** [ 272.500151][ T6538] [ 272.508271][ T6538] 3 locks held by syz-executor/6538: [ 272.513537][ T6538] #0: ffff88801ea50ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 272.523261][ T6538] #1: ffff88801ea50078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 272.532721][ T6538] #2: ffffffff8d57a7e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 272.542699][ T6538] [ 272.542699][ T6538] stack backtrace: [ 272.548600][ T6538] CPU: 1 PID: 6538 Comm: syz-executor Not tainted syzkaller #0 [ 272.556120][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.566166][ T6538] Call Trace: [ 272.569426][ T6538] [ 272.572339][ T6538] dump_stack_lvl+0x188/0x250 [ 272.577003][ T6538] ? load_image+0x400/0x400 [ 272.581488][ T6538] ? show_regs_print_info+0x20/0x20 [ 272.586672][ T6538] ? print_circular_bug+0x12b/0x1a0 [ 272.591848][ T6538] check_noncircular+0x296/0x330 [ 272.596769][ T6538] ? add_chain_block+0x940/0x940 [ 272.601683][ T6538] ? lockdep_lock+0xf1/0x1f0 [ 272.606259][ T6538] ? mark_lock+0x94/0x320 [ 272.610570][ T6538] __lock_acquire+0x2c42/0x7d10 [ 272.615408][ T6538] ? verify_lock_unused+0x140/0x140 [ 272.620587][ T6538] ? verify_lock_unused+0x140/0x140 [ 272.625767][ T6538] ? __mutex_trylock_common+0x155/0x260 [ 272.631357][ T6538] ? rcu_lock_release+0x20/0x20 [ 272.636192][ T6538] lock_acquire+0x19e/0x400 [ 272.640676][ T6538] ? sco_conn_del+0x142/0x360 [ 272.645334][ T6538] ? sco_conn_del+0x12f/0x360 [ 272.650172][ T6538] ? read_lock_is_recursive+0x10/0x10 [ 272.655532][ T6538] ? __lock_acquire+0x7d10/0x7d10 [ 272.660536][ T6538] ? do_raw_spin_lock+0x128/0x2f0 [ 272.665554][ T6538] lock_sock_nested+0x44/0x100 [ 272.670302][ T6538] ? sco_conn_del+0x142/0x360 [ 272.674961][ T6538] sco_conn_del+0x142/0x360 [ 272.679444][ T6538] ? sco_connect_cfm+0xa60/0xa60 [ 272.684362][ T6538] hci_conn_hash_flush+0x107/0x220 [ 272.689454][ T6538] hci_dev_do_close+0x991/0x1030 [ 272.694373][ T6538] ? blocking_notifier_chain_unregister+0x115/0x210 [ 272.700942][ T6538] hci_unregister_dev+0x2d7/0x580 [ 272.705946][ T6538] vhci_release+0x73/0xc0 [ 272.710257][ T6538] ? vhci_open+0x290/0x290 [ 272.714662][ T6538] __fput+0x234/0x930 [ 272.718638][ T6538] task_work_run+0x125/0x1a0 [ 272.723212][ T6538] do_exit+0x626/0x20c0 [ 272.727355][ T6538] ? put_task_struct+0x80/0x80 [ 272.732103][ T6538] ? lock_chain_count+0x20/0x20 [ 272.736936][ T6538] do_group_exit+0x12e/0x300 [ 272.741515][ T6538] __x64_sys_exit_group+0x3b/0x40 [ 272.746524][ T6538] do_syscall_64+0x4c/0xa0 [ 272.750925][ T6538] ? clear_bhb_loop+0x30/0x80 [ 272.755584][ T6538] ? clear_bhb_loop+0x30/0x80 [ 272.760244][ T6538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.766130][ T6538] RIP: 0033:0x7f4a6a218cb9 [ 272.770534][ T6538] Code: Unable to access opcode bytes at RIP 0x7f4a6a218c8f. [ 272.777874][ T6538] RSP: 002b:00007fff5678c1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 272.786270][ T6538] RAX: ffffffffffffffda RBX: 00007f4a6a2827c0 RCX: 00007f4a6a218cb9 [ 272.794220][ T6538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 272.802173][ T6538] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f4a6a28271f [ 272.810134][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5678d4b0 [ 272.818087][ T6538] R13: 00007f4a6a28271f R14: 000055558f1bb4e8 R15: 00007fff5678e580 [ 272.826046][ T6538] [ 272.831273][ T4269] usb 1-1: device descriptor read/64, error -71 [ 272.867000][ T7011] FAT-fs (loop6): Directory bread(block 64) failed [ 272.875534][ T7011] FAT-fs (loop6): Directory bread(block 65) failed [ 272.882590][ T7011] FAT-fs (loop6): Directory bread(block 66) failed [ 272.894774][ T7011] FAT-fs (loop6): Directory bread(block 67) failed [ 272.904288][ T7011] FAT-fs (loop6): Directory bread(block 68) failed [ 272.912680][ T7011] FAT-fs (loop6): Directory bread(block 69) failed [ 272.921796][ T7011] FAT-fs (loop6): Directory bread(block 70) failed [ 272.998165][ T7011] FAT-fs (loop6): Directory bread(block 71) failed [ 273.034739][ T7011] FAT-fs (loop6): Directory bread(block 72) failed [ 273.061703][ T7011] FAT-fs (loop6): Directory bread(block 73) failed [ 273.130460][ T4269] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 273.350492][ T4269] usb 1-1: device descriptor read/64, error -71 [ 273.472020][ T4269] usb usb1-port1: attempt power cycle [ 273.504806][ T6085] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.595818][ T6085] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.671713][ T6085] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.735679][ T6085] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.900451][ T4269] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 274.010892][ T4269] usb 1-1: device descriptor read/8, error -71 [ 274.290495][ T4269] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 274.392238][ T4269] usb 1-1: device descriptor read/8, error -71 [ 274.418480][ T6085] device hsr_slave_0 left promiscuous mode [ 274.424898][ T6085] device hsr_slave_1 left promiscuous mode [ 274.431319][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.438701][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.447782][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.456721][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.465467][ T6085] device bridge_slave_1 left promiscuous mode [ 274.471710][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.479855][ T6085] device bridge_slave_0 left promiscuous mode [ 274.486500][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.497326][ T6085] device veth1_macvtap left promiscuous mode [ 274.503431][ T6085] device veth0_macvtap left promiscuous mode [ 274.509504][ T6085] device veth1_vlan left promiscuous mode [ 274.515342][ T6085] device veth0_vlan left promiscuous mode [ 274.521580][ T4269] usb usb1-port1: unable to enumerate USB device [ 274.654984][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 274.668178][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 274.682006][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.696325][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.750218][ T6085] bond0 (unregistering): Released all slaves [ 278.090481][ T5820] Bluetooth: hci1: command 0x0406 tx timeout