last executing test programs: 1m2.93121901s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400), 0x2c) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r5 = inotify_init1(0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0xb) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0018800800024000000000080001400000000008000340000000001c001080080001400000000008000240000000000800034000000000bbcd8d3510bb91a689db12b6a139ebd81a1d9e733fb46c0ea56cb29a08c46d7dc455"], 0x9c}}, 0x0) 1m1.575098696s ago: executing program 4: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3a000c0, &(0x7f0000000340)=ANY=[@ANYBLOB='file_umask=00000000000000000010001,file_umask=00000000000000000003342,umask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d69736f383835392d332c71756965742c6469725f756d61736b3d30303030303030303030303030303030303130303030312c747970653d731472bb2c747970653da0a408e02c756d61736b3d30303030303030303030303030303030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030303030372c6769643d", @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000002055,gid=', @ANYRESHEX=0x0, @ANYBLOB=',obj_type=,rootcontext=unconfined_u,\x00'], 0x4, 0x331, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ftruncate(r0, 0x97a9) 1m1.292129279s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000180)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20d7f7f7343067fd40cdd4b16742e94b62f4eb1c5d9f56ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1b40955e9a59cf0e5e8ac68c27da3d542ae", 0xb7}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a", 0x90}, {&(0x7f00000002c0)="560e784a5947b909", 0x8}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7", 0x3e}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201", 0x15}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af718c4bd83bc52de04e2445f17ce", 0x7a}], 0x4}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 58.161047065s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000006900012400164e190ce9f1f7434bce9a2fbf4a000000f2000000"], 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="037a1e2100"}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000c80)={r5, 0x2, 0x6, @link_local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x42}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e74000905"], 0x0) 58.041307512s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x0, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000080000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) keyctl$unlink(0x18, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x64000600) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000800)=ANY=[], 0x1, 0x19c, &(0x7f0000000280)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 55.307628244s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x104, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000000c0)={{0x2}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='new default trusted:syz3\x00'], 0x2d, 0x0) request_key(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz', 0x2, 0x2}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x98f907, 0x5}) 52.934742937s ago: executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0x34, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@lazytime}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r0, 0x400445a0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}], 0x1c) 51.847544145s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000180)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20d7f7f7343067fd40cdd4b16742e94b62f4eb1c5d9f56ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1b40955e9a59cf0e5e8ac68c27da3d542ae", 0xb7}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a", 0x90}, {&(0x7f00000002c0)="560e784a5947b909", 0x8}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7", 0x3e}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201", 0x15}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af718c4bd83bc52de04e2445f17ce", 0x7a}], 0x4}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 50.500448487s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)={@val={0x6f01}, @val={0x4, 0x0, 0x0, 0x0, 0x3d}, @eth={@dev, @random="61ee798ebd76", @val={@void}, {@x25}}}, 0x23) 47.747378147s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x0, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000080000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) keyctl$unlink(0x18, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x64000600) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000800)=ANY=[], 0x1, 0x19c, &(0x7f0000000280)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 44.591265982s ago: executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8000000) 44.097146275s ago: executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1800010, &(0x7f00000001c0)={[{@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x464, &(0x7f0000000980)="$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") chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') r0 = open$dir(&(0x7f0000001080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/29, 0x1d) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000300)=@nl}) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) getpid() syz_read_part_table(0x107d, &(0x7f0000000000)="$eJzszrFNw1AUBdBrRzZxRcc6YQtqeoYIuzAEYhZoWIIgIT3k+NsgFiDFOc3z/37364b/VWP2ud1OqW752mfKsU/ymLfPKcnYNqqt7nLzdNxip6pDVdVXVU3tdkxVvc9zSvrl7irr8+fY4rn/qbM7P72ttNSQus6hne6TYZ6npLvbgnOxIX9KJq8va5mPh3l2v38CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGX4DgAA///dyCmL") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) 42.886644379s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000180)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20d7f7f7343067fd40cdd4b16742e94b62f4eb1c5d9f56ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1b40955e9a59cf0e5e8ac68c27da3d542ae", 0xb7}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a", 0x90}, {&(0x7f00000002c0)="560e784a5947b909", 0x8}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7", 0x3e}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201", 0x15}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af718c4bd83bc52de04e2445f17ce", 0x7a}], 0x4}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 41.649701717s ago: executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2202002, &(0x7f0000000280)={[{@data_writeback}, {@sb={'sb', 0x3d, 0x101}, 0x22}, {@errors_remount}, {@commit={'commit', 0x3d, 0x10001}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@noblock_validity}]}, 0x3, 0x44e, &(0x7f0000000900)="$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") r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) read$watch_queue(0xffffffffffffffff, &(0x7f0000000d80)=""/161, 0xa1) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000140)=')', &(0x7f0000000540)=@udp=r7, 0x2}, 0x20) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x103}, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.390855437s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d0000000000291dec98850000006d00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82041003d0001000e01030000001f020904"], 0x46) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @rand_addr=0x64010100, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000c80), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x200, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x100000000) socket$nl_netfilter(0x10, 0x3, 0xc) 25.389575972s ago: executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1800010, &(0x7f00000001c0)={[{@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x464, &(0x7f0000000980)="$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") chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') r0 = open$dir(&(0x7f0000001080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/29, 0x1d) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000300)=@nl}) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) getpid() syz_read_part_table(0x107d, &(0x7f0000000000)="$eJzszrFNw1AUBdBrRzZxRcc6YQtqeoYIuzAEYhZoWIIgIT3k+NsgFiDFOc3z/37364b/VWP2ud1OqW752mfKsU/ymLfPKcnYNqqt7nLzdNxip6pDVdVXVU3tdkxVvc9zSvrl7irr8+fY4rn/qbM7P72ttNSQus6hne6TYZ6npLvbgnOxIX9KJq8va5mPh3l2v38CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGX4DgAA///dyCmL") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) 24.2110852s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000006900012400164e190ce9f1f7434bce9a2fbf4a000000f2000000"], 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="037a1e2100"}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000c80)={r5, 0x2, 0x6, @link_local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x42}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e74000905"], 0x0) 20.434121933s ago: executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, r0, 0xce9e1000) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10ff}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547e87dbe9abc89b6f5becc2", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1={0xff, 0x2}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 19.825651744s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x104, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000000c0)={{0x2}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='new default trusted:syz3\x00'], 0x2d, 0x0) request_key(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz', 0x2, 0x2}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x0, 0x98f907, 0x5}) 18.778543433s ago: executing program 2: pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x34400) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0), 0x9, 0x973b, &(0x7f0000009780)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) chdir(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000340)='./file0\x00', 0x2) write$FUSE_INIT(r5, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r6}, 0x50) 15.527774157s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000180)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20d7f7f7343067fd40cdd4b16742e94b62f4eb1c5d9f56ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1b40955e9a59cf0e5e8ac68c27da3d542ae", 0xb7}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a", 0x90}, {&(0x7f00000002c0)="560e784a5947b909", 0x8}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7", 0x3e}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201", 0x15}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af718c4bd83bc52de04e2445f17ce", 0x7a}], 0x4}, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 15.18697983s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @loopback, 0x4e20, 0x4, 'wrr\x00', 0x23, 0x40, 0x1}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001680), 0x0, 0xfc) io_setup(0x25, &(0x7f0000000480)=0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(0xffffffffffffffff, 0x0) io_submit(r5, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000840), &(0x7f0000000880)=0x4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000400)=0x4) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20421, &(0x7f00000004c0)=ANY=[@ANYBLOB='stats=global,euid<', @ANYRESDEC, @ANYBLOB=',dont_appraise,euid>', @ANYRESDEC, @ANYBLOB="2c7375000000000000000567e2c7a981ec4d27b2cd7d8c99382c2756755bb58f55747970653d2c2c66"]) 14.375080775s ago: executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x3fc) splice(r0, &(0x7f00000000c0)=0x787, r0, &(0x7f0000000100)=0xe1c8, 0xffffffffffffff80, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22900, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000025e40)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c00020705000100000000002400028014000180080001007f000001080000010000000000080007400000000004000e800800084000000000"], 0x70}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f09000000080000000200"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_io_uring_setup(0x2bb1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x119a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r8 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r7, r6, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r5, 0x7b52, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000140)={r0, r1}) 3.838249533s ago: executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x6040, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000500)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xce, &(0x7f0000000400)=""/206, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) (async, rerun: 64) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) (async) keyctl$search(0x4, r6, 0x0, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2a8, 0x0, 0xffffffff, 0x100, 0x2a8, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'macsec0\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "011be2d565b7cc8776715cc10c26cad1ddccd2cc6e8c54af0910b84793b1"}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) (async) r11 = dup(r9) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 3.657778364s ago: executing program 3: r0 = socket(0x11, 0x800000003, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x10, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1, 0x14fe, &(0x7f0000001580)="$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") (async) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) creat(0x0, 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) (async) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) connect$inet(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 3.249891988s ago: executing program 3: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x7be67eb5fec52510) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0xfffffffffffffebd, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100", @ANYBLOB="400002803c00010024000100656e61626c656400"/37], 0x5c}, 0x1, 0xf000}, 0x0) 1.697748614s ago: executing program 3: ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105642, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @func={0x1}]}, {0x0, [0x2e, 0x2e, 0xcdbe01d79ea30125]}}, &(0x7f0000000600)=""/10, 0x41, 0xa, 0x1}, 0x20) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0xfffffe7c) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="7f", 0x1}], 0x1, 0x0, 0x0, 0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000180)) tkill(r0, 0x14) 459.621225ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000080)={0xb, 0x2000000, 0x8000000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$efs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000800)={[], [{@euid_eq}, {@obj_role={'obj_role', 0x3d, '\xfe%\x94[\xcf\xcbZ\xc5\f\x1a\x82\xb1\x80WK\v\x88M]S\xaf\xa8\xb5\f'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x2a4, &(0x7f0000000d40)="$eJzs3cFOE0Ecx/HfllYW1IQDKhpUEg96sa0F5cKhHHwDeQACpWkoaqyJoTERvHrhFbxxMB6NR99CDpr4Ahy8GS9jtjtLt5Vuuy3tYv1+Erqz2+n8ZybZTch/dlcAAAAAAAAAAAAAAGBsuJIuSZqRNGuPGWPM75+vNxYkXZTkeAe9HddRWlLG1lvxPn4Yo1/GXLZ1XdtoKhwgVC4G7dkmg7IXr/z43fZs8Bu3WSeo5/0V7X7Q/nLQhqO94c0S0Oqg/mrpaE06eOtvWywk1KnT2L6k2g4v263TYzPe+RlqrnGuK3TN6MlUnMohRf+8HzXXXuO8uTNvHMctSua2/52ZbNZz2ubxyfVeZxUAAAAAAAAAAAA4W/Hy/yL/D5D/7y//3+8pSv4fAAAAAAAAAAAA6GotNXWS13NUPDWvPi9pLvSbqMzWoaQPkj5K+iTpu6TPkr61LQOIzzTDkuUHAAAAAAAAAAAAAADWl9UJv2AXPATrIL62ba8MGCfd4fjxvh/43p3o+HOSrg4Qv9P92cf7/pKKaUXHvzZAbEWNf9VOfJf5vzms+Hb8m4qOPz+k+Oa9H/9ul/i5lzvPc7Xd+v3Kznq5VC49LRQWH+WX8vmHhdxWpVrK+5+x+xWM/0Y6Ov6t2C236jR+AAAAAAAAAAAAAGfnr+fnAwCAsZdqvPcn7WSb5VQ2K0003gXkZrYq1VLBrt8J9h+o9ftF+y6gGaUzwSqkC5IOHXfK289uPKtuJj1QAAAAAAD+Y7Xd+vZ6tVp6UUu6JwAAAAAAAAAAAAAAAAAAoFfN9X/DKyQ9RgAA0CrT4f7/ycb9/NMn9/u7ko4cN9PfW0YAAMB5Mor//yn8wwWdj25QGHUh6SsTAMS2l3QHAIyXldCz0oFx8ScAAP//evenRw==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e00000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a0200"/150], 0x0, 0x96}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000eab83e00003f000000000000000800000000fc58ab073facec8e05e801948a0da27a5a873ec05528e0dd01426998c3240cff3cc19de5f674284ac45094a8f965f5"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) preadv(r8, &(0x7f0000000240), 0x0, 0x8, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x30, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x1f, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYBLOB="ba27f09bd5c9c4a51b5a6107318a630d5a2a003bc4c7a7a0f695dd63d0273a773dc5454fb753832596628d065e9c4b24a9a27bfb61a7eb437927b1e7141f744deffe10f5ca74e19e7d5732fd923d1856e231673be0fc11067c0b0be61f7e66d3ff1e867f919fc773d7b060d095909ac422b2981d6d28b67aff88e96b129744c7725586d83929", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001841000003000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="00001c8526dd683d039b11000000000000b7030000000000060000000000000000b70000000000000085100000feffffff185b0000020000000000000000000000072fec0e02000000181200007295150bd5a0ebb8a4cd6a33", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x89, &(0x7f0000000180)=""/137, 0x41100, 0x1c, '\x00', r11, 0x0, r7, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r7, r12], &(0x7f00000006c0)=[{0x4, 0x5, 0xe, 0x7}, {0x4, 0x4, 0xc}, {0x5, 0x5, 0xe, 0xb}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x2, 0xc, 0xb}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0x600000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000003080101080000000000007545a50ba7f0d42473000000000006000240000000000c00048016000740000000"], 0x30}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x7ff, 0x3, 0x880, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 105.869904ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0xb}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80}, {0x3}, {0x6}]}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048801}, 0x4000000) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000c80)=ANY=[@ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0x119fb, &(0x7f00000234c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 0s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d0000000000291dec98850000006d00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82041003d0001000e01030000001f020904"], 0x46) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @rand_addr=0x64010100, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000c80), 0xff, 0x23f, &(0x7f0000000540)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x200, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x100000000) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): .264871][ T9549] bcachefs (loop4): alloc_read... done [ 540.270605][ T9549] bcachefs (loop4): stripes_read... done [ 540.279304][ T9549] bcachefs (loop4): snapshots_read... done [ 540.340700][ T9549] bcachefs (loop4): journal_replay... done [ 540.346664][ T9549] bcachefs (loop4): resume_logged_ops... done [ 540.352837][ T9549] bcachefs (loop4): going read-write [ 540.770499][ T9549] bcachefs (loop4): done starting filesystem [ 541.727465][ T8409] bcachefs (loop4): shutting down [ 541.742855][ T8409] bcachefs (loop4): going read-only [ 541.760877][ T8409] bcachefs (loop4): finished waiting for writes to stop [ 541.890520][ T8409] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 541.909351][ T8409] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 542.036275][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.390659][ T9580] syz-executor.1: attempt to access beyond end of device [ 542.390659][ T9580] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 542.404004][ T9580] (syz-executor.1,9580,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 542.412101][ T9580] (syz-executor.1,9580,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 542.419876][ T9580] (syz-executor.1,9580,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 542.428965][ T9580] (syz-executor.1,9580,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 543.229818][ T8409] bcachefs (loop4): shutdown complete, journal seq 11 [ 543.350630][ T8409] bcachefs (loop4): marking filesystem clean [ 543.566523][ T8409] bcachefs (loop4): shutdown complete [ 543.846535][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 543.875658][ T9590] loop1: detected capacity change from 0 to 2048 [ 543.927286][ T9590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.008483][ T8298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.046229][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 544.053976][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 544.070727][ T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 544.096141][ T25] usb 4-1: config 179 has no interface number 0 [ 544.102475][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 544.136077][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 544.168246][ T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.188947][ T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 544.204613][ T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 544.219385][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.232820][ T9584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.260848][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 544.284641][ T45] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 544.315138][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.348475][ T45] usb 1-1: config 0 descriptor?? [ 544.400285][ T45] pvrusb2: Hardware description: Terratec Grabster AV400 [ 544.421621][ T45] pvrusb2: ********** [ 544.425851][ T45] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 544.471728][ T9598] loop1: detected capacity change from 0 to 8 [ 544.487904][ T9598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 544.495917][ T9598] SQUASHFS error: Failed to read block 0x91: -5 [ 544.502561][ T9598] SQUASHFS error: Unable to read metadata cache entry [8f] [ 544.509939][ T9598] SQUASHFS error: Unable to read inode 0x11f [ 544.526179][ T25] usb 4-1: USB disconnect, device number 7 [ 544.526228][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 544.540333][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 544.565897][ T45] pvrusb2: Important functionality might not be entirely working. [ 544.575257][ T45] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 544.595963][ T45] pvrusb2: ********** [ 544.613078][ T1973] pvrusb2: Invalid write control endpoint [ 544.677779][ T1973] pvrusb2: Invalid write control endpoint [ 544.683919][ T1973] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 544.704551][ T1973] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 544.721712][ T1973] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 544.733224][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.746226][ T1973] pvrusb2: Device being rendered inoperable [ 544.752454][ T1973] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 544.764221][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.774164][ T1973] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 544.786800][ T1973] pvrusb2: Attached sub-driver cx25840 [ 544.794613][ T9604] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 544.807943][ T1973] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 544.822182][ T1973] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 544.832022][ T9586] loop0: detected capacity change from 0 to 1024 [ 544.833901][ T9604] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 544.873401][ T5150] usb 1-1: USB disconnect, device number 6 [ 545.310706][ T9602] loop2: detected capacity change from 0 to 32768 [ 545.446438][ T5415] hfsplus: b-tree write err: -5, ino 4 [ 545.483838][ T9602] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 545.596475][ T9620] binder: Unknown parameter 'euid<18446744073709551615' [ 546.212529][ T9602] XFS (loop2): Ending clean mount [ 546.513052][ T9609] loop4: detected capacity change from 0 to 32768 [ 547.250639][ T9628] fuse: Bad value for 'fd' [ 547.843911][ T9613] loop3: detected capacity change from 0 to 32768 [ 547.965054][ T9609] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 547.974830][ T9609] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 547.983032][ T9609] XFS (loop4): log mount failed [ 547.989978][ T9613] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 548.002265][ T8616] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 548.845032][ T9653] loop1: detected capacity change from 0 to 2048 [ 548.855623][ T9613] XFS (loop3): Ending clean mount [ 548.937142][ T9653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.983334][ T8444] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 549.062172][ T8298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.118987][ T9662] loop4: detected capacity change from 0 to 512 [ 549.177477][ T9662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 549.259199][ T9662] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 549.276898][ T9662] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 549.316237][ T9662] System zones: 0-2, 18-18, 34-35 [ 549.322879][ T9662] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.469351][ T8409] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 549.667313][ T9672] loop1: detected capacity change from 0 to 8 [ 549.677370][ T9672] SQUASHFS error: lzo decompression failed, data probably corrupt [ 549.685231][ T9672] SQUASHFS error: Failed to read block 0x91: -5 [ 549.692093][ T9672] SQUASHFS error: Unable to read metadata cache entry [8f] [ 549.699491][ T9672] SQUASHFS error: Unable to read inode 0x11f [ 549.735131][ T9670] loop2: detected capacity change from 0 to 128 [ 549.763979][ T9670] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 550.789154][ T9670] syz-executor.2: attempt to access beyond end of device [ 550.789154][ T9670] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 550.837852][ T9670] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 550.869240][ T9670] syz-executor.2: attempt to access beyond end of device [ 550.869240][ T9670] loop2: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 550.926275][ T9670] Buffer I/O error on dev loop2, logical block 8833403, async page read [ 550.938939][ T9682] loop3: detected capacity change from 0 to 2048 [ 550.945377][ T9670] syz-executor.2: attempt to access beyond end of device [ 550.945377][ T9670] loop2: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 551.006230][ T9670] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 551.016875][ T9682] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 551.035334][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.035334][ T9670] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 551.064027][ T9670] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 551.083394][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.083394][ T9670] loop2: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 551.086114][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 551.104176][ T9670] Buffer I/O error on dev loop2, logical block 3245771, async page read [ 551.114583][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.114583][ T9670] loop2: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 551.149520][ T9670] Buffer I/O error on dev loop2, logical block 8834171, async page read [ 551.287730][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.287730][ T9670] loop2: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 551.326380][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 551.422408][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 551.543677][ T25] usb 5-1: config 179 has no interface number 0 [ 551.653761][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 551.734972][ T9670] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 551.829156][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 551.877191][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.877191][ T9670] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 551.893627][ T9670] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 551.902826][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.902826][ T9670] loop2: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 551.916821][ T9670] Buffer I/O error on dev loop2, logical block 3245774, async page read [ 551.945013][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 551.955822][ T9670] syz-executor.2: attempt to access beyond end of device [ 551.955822][ T9670] loop2: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 551.980572][ T9670] Buffer I/O error on dev loop2, logical block 8834939, async page read [ 552.007330][ T25] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 552.057161][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 552.093266][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.124786][ T9681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 552.187061][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.247211][ T9678] loop1: detected capacity change from 0 to 32768 [ 552.364395][ T5198] usb 5-1: USB disconnect, device number 8 [ 552.370251][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 552.370280][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 552.573635][ T9678] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names [ 552.594618][ T9678] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 552.693073][ T9678] bcachefs (loop1): alloc_read... done [ 552.726135][ T9678] bcachefs (loop1): stripes_read... done [ 552.737556][ T9678] bcachefs (loop1): snapshots_read... done [ 552.759851][ T9678] bcachefs (loop1): journal_replay... done [ 552.777876][ T9678] bcachefs (loop1): resume_logged_ops... done [ 552.790003][ T9678] bcachefs (loop1): going read-write [ 552.808795][ T9678] bcachefs (loop1): done starting filesystem [ 552.861804][ T9692] loop3: detected capacity change from 0 to 32768 [ 553.037522][ T9692] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 554.746583][ T8298] bcachefs (loop1): shutting down [ 554.763221][ T8298] bcachefs (loop1): going read-only [ 554.770928][ T9692] XFS (loop3): Ending clean mount [ 554.796325][ T8298] bcachefs (loop1): finished waiting for writes to stop [ 554.826163][ T8298] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 554.849134][ T8298] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 554.878933][ T8444] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 554.918292][ T8298] bcachefs (loop1): shutdown complete, journal seq 12 [ 554.944537][ T8298] bcachefs (loop1): marking filesystem clean [ 555.047899][ T8298] bcachefs (loop1): shutdown complete [ 555.109043][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 555.175488][ T9724] loop0: detected capacity change from 0 to 2048 [ 555.247389][ T9724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.448417][ T7362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.987547][ T9735] loop0: detected capacity change from 0 to 8 [ 556.000765][ T9735] SQUASHFS error: lzo decompression failed, data probably corrupt [ 556.008882][ T9735] SQUASHFS error: Failed to read block 0x91: -5 [ 556.015173][ T9735] SQUASHFS error: Unable to read metadata cache entry [8f] [ 556.022504][ T9735] SQUASHFS error: Unable to read inode 0x11f [ 556.383550][ T9731] loop3: detected capacity change from 0 to 32768 [ 556.404591][ T9726] loop4: detected capacity change from 0 to 32768 [ 556.621694][ T9731] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 557.585492][ T9731] XFS (loop3): Ending clean mount [ 558.038404][ T9762] loop0: detected capacity change from 0 to 32768 [ 558.616235][ T9762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9762) [ 558.684495][ T9762] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.695754][ T9762] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 558.704510][ T9762] BTRFS info (device loop0): using free-space-tree [ 559.216227][ T5151] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 560.059646][ T5151] usb 5-1: Using ep0 maxpacket: 8 [ 560.077490][ T5151] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 560.086264][ T5151] usb 5-1: config 179 has no interface number 0 [ 560.093067][ T5151] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 560.131819][ T5151] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 560.147541][ T7362] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.164474][ T5151] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.200836][ T5151] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 560.280096][ T8444] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 560.301794][ T5151] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 560.320337][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.337731][ T9783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 560.567499][ T5151] usb 5-1: USB disconnect, device number 9 [ 560.573380][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 560.573427][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 560.626211][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 561.243305][ T9796] loop3: detected capacity change from 0 to 40427 [ 561.261920][ T9796] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 561.269807][ T9796] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 561.349077][ T9796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 561.397220][ T9792] loop1: detected capacity change from 0 to 32768 [ 561.413961][ T9796] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 561.421170][ T9796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 561.432096][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.984732][ T9794] loop0: detected capacity change from 0 to 32768 [ 562.059842][ T9794] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 562.093398][ T9792] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 562.156231][ T9792] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 562.255211][ T9792] bcachefs (loop1): alloc_read... done [ 562.282601][ T9792] bcachefs (loop1): stripes_read... done [ 562.313499][ T9792] bcachefs (loop1): snapshots_read... done [ 562.325130][ T9794] XFS (loop0): Ending clean mount [ 562.328143][ T9792] bcachefs (loop1): journal_replay... done [ 562.376327][ T9792] bcachefs (loop1): resume_logged_ops... done [ 562.434681][ T9792] bcachefs (loop1): going read-write [ 562.454425][ T9826] fuse: Unknown parameter 'user_id00000000000000000000' [ 562.566249][ T9792] bcachefs (loop1): done starting filesystem [ 562.632920][ T7362] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 562.718707][ T9833] loop4: detected capacity change from 0 to 8 [ 562.739917][ T9833] SQUASHFS error: lzo decompression failed, data probably corrupt [ 562.747886][ T9833] SQUASHFS error: Failed to read block 0x91: -5 [ 562.754156][ T9833] SQUASHFS error: Unable to read metadata cache entry [8f] [ 562.761458][ T9833] SQUASHFS error: Unable to read inode 0x11f [ 562.882387][ T9828] loop3: detected capacity change from 0 to 2048 [ 563.298648][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.588833][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.608665][ T9828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.814999][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.124252][ T8298] bcachefs (loop1): shutting down [ 564.147369][ T8298] bcachefs (loop1): going read-only [ 564.366654][ T8298] bcachefs (loop1): finished waiting for writes to stop [ 564.708036][ T8298] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 564.777696][ T8298] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 564.811947][ T9849] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 564.829624][ T8298] bcachefs (loop1): shutdown complete, journal seq 15 [ 564.836626][ T9846] loop3: detected capacity change from 0 to 2048 [ 564.840385][ T9846] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 564.843355][ T9849] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.877137][ T8298] bcachefs (loop1): marking filesystem clean [ 564.908538][ T9849] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 564.916968][ T9849] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.961612][ T8298] bcachefs (loop1): shutdown complete [ 565.284220][ T9860] loop3: detected capacity change from 0 to 132 [ 566.549444][ T9871] xt_connbytes: Forcing CT accounting to be enabled [ 566.556158][ T9871] No such timeout policy "syz0" [ 566.608738][ T9871] loop4: detected capacity change from 0 to 4096 [ 566.619247][ T9871] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3). [ 566.627737][ T9871] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 567.066074][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 567.296106][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 567.314748][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 567.394154][ T8] usb 1-1: config 179 has no interface number 0 [ 567.422069][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 567.480123][ T9882] loop3: detected capacity change from 0 to 8 [ 567.489221][ T9882] SQUASHFS error: lzo decompression failed, data probably corrupt [ 567.497083][ T9882] SQUASHFS error: Failed to read block 0x91: -5 [ 567.503318][ T9882] SQUASHFS error: Unable to read metadata cache entry [8f] [ 567.510590][ T9882] SQUASHFS error: Unable to read inode 0x11f [ 567.553092][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 567.569472][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.574942][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.595116][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 567.611999][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 567.622108][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.656662][ T9874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 567.836179][ T9877] loop4: detected capacity change from 0 to 32768 [ 567.868934][ T5198] usb 1-1: USB disconnect, device number 7 [ 567.869072][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 567.883067][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 567.903057][ T9877] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 567.995691][ T9877] XFS (loop4): Ending clean mount [ 568.186925][ T9894] fuse: Unknown parameter 'user_id00000000000000000000' [ 568.244519][ T9896] loop3: detected capacity change from 0 to 2048 [ 568.349911][ T9896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.351184][ T8409] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 568.449502][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.289215][ T9913] loop0: detected capacity change from 0 to 64 [ 571.207138][ T9916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 571.215950][ T9918] loop0: detected capacity change from 0 to 8 [ 571.223991][ T9918] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 571.352461][ T9901] loop1: detected capacity change from 0 to 32768 [ 571.426177][ T9901] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_io": -EINTR [ 571.426591][ T9901] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 571.972862][ T9932] loop4: detected capacity change from 0 to 512 [ 572.096885][ T9932] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 572.105287][ T9932] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 572.123103][ T9932] EXT4-fs (loop4): 1 truncate cleaned up [ 572.133551][ T9932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.538351][ T9932] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 572.796724][ T8409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.852768][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.231168][ T9939] loop4: detected capacity change from 0 to 8 [ 573.241417][ T9939] SQUASHFS error: lzo decompression failed, data probably corrupt [ 573.249452][ T9939] SQUASHFS error: Failed to read block 0x91: -5 [ 573.255701][ T9939] SQUASHFS error: Unable to read metadata cache entry [8f] [ 573.263480][ T9939] SQUASHFS error: Unable to read inode 0x11f [ 573.374232][ T9929] loop3: detected capacity change from 0 to 32768 [ 573.404306][ T9944] hub 9-0:1.0: USB hub found [ 573.426898][ T9944] hub 9-0:1.0: 8 ports detected [ 573.443308][ T9929] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 573.593605][ T9944] No such timeout policy "syz0" [ 573.630279][ T9929] XFS (loop3): Ending clean mount [ 573.770987][ T9952] fuse: Bad value for 'fd' [ 573.816488][ T9930] loop0: detected capacity change from 0 to 4096 [ 573.908208][ T9930] ntfs3: loop0: Primary boot: invalid bytes per index 12288(3). [ 573.956132][ T9930] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 573.990010][ T8444] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 574.085643][ T5198] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 574.296594][ T5198] usb 2-1: Using ep0 maxpacket: 8 [ 574.337788][ T5198] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.366387][ T5198] usb 2-1: config 179 has no interface number 0 [ 574.383875][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 574.426087][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 574.456064][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.484329][ T5198] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 574.566145][ T5198] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 574.617564][ T5198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.398808][ T9953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 575.535249][ T9968] MPI: mpi too large (187712 bits) [ 575.722993][ T45] usb 2-1: USB disconnect, device number 6 [ 575.728888][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 575.728936][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 575.766987][ T9970] loop3: detected capacity change from 0 to 64 [ 576.374697][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.443422][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.486072][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.506208][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.513640][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.566068][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.573523][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.616646][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.624083][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.624790][ T9975] loop4: detected capacity change from 0 to 32768 [ 576.654588][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.666445][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.689633][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.717523][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.741492][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.756227][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.776422][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 576.794466][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.828125][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.858146][ T9977] loop3: detected capacity change from 0 to 32768 [ 576.876442][ T9975] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 576.892885][ T9975] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 576.898451][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.924859][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.965752][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.966985][ T9975] bcachefs (loop4): alloc_read... [ 576.975576][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.996327][ T8] usb 2-1: config 0 has no interfaces? [ 577.002808][ T9975] done [ 577.012288][ T8] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 577.021691][ T9975] bcachefs (loop4): stripes_read... done [ 577.042989][ T9975] bcachefs (loop4): snapshots_read... done [ 577.050475][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.061714][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.089868][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.101449][ T9975] bcachefs (loop4): journal_replay... done [ 577.116478][ T8] usb 2-1: config 0 descriptor?? [ 577.152101][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.160242][ T9975] bcachefs (loop4): resume_logged_ops... done [ 577.206125][ T9975] bcachefs (loop4): going read-write [ 577.212306][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.226864][ T9977] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 577.236606][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.244154][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.244188][ T9975] bcachefs (loop4): done starting filesystem [ 577.252515][ T9977] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 577.268005][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.276046][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.314320][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.343205][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.365748][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.421993][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.432485][ T5151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 577.470113][ T5151] hid-generic 0000:0000:0000.0003: hidraw0: HID v400.00 Device [syz0] on syz0 [ 577.505880][ T8409] bcachefs (loop4): shutting down [ 577.531863][ T8409] bcachefs (loop4): going read-only [ 577.548405][ T8409] bcachefs (loop4): finished waiting for writes to stop [ 577.572144][ T8409] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 577.774355][ T8409] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 578.261910][ T8409] bcachefs (loop4): shutdown complete, journal seq 15 [ 578.365874][ T8409] bcachefs (loop4): marking filesystem clean [ 578.767951][ T8409] bcachefs (loop4): shutdown complete [ 578.942165][T10012] loop0: detected capacity change from 0 to 64 [ 579.791995][ T5151] usb 2-1: USB disconnect, device number 7 [ 580.331921][T10023] loop3: detected capacity change from 0 to 64 [ 581.299450][T10027] binder: Unknown parameter 'euid<18446744073709551615' [ 581.908944][ T5104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 581.923358][ T5104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.933449][ T5104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 582.228252][T10036] hub 9-0:1.0: USB hub found [ 582.234147][T10036] hub 9-0:1.0: 8 ports detected [ 582.425171][T10036] xt_connbytes: Forcing CT accounting to be enabled [ 582.432131][T10036] No such timeout policy "syz0" [ 582.687940][T10036] loop3: detected capacity change from 0 to 4096 [ 582.711258][ T5104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.736270][ T5104] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 582.745048][ T5104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 582.770507][T10036] ntfs3: loop3: Primary boot: invalid bytes per index 12288(3). [ 582.781291][T10036] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 582.853869][ T29] audit: type=1800 audit(1719191325.859:130): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="f2fs" dev="sda1" ino=1959 res=0 errno=0 [ 583.186165][ T5198] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 583.386225][ T5198] usb 1-1: Using ep0 maxpacket: 8 [ 583.410103][ T5198] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.419711][ T5198] usb 1-1: config 179 has no interface number 0 [ 583.456205][ T5198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.486159][ T5198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.516064][ T5198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.547018][ T5198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 583.562639][ T5198] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.596121][ T5198] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.616048][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.848439][T10031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.851534][T10033] chnl_net:caif_netlink_parms(): no params data found [ 583.857849][ T5198] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 583.952691][T10052] loop4: detected capacity change from 0 to 8 [ 583.962953][T10052] SQUASHFS error: lzo decompression failed, data probably corrupt [ 583.970946][T10052] SQUASHFS error: Failed to read block 0x91: -5 [ 583.977235][T10052] SQUASHFS error: Unable to read metadata cache entry [8f] [ 583.984441][T10052] SQUASHFS error: Unable to read inode 0x11f [ 584.080699][ T5111] usb 1-1: USB disconnect, device number 8 [ 584.113993][T10039] loop1: detected capacity change from 0 to 40427 [ 584.220619][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.250290][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.284085][T10033] bridge_slave_0: entered allmulticast mode [ 584.314061][T10033] bridge_slave_0: entered promiscuous mode [ 584.354205][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.386898][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.388602][T10058] loop1: detected capacity change from 0 to 1024 [ 584.401426][T10033] bridge_slave_1: entered allmulticast mode [ 584.413304][T10033] bridge_slave_1: entered promiscuous mode [ 584.497418][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.511400][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.526436][T10058] hfsplus: unable to load nls mapping "macg¬Ò" [ 584.536188][T10058] hfsplus: unable to parse mount options [ 584.717987][T10033] team0: Port device team_slave_0 added [ 584.761362][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.786229][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.791875][T10067] loop1: detected capacity change from 0 to 1024 [ 584.804007][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.805338][T10045] loop3: detected capacity change from 0 to 32768 [ 584.835903][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.845216][T10045] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal_v2: journal bucket at sector 0 [ 584.845216][T10045] journal_v2 (size 32): [ 584.845216][T10045] Buckets: 0-7 [ 584.845216][T10045] [ 584.854059][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.875797][ T53] Bluetooth: hci5: command tx timeout [ 584.898383][T10069] loop4: detected capacity change from 0 to 64 [ 584.905099][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.920067][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.927735][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.939047][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.954345][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.962030][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.970252][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.977892][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.985301][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 584.993685][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.001154][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.010433][T10033] team0: Port device team_slave_1 added [ 585.016154][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.033980][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.042413][ T5151] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 585.087385][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.094837][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.112573][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.141421][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.145146][T10067] syz-executor.1: attempt to access beyond end of device [ 585.145146][T10067] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 585.159074][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.194497][T10067] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 585.224131][T10067] syz-executor.1: attempt to access beyond end of device [ 585.224131][T10067] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 585.306183][T10067] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 585.318993][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.357106][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.360035][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.391452][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.398977][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.406535][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.414005][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.421566][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.429670][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.437427][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.445603][ T5111] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 585.462024][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.484654][ T5151] usb 1-1: config 0 has no interfaces? [ 585.491119][ T5151] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 585.538291][ T5111] hid-generic 0000:0000:0000.0004: hidraw0: HID v400.00 Device [syz0] on syz0 [ 585.554598][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.694046][ T5151] usb 1-1: config 0 descriptor?? [ 585.800213][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.840630][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 585.949117][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.997452][ T8298] hfsplus: bad catalog entry type [ 586.035671][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.061977][ T8298] hfsplus: bad catalog entry type [ 586.107287][ T8298] hfsplus: bad catalog entry type [ 588.750957][T10084] loop4: detected capacity change from 0 to 1024 [ 591.677135][T10085] No such timeout policy "syz0" [ 592.254162][T10085] loop3: detected capacity change from 0 to 4096 [ 592.529637][ T5104] Bluetooth: hci5: command tx timeout [ 592.665532][T10085] ntfs3: loop3: Primary boot: invalid bytes per index 12288(3). [ 592.673574][T10085] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 592.686986][T10084] hfsplus: failed to load extents file [ 592.896676][ T8] usb 1-1: USB disconnect, device number 9 [ 592.950632][T10033] hsr_slave_0: entered promiscuous mode [ 592.992814][T10033] hsr_slave_1: entered promiscuous mode [ 593.127146][T10033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.171319][T10033] Cannot create hsr debugfs directory [ 593.301556][T10097] loop4: detected capacity change from 0 to 8 [ 593.311306][T10097] SQUASHFS error: lzo decompression failed, data probably corrupt [ 593.319304][T10097] SQUASHFS error: Failed to read block 0x91: -5 [ 593.325594][T10097] SQUASHFS error: Unable to read metadata cache entry [8f] [ 593.333554][T10097] SQUASHFS error: Unable to read inode 0x11f [ 593.524289][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.733309][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.701796][ T5104] Bluetooth: hci5: command tx timeout [ 595.022568][T10118] binder: Unknown parameter 'euid<18446744073709551615' [ 595.361493][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.600143][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 595.786527][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 595.868123][T10033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.927985][ T45] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 596.081883][ T45] usb 1-1: config 179 has no interface number 0 [ 596.266868][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 596.346094][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 596.396314][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.410682][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.415162][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 596.424354][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.439207][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.568726][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 596.586087][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.656175][ T45] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 596.667194][ T45] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 596.681924][ T45] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 596.683185][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.696102][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.835409][T10132] hub 9-0:1.0: USB hub found [ 596.841420][T10132] hub 9-0:1.0: 8 ports detected [ 597.047572][T10132] No such timeout policy "syz0" [ 597.305269][T10132] loop3: detected capacity change from 0 to 4096 [ 597.332340][T10132] ntfs3: loop3: Primary boot: invalid bytes per index 12288(3). [ 597.340648][T10132] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 597.389498][ T53] Bluetooth: hci5: command tx timeout [ 597.456721][ T45] usb 1-1: can't set config #179, error -71 [ 597.484826][ T45] usb 1-1: USB disconnect, device number 10 [ 597.561531][T10033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.318784][T10033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.527044][T10124] loop4: detected capacity change from 0 to 32768 [ 598.539290][T10124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10124) [ 598.599129][T10124] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.623916][T10124] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 598.633546][ T53] Bluetooth: hci0: command tx timeout [ 598.640833][T10124] BTRFS info (device loop4): using free-space-tree [ 598.648523][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 598.663294][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 598.675084][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 598.687356][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 598.698166][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 598.732259][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 598.783173][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 598.810255][T10033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.813816][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 598.869274][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 598.879775][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 598.902584][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 598.913663][T10124] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 598.947483][T10124] BTRFS error (device loop4): open_ctree failed [ 598.990565][ T62] bridge_slave_1: left allmulticast mode [ 599.003239][ T62] bridge_slave_1: left promiscuous mode [ 599.038715][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.160975][ T62] bridge_slave_0: left allmulticast mode [ 599.226180][ T62] bridge_slave_0: left promiscuous mode [ 599.232027][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.460046][T10173] loop3: detected capacity change from 0 to 1024 [ 600.972149][ T53] Bluetooth: hci0: command tx timeout [ 601.894693][T10183] binder: Unknown parameter 'euid<18446744073709551615' [ 602.845276][T10177] loop4: detected capacity change from 0 to 40427 [ 602.914831][T10177] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 603.046296][T10177] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 603.055597][ T53] Bluetooth: hci0: command tx timeout [ 603.199257][T10177] F2FS-fs (loop4): invalid crc value [ 603.358341][T10177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 603.667622][T10177] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 603.687312][T10177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 604.449276][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.506805][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.563614][ T62] bond0 (unregistering): Released all slaves [ 605.106095][ T53] Bluetooth: hci0: command tx timeout [ 605.421705][T10205] loop0: detected capacity change from 0 to 40427 [ 605.444128][T10205] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 605.452090][T10205] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 605.869103][T10205] F2FS-fs (loop0): Found nat_bits in checkpoint [ 606.056167][T10205] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 606.074506][T10205] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 606.408177][T10216] hub 9-0:1.0: USB hub found [ 606.414398][T10216] hub 9-0:1.0: 8 ports detected [ 606.584268][T10216] No such timeout policy "syz0" [ 606.812238][T10216] loop4: detected capacity change from 0 to 4096 [ 607.108812][T10216] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3). [ 607.116695][T10216] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 607.477590][T10033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 607.528268][T10033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 607.714615][T10033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 607.731681][T10127] chnl_net:caif_netlink_parms(): no params data found [ 607.786141][T10033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 607.871731][ T62] hsr_slave_0: left promiscuous mode [ 607.936330][ T62] hsr_slave_1: left promiscuous mode [ 607.952786][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.979048][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.997178][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.004632][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.101100][ T62] veth1_macvtap: left promiscuous mode [ 608.116168][ T62] veth0_macvtap: left promiscuous mode [ 608.136257][ T62] veth1_vlan: left promiscuous mode [ 608.141682][ T62] veth0_vlan: left promiscuous mode [ 608.603989][T10225] loop3: detected capacity change from 0 to 32768 [ 608.635129][T10224] loop4: detected capacity change from 0 to 32768 [ 608.646206][T10225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10225) [ 608.680602][T10224] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6257a694-c5fb-4b5e-8d14-f0d38d5b1d84 [ 608.702419][T10224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10224) [ 608.719057][T10225] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.747967][T10225] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 608.773433][T10225] BTRFS info (device loop3): using free-space-tree [ 608.782916][T10224] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.796690][T10224] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 608.805649][T10224] BTRFS info (device loop4): using free-space-tree [ 608.935142][T10228] loop0: detected capacity change from 0 to 32768 [ 609.050425][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 609.128696][ T8409] BTRFS info (device loop4): last unmount of filesystem 6257a694-c5fb-4b5e-8d14-f0d38d5b1d84 [ 609.262224][T10228] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 609.316432][T10228] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 609.432433][T10228] bcachefs (loop0): alloc_read... done [ 609.445878][T10228] bcachefs (loop0): stripes_read... done [ 609.451766][T10228] bcachefs (loop0): snapshots_read... done [ 609.488438][T10228] bcachefs (loop0): journal_replay... done [ 609.494352][T10228] bcachefs (loop0): resume_logged_ops... done [ 609.559809][T10228] bcachefs (loop0): going read-write [ 609.643054][T10228] bcachefs (loop0): done starting filesystem [ 609.992167][T10277] loop3: detected capacity change from 0 to 1024 [ 612.916704][T10282] binder: Unknown parameter 'euid<18446744073709551615' [ 613.708874][T10293] loop4: detected capacity change from 0 to 128 [ 614.587825][ T7362] bcachefs (loop0): shutting down [ 614.592913][ T7362] bcachefs (loop0): going read-only [ 614.599242][ T7362] bcachefs (loop0): finished waiting for writes to stop [ 614.621604][ T7362] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 614.711639][ T7362] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 16 [ 614.749524][ T7362] bcachefs (loop0): shutdown complete, journal seq 17 [ 614.824689][ T7362] bcachefs (loop0): marking filesystem clean [ 614.944248][ T7362] bcachefs (loop0): shutdown complete [ 614.961475][ T62] team0 (unregistering): Port device team_slave_1 removed [ 615.176940][ T62] team0 (unregistering): Port device team_slave_0 removed [ 615.641929][T10295] loop4: detected capacity change from 0 to 40427 [ 615.700105][T10295] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 615.723819][T10295] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 615.777736][T10295] F2FS-fs (loop4): invalid crc value [ 615.924216][T10295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 616.190286][T10295] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 616.220219][T10295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 617.196273][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 617.409522][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 617.427530][ T9] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 617.458311][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.514394][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.544868][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.609940][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 617.955018][T10321] hub 9-0:1.0: USB hub found [ 617.960840][T10321] hub 9-0:1.0: 8 ports detected [ 618.136037][T10321] No such timeout policy "syz0" [ 618.371854][T10321] loop4: detected capacity change from 0 to 4096 [ 618.404926][T10321] ntfs3: loop4: Primary boot: invalid bytes per index 12288(3). [ 618.413260][T10321] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 618.809377][T10311] batadv_slave_0: entered promiscuous mode [ 618.830234][ T9] usb 1-1: USB disconnect, device number 11 [ 618.879952][T10304] batadv_slave_0: left promiscuous mode [ 619.178857][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.187688][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.197567][T10127] bridge_slave_0: entered allmulticast mode [ 619.204916][T10127] bridge_slave_0: entered promiscuous mode [ 619.256616][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.265655][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.343245][T10127] bridge_slave_1: entered allmulticast mode [ 619.387533][T10127] bridge_slave_1: entered promiscuous mode [ 619.769173][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.823296][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.973458][T10127] team0: Port device team_slave_0 added [ 619.991376][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.028481][T10127] team0: Port device team_slave_1 added [ 620.099115][T10338] loop0: detected capacity change from 0 to 128 [ 620.885090][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.896615][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.948055][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.973332][T10330] loop3: detected capacity change from 0 to 32768 [ 620.982598][T10330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10330) [ 621.007355][T10330] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.017818][T10330] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 621.026734][T10330] BTRFS info (device loop3): using free-space-tree [ 621.035681][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.048966][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.055934][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.086768][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.300626][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 621.380435][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.387718][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.424609][T10358] loop0: detected capacity change from 0 to 1024 [ 621.491421][T10127] hsr_slave_0: entered promiscuous mode [ 621.501913][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.507942][ T9] usb 5-1: config 124 has too many interfaces: 103, using maximum allowed: 32 [ 621.523093][T10127] hsr_slave_1: entered promiscuous mode [ 621.526699][ T9] usb 5-1: config 124 has an invalid descriptor of length 119, skipping remainder of the config [ 621.564222][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.568629][ T9] usb 5-1: config 124 has 0 interfaces, different from the descriptor's value: 103 [ 621.571771][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.620048][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 621.652451][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.966368][ T9] usb 5-1: string descriptor 0 read error: -71 [ 621.993765][ T9] usb 5-1: USB disconnect, device number 10 [ 622.654581][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.954633][T10033] veth0_vlan: entered promiscuous mode [ 622.981939][T10127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 623.033808][T10127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 623.071467][T10127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 623.138129][T10033] veth1_vlan: entered promiscuous mode [ 623.156729][T10127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.425051][T10033] veth0_macvtap: entered promiscuous mode [ 623.459791][T10033] veth1_macvtap: entered promiscuous mode [ 623.539229][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.589848][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.626167][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.646858][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.676557][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.706201][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.738153][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.821259][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.873589][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.894481][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.913513][T10371] loop4: detected capacity change from 0 to 40427 [ 623.920369][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.961912][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.971996][T10371] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 623.992220][T10371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 624.000818][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.029163][T10371] F2FS-fs (loop4): invalid crc value [ 624.034710][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.070340][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.087587][T10371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 624.117555][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.171698][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.239954][T10033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.268729][T10033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.296074][T10033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.303465][T10375] loop0: detected capacity change from 0 to 32768 [ 624.304848][T10033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.338526][T10375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10375) [ 624.363870][T10371] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 624.392151][T10375] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 624.397142][T10371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 624.413478][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.413681][T10375] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 624.436770][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.440103][T10375] BTRFS info (device loop0): using free-space-tree [ 624.722035][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.835475][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.842716][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.851095][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.044203][T10375] BTRFS info (device loop0): checking UUID tree [ 625.082329][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.089560][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.196749][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.204610][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.301386][T10408] netlink: 'syz-executor.3': attribute type 75 has an invalid length. [ 625.320966][ T7362] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.390349][ T5415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.422366][ T5415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.728704][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.739849][T10414] batadv_slave_0: entered promiscuous mode [ 626.247035][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 626.560350][T10127] veth0_vlan: entered promiscuous mode [ 626.597638][T10127] veth1_vlan: entered promiscuous mode [ 626.636900][ T58] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 626.666089][ T58] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.683991][T10408] loop3: detected capacity change from 0 to 32768 [ 626.702318][ T58] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.703929][T10408] XFS: attr2 mount option is deprecated. [ 626.732809][T10408] XFS: noikeep mount option is deprecated. [ 626.753263][T10127] veth0_macvtap: entered promiscuous mode [ 626.770254][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.787853][T10408] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 626.799290][T10127] veth1_macvtap: entered promiscuous mode [ 626.815886][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.944649][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.969644][ T58] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 626.984316][T10435] loop0: detected capacity change from 0 to 128 [ 627.727761][T10408] XFS (loop3): Ending clean mount [ 627.753420][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.773762][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 627.779485][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.795481][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.814499][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.827307][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.831194][T10408] XFS (loop3): Quotacheck needed: Please wait. [ 627.839637][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.889051][ T5152] usb 5-1: USB disconnect, device number 11 [ 627.918117][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.948349][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.017221][T10412] batadv_slave_0: left promiscuous mode [ 628.042534][T10408] XFS (loop3): Quotacheck: Done. [ 628.060454][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.097997][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.120969][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.136614][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.152649][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.192328][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.223297][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.256342][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.283397][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.304765][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.327329][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.369701][T10127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.422670][T10127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.456072][T10127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.486387][T10127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.695743][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.734155][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.775016][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.803365][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.907355][T10450] UBIFS error (pid: 10450): cannot open "./file0", error -22 [ 629.148591][T10439] loop0: detected capacity change from 0 to 32768 [ 629.236417][T10439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10439) [ 629.373603][T10459] loop4: detected capacity change from 0 to 1024 [ 630.016063][T10439] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.046135][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 630.053942][T10439] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 630.076067][T10439] BTRFS info (device loop0): using free-space-tree [ 630.236461][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 630.275780][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 630.310180][ T9] usb 2-1: config 179 has no interface number 0 [ 630.339551][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 630.372074][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 630.403281][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 630.415261][ T7362] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.442883][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 630.521632][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 630.561873][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 630.584540][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 630.584690][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.646350][T10456] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 630.656414][ T9] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 630.910146][ T9] usb 2-1: USB disconnect, device number 8 [ 631.426824][ T8444] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 631.917055][T10489] loop4: detected capacity change from 0 to 128 [ 632.019506][T10491] loop1: detected capacity change from 0 to 128 [ 634.755792][T10283] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 634.811190][T10489] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 634.834673][T10489] ext4 filesystem being mounted at /root/syzkaller-testdir3045702179/syzkaller.McvWku/86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 635.121667][T10495] loop1: detected capacity change from 0 to 64 [ 635.141442][ T8409] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.490933][T10500] batadv_slave_0: entered promiscuous mode [ 636.861881][T10508] loop4: detected capacity change from 0 to 1024 [ 636.895913][T10508] EXT4-fs: Ignoring removed nobh option [ 636.912252][T10508] ext4: Unknown parameter 'nouser_xattr' [ 636.992376][T10519] loop3: detected capacity change from 0 to 256 [ 636.994008][T10515] loop1: detected capacity change from 0 to 132 [ 637.033538][T10519] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf23980c3, utbl_chksum : 0xe619d30d) [ 637.087189][T10401] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 637.292009][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.306304][T10401] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 637.322892][T10401] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 637.355638][T10401] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.410393][T10401] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 637.428540][T10401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.576423][T10401] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 637.821392][ T5151] usb 1-1: USB disconnect, device number 12 [ 637.837273][T10498] batadv_slave_0: left promiscuous mode [ 637.949237][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 638.149065][ T5198] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 638.376570][ T5198] usb 2-1: Using ep0 maxpacket: 8 [ 638.400073][ T5198] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 638.428635][ T5198] usb 2-1: config 179 has no interface number 0 [ 638.446318][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 638.490616][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 638.527967][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 638.558584][ T5198] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 638.587358][ T5198] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 638.652947][ T5198] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 638.690868][ T5198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.744374][T10534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 638.810060][ T5198] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 638.963121][T10530] loop4: detected capacity change from 0 to 40427 [ 639.012129][T10530] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 639.012544][ T5198] usb 2-1: USB disconnect, device number 9 [ 639.047062][T10530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 639.090051][T10530] F2FS-fs (loop4): invalid crc value [ 639.125173][T10530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 639.222710][T10530] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 639.239445][T10530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 640.529382][T10555] loop1: detected capacity change from 0 to 64 [ 640.604025][T10544] loop3: detected capacity change from 0 to 32768 [ 641.421512][T10544] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 641.438360][T10544] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 641.547433][T10544] bcachefs (loop3): alloc_read... done [ 641.563311][T10544] bcachefs (loop3): stripes_read... done [ 641.616624][T10544] bcachefs (loop3): snapshots_read... done [ 641.645437][T10544] bcachefs (loop3): journal_replay... done [ 641.675703][T10544] bcachefs (loop3): resume_logged_ops... done [ 641.723311][T10544] bcachefs (loop3): going read-write [ 641.734280][T10544] bcachefs (loop3): done starting filesystem [ 641.816691][T10576] loop1: detected capacity change from 0 to 512 [ 642.982244][T10576] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 643.475927][ T8444] bcachefs (loop3): shutting down [ 643.504314][ T8444] bcachefs (loop3): going read-only [ 643.510405][ T8444] bcachefs (loop3): finished waiting for writes to stop [ 643.604560][ T8444] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 643.660082][ T8444] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 643.724789][ T8444] bcachefs (loop3): shutdown complete, journal seq 15 [ 643.735210][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.812004][ T8444] bcachefs (loop3): marking filesystem clean [ 644.234071][ T8444] bcachefs (loop3): shutdown complete [ 644.410216][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.496813][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 644.679044][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.767936][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 644.801661][ T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 644.826123][ T8] usb 5-1: config 179 has no interface number 0 [ 644.832638][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 644.876035][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 644.928147][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.973384][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 645.028272][ T8] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 645.097745][T10283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.138059][T10283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.148105][T10283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.156465][T10283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.168458][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.175892][T10283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 645.332712][T10601] loop0: detected capacity change from 0 to 128 [ 645.388250][ T53] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 645.472813][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.499982][T10601] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.514530][T10601] ext4 filesystem being mounted at /root/syzkaller-testdir3730155136/syzkaller.BgKjnz/143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 645.764321][ T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 645.781564][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.916851][T10591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.926933][ T8] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 645.950582][ T7362] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.737925][T10613] loop0: detected capacity change from 0 to 8 [ 646.890272][T10613] SQUASHFS error: lzo decompression failed, data probably corrupt [ 646.898556][T10613] SQUASHFS error: Failed to read block 0x91: -5 [ 646.904816][T10613] SQUASHFS error: Unable to read metadata cache entry [8f] [ 646.912082][T10613] SQUASHFS error: Unable to read inode 0x11f [ 646.980463][T10615] loop3: detected capacity change from 0 to 512 [ 646.998439][T10615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 647.041011][T10615] EXT4-fs (loop3): 1 truncate cleaned up [ 647.047926][T10615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.123185][ T45] usb 5-1: USB disconnect, device number 12 [ 647.141175][ T51] bridge_slave_1: left allmulticast mode [ 647.207242][ T51] bridge_slave_1: left promiscuous mode [ 647.213189][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.238405][ T51] bridge_slave_0: left allmulticast mode [ 647.254391][ T51] bridge_slave_0: left promiscuous mode [ 647.267029][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.409535][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.766260][ T53] Bluetooth: hci0: command tx timeout [ 647.782788][T10618] loop3: detected capacity change from 0 to 32768 [ 647.792653][T10618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10618) [ 647.815726][T10618] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.826110][T10618] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 647.834839][T10618] BTRFS info (device loop3): using free-space-tree [ 648.558969][T10637] loop4: detected capacity change from 0 to 128 [ 648.606242][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 649.853521][ T53] Bluetooth: hci0: command tx timeout [ 650.007881][T10637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 650.020584][T10637] ext4 filesystem being mounted at /root/syzkaller-testdir3045702179/syzkaller.McvWku/91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 650.169562][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 650.348150][ T8409] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.434899][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.494611][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.558370][ T51] bond0 (unregistering): Released all slaves [ 650.901217][T10597] chnl_net:caif_netlink_parms(): no params data found [ 651.630776][T10645] loop3: detected capacity change from 0 to 32768 [ 651.850728][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 651.911191][ T53] Bluetooth: hci0: command tx timeout [ 651.939783][ T51] hsr_slave_0: left promiscuous mode [ 651.978067][T10645] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 652.020160][ T51] hsr_slave_1: left promiscuous mode [ 652.041640][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.055285][T10645] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 652.067443][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.100173][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.120954][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.133580][T10645] bcachefs (loop3): alloc_read... done [ 652.176225][T10645] bcachefs (loop3): stripes_read... done [ 652.191413][T10645] bcachefs (loop3): snapshots_read... done [ 652.200005][ T51] veth1_macvtap: left promiscuous mode [ 652.215213][T10645] bcachefs (loop3): journal_replay... done [ 652.237252][ T51] veth0_macvtap: left promiscuous mode [ 652.241822][T10645] bcachefs (loop3): resume_logged_ops... done [ 652.253054][ T51] veth1_vlan: left promiscuous mode [ 652.275683][ T51] veth0_vlan: left promiscuous mode [ 652.280474][T10645] bcachefs (loop3): going read-write [ 652.300009][T10645] bcachefs (loop3): done starting filesystem [ 652.422730][ T8444] bcachefs (loop3): shutting down [ 652.486139][ T8444] bcachefs (loop3): going read-only [ 652.491598][ T8444] bcachefs (loop3): finished waiting for writes to stop [ 652.544907][ T8444] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 652.567231][ T8444] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 652.604576][ T8444] bcachefs (loop3): shutdown complete, journal seq 11 [ 652.647272][ T8444] bcachefs (loop3): marking filesystem clean [ 652.789812][ T8444] bcachefs (loop3): shutdown complete [ 653.803687][T10678] loop4: detected capacity change from 0 to 1024 [ 653.986528][ T53] Bluetooth: hci0: command tx timeout [ 654.352405][T10683] loop4: detected capacity change from 0 to 64 [ 654.659171][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.312468][T10696] loop3: detected capacity change from 0 to 8 [ 655.366324][T10696] SQUASHFS error: lzo decompression failed, data probably corrupt [ 655.374403][T10696] SQUASHFS error: Failed to read block 0x91: -5 [ 655.380839][T10696] SQUASHFS error: Unable to read metadata cache entry [8f] [ 655.388689][T10696] SQUASHFS error: Unable to read inode 0x11f [ 656.064228][ T51] team0 (unregistering): Port device team_slave_1 removed [ 656.227729][ T51] team0 (unregistering): Port device team_slave_0 removed [ 657.182583][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.192423][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.204198][T10597] bridge_slave_0: entered allmulticast mode [ 657.297620][T10597] bridge_slave_0: entered promiscuous mode [ 657.315492][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.336186][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.343472][T10597] bridge_slave_1: entered allmulticast mode [ 657.376834][T10597] bridge_slave_1: entered promiscuous mode [ 657.700388][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.750956][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.092872][T10705] loop0: detected capacity change from 0 to 8 [ 658.396295][T10705] SQUASHFS error: lzo decompression failed, data probably corrupt [ 658.404339][T10705] SQUASHFS error: Failed to read block 0x91: -5 [ 658.410745][T10705] SQUASHFS error: Unable to read metadata cache entry [8f] [ 658.418080][T10705] SQUASHFS error: Unable to read inode 0x11f [ 658.464518][ T53] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 658.471862][ T53] Bluetooth: Wrong link type (-22) [ 658.485279][ T53] Bluetooth: hci5: link tx timeout [ 658.747079][ T53] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.944296][T10597] team0: Port device team_slave_0 added [ 659.075026][T10597] team0: Port device team_slave_1 added [ 659.878001][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.910177][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.980134][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.056402][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.063398][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.105712][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.274765][T10597] hsr_slave_0: entered promiscuous mode [ 660.416497][T10597] hsr_slave_1: entered promiscuous mode [ 660.788238][T10283] Bluetooth: hci5: command 0x0406 tx timeout [ 661.442719][T10597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.480133][T10597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.521295][T10597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.555059][T10597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.819052][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.881442][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.930682][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.937976][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.016271][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.023501][T10401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.202378][T10726] loop3: detected capacity change from 0 to 64 [ 662.562725][T10736] loop3: detected capacity change from 0 to 512 [ 662.582779][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.608300][T10736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.683567][T10736] EXT4-fs (loop3): 1 truncate cleaned up [ 662.704225][T10736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.814728][T10597] veth0_vlan: entered promiscuous mode [ 662.888736][T10597] veth1_vlan: entered promiscuous mode [ 663.255208][T10743] loop0: detected capacity change from 0 to 512 [ 663.444028][T10743] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 663.452859][T10743] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 663.466560][T10743] EXT4-fs (loop0): 1 truncate cleaned up [ 663.477878][T10743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.549543][T10743] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 663.609049][T10597] veth0_macvtap: entered promiscuous mode [ 663.828219][T10597] veth1_macvtap: entered promiscuous mode [ 663.940001][ T7362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.940090][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.002468][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.029054][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.052491][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.087228][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.112275][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.142798][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.166481][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.179401][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.219177][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.250575][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.271124][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.289433][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.306112][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.322716][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.334579][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.351161][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.364524][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.380590][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.406182][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.443848][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.488791][T10597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.507679][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 664.524003][T10597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.533211][T10597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.559624][T10597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.727892][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.753338][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.888557][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.915686][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.703044][T10750] loop3: detected capacity change from 0 to 40427 [ 665.744366][T10750] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 665.762908][T10750] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 665.804630][T10750] F2FS-fs (loop3): invalid crc value [ 665.854094][T10750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 666.001099][T10750] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 666.020716][T10750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 666.107486][T10752] loop1: detected capacity change from 0 to 40427 [ 666.259443][T10752] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 666.297089][T10752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 666.416700][T10752] F2FS-fs (loop1): invalid crc value [ 666.489141][T10752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 666.746405][T10752] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 666.754173][T10752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 668.491239][T10772] loop3: detected capacity change from 0 to 8 [ 668.519847][T10772] SQUASHFS error: lzo decompression failed, data probably corrupt [ 668.528031][T10772] SQUASHFS error: Failed to read block 0x91: -5 [ 668.534335][T10772] SQUASHFS error: Unable to read metadata cache entry [8f] [ 668.541677][T10772] SQUASHFS error: Unable to read inode 0x11f [ 670.244507][T10784] loop1: detected capacity change from 0 to 8 [ 670.254817][T10784] SQUASHFS error: lzo decompression failed, data probably corrupt [ 670.262883][T10784] SQUASHFS error: Failed to read block 0x91: -5 [ 670.269253][T10784] SQUASHFS error: Unable to read metadata cache entry [8f] [ 670.276640][T10784] SQUASHFS error: Unable to read inode 0x11f [ 671.800859][T10795] loop1: detected capacity change from 0 to 512 [ 671.886204][T10795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 671.989936][T10795] EXT4-fs (loop1): 1 truncate cleaned up [ 672.017275][T10795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.889722][T10597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.486294][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 674.103197][T10815] loop3: detected capacity change from 0 to 512 [ 674.210509][T10815] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 674.238859][T10815] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 674.356457][T10815] EXT4-fs (loop3): 1 truncate cleaned up [ 674.397650][T10815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.783932][T10815] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 675.487536][ T29] audit: type=1800 audit(1719191418.499:131): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1967 res=0 errno=0 [ 675.599767][ T29] audit: type=1804 audit(1719191418.599:132): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir493399122/syzkaller.6v3yNN/19/bus/file0" dev="sda1" ino=1967 res=1 errno=0 [ 676.356340][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.542712][T10821] loop3: detected capacity change from 0 to 64 [ 677.979539][T10827] loop3: detected capacity change from 0 to 256 [ 678.102769][T10827] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 678.130332][ T53] Bluetooth: hci2: unexpected event 0x09 length: 13 > 3 [ 678.136687][T10827] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 678.307642][ T29] audit: type=1804 audit(1719191421.319:133): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1072714658/syzkaller.VsZqDK/102/file2/bus" dev="loop3" ino=1048730 res=1 errno=0 [ 679.059235][T10830] loop3: detected capacity change from 0 to 8192 [ 679.081790][T10830] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 679.580775][T10832] loop3: detected capacity change from 0 to 4096 [ 679.630641][T10832] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 679.736155][T10832] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 682.706656][ T5415] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 683.528989][ T2819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.721032][ T2819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.940830][ T2819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.165418][T10283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 684.184700][T10283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.196682][T10283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 684.223995][T10283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 684.255171][T10283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 684.266585][T10283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.329895][ T2819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.011706][T10852] loop3: detected capacity change from 0 to 32768 [ 685.047350][T10852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10852) [ 685.074675][T10852] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 685.106261][T10852] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 685.136293][ T2819] bridge_slave_1: left allmulticast mode [ 685.142039][ T2819] bridge_slave_1: left promiscuous mode [ 685.147764][T10852] BTRFS info (device loop3): using free-space-tree [ 685.158021][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.193870][ T2819] bridge_slave_0: left allmulticast mode [ 685.217132][ T2819] bridge_slave_0: left promiscuous mode [ 685.257033][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.500372][ T29] audit: type=1800 audit(1719191428.509:134): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=264 res=0 errno=0 [ 685.546149][ T29] audit: type=1804 audit(1719191428.529:135): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1072714658/syzkaller.VsZqDK/106/file0/bus/file0" dev="loop3" ino=264 res=1 errno=0 [ 685.638446][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 686.156744][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.165370][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.436808][ T53] Bluetooth: hci1: command tx timeout [ 686.518745][T10870] loop3: detected capacity change from 0 to 40427 [ 686.546235][T10870] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 686.554018][T10870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 686.569338][T10870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 686.667778][T10870] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 686.674870][T10870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 688.466208][ T53] Bluetooth: hci1: command tx timeout [ 688.820364][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.864160][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.917826][ T2819] bond0 (unregistering): Released all slaves [ 688.988215][T10847] chnl_net:caif_netlink_parms(): no params data found [ 690.144207][ T2819] hsr_slave_0: left promiscuous mode [ 690.151292][ T2819] hsr_slave_1: left promiscuous mode [ 690.276690][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.284177][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.373534][ T2819] veth1_macvtap: left promiscuous mode [ 690.406151][ T2819] veth0_macvtap: left promiscuous mode [ 690.429692][ T2819] veth1_vlan: left promiscuous mode [ 690.447178][ T2819] veth0_vlan: left promiscuous mode [ 690.546134][ T53] Bluetooth: hci1: command tx timeout [ 690.788343][T10898] loop3: detected capacity change from 0 to 32768 [ 690.953627][T10898] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 691.006159][T10898] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 691.138538][T10898] bcachefs (loop3): alloc_read... done [ 691.144118][T10898] bcachefs (loop3): stripes_read... done [ 691.152651][T10898] bcachefs (loop3): snapshots_read... done [ 691.165743][T10898] bcachefs (loop3): journal_replay... done [ 691.178636][T10898] bcachefs (loop3): resume_logged_ops... done [ 691.190288][T10898] bcachefs (loop3): going read-write [ 691.215517][T10898] bcachefs (loop3): done starting filesystem [ 692.531837][ T8444] bcachefs (loop3): shutting down [ 692.537210][ T8444] bcachefs (loop3): going read-only [ 692.563032][ T8444] bcachefs (loop3): finished waiting for writes to stop [ 692.626365][ T5109] Bluetooth: hci1: command tx timeout [ 692.646242][ T8444] bcachefs (loop3): flushing journal and stopping allocators, journal seq 14 [ 692.668688][ T8444] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 692.689037][ T8444] bcachefs (loop3): shutdown complete, journal seq 16 [ 692.696841][ T8444] bcachefs (loop3): marking filesystem clean [ 692.802876][ T8444] bcachefs (loop3): shutdown complete [ 693.116132][ T5152] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 693.284130][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 693.358360][ T5152] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 693.386153][ T5152] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.406085][ T5152] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.447233][ T5152] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 693.447264][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 693.486982][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.611200][ T5152] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 694.696290][T10925] loop3: detected capacity change from 0 to 32768 [ 694.719534][T10925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10925) [ 694.769065][T10925] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.786236][T10925] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 694.806357][T10925] BTRFS info (device loop3): using free-space-tree [ 694.987260][T10847] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.003120][T10847] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.013084][T10847] bridge_slave_0: entered allmulticast mode [ 695.020671][T10847] bridge_slave_0: entered promiscuous mode [ 695.036923][ T7362] bridge0: port 3(syz_tun) entered disabled state [ 695.126335][ T29] audit: type=1800 audit(1719191438.129:136): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=264 res=0 errno=0 [ 695.170504][ T7362] syz_tun (unregistering): left allmulticast mode [ 695.196254][ T7362] syz_tun (unregistering): left promiscuous mode [ 695.202717][ T7362] bridge0: port 3(syz_tun) entered disabled state [ 695.206147][ T29] audit: type=1804 audit(1719191438.199:137): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1072714658/syzkaller.VsZqDK/111/file0/bus/file0" dev="loop3" ino=264 res=1 errno=0 [ 695.258107][ T8] usb 3-1: USB disconnect, device number 8 [ 695.263712][T10847] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.294280][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 695.309094][T10847] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.336288][T10847] bridge_slave_1: entered allmulticast mode [ 695.343786][T10847] bridge_slave_1: entered promiscuous mode [ 695.404646][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.417791][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.553669][T10847] team0: Port device team_slave_0 added [ 695.603024][T10847] team0: Port device team_slave_1 added [ 695.720847][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.729309][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.806060][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.891170][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.921956][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.992037][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.131414][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.220740][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.306788][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.333628][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.348789][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 696.365482][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.763290][T10847] hsr_slave_0: entered promiscuous mode [ 696.886663][T10847] hsr_slave_1: entered promiscuous mode [ 696.909514][T10847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.931690][T10847] Cannot create hsr debugfs directory [ 697.232152][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.409185][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.477389][ T5149] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 697.565163][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.676200][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 697.683216][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.706048][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.726096][ T5149] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 697.746084][ T5149] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 697.761873][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.769909][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.837039][ T5149] usb 4-1: config 0 descriptor?? [ 698.143197][T10945] chnl_net:caif_netlink_parms(): no params data found [ 698.250597][ T5149] microsoft 0003:045E:07DA.0005: report is too long [ 698.281648][ T5149] microsoft 0003:045E:07DA.0005: item 0 4 0 8 parsing failed [ 698.317857][ T5149] microsoft 0003:045E:07DA.0005: parse failed [ 698.324060][ T5149] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 698.406883][ T35] bridge_slave_1: left allmulticast mode [ 698.412579][ T35] bridge_slave_1: left promiscuous mode [ 698.418436][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.436983][ T35] bridge_slave_0: left allmulticast mode [ 698.442675][ T35] bridge_slave_0: left promiscuous mode [ 698.451997][ T5152] usb 4-1: USB disconnect, device number 8 [ 698.466358][ T5109] Bluetooth: hci3: command tx timeout [ 698.474794][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.968024][T10967] fuse: Unknown parameter '0x0000000000000009' [ 699.986831][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.023379][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.051091][ T35] bond0 (unregistering): Released all slaves [ 700.395664][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.429102][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.466803][T10945] bridge_slave_0: entered allmulticast mode [ 700.476164][T10945] bridge_slave_0: entered promiscuous mode [ 700.546195][ T5109] Bluetooth: hci3: command tx timeout [ 700.619280][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.643105][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.656295][T10945] bridge_slave_1: entered allmulticast mode [ 700.677196][T10945] bridge_slave_1: entered promiscuous mode [ 700.696290][T10847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 700.738472][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.914409][T10847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 700.940247][T10847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.001649][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.033985][T10847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 701.113513][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.284837][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.295732][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.305963][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.321758][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.356916][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 701.366233][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.509535][ T35] hsr_slave_0: left promiscuous mode [ 701.516925][ T35] hsr_slave_1: left promiscuous mode [ 701.533334][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.571706][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.593464][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.613552][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.662544][ T35] veth1_macvtap: left promiscuous mode [ 701.683955][ T35] veth0_macvtap: left promiscuous mode [ 701.696492][ T35] veth1_vlan: left promiscuous mode [ 701.701872][ T35] veth0_vlan: left promiscuous mode [ 701.720374][T10974] loop3: detected capacity change from 0 to 32768 [ 701.756459][T10974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10974) [ 701.790506][T10974] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 701.811113][T10974] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 701.828908][T10974] BTRFS info (device loop3): using free-space-tree [ 701.976547][T10974] BTRFS info (device loop3): checking UUID tree [ 702.573558][ T8444] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 702.639084][ T53] Bluetooth: hci3: command tx timeout [ 703.428246][ T53] Bluetooth: hci0: command tx timeout [ 703.483585][ T35] team0 (unregistering): Port device team_slave_1 removed [ 703.988880][ T35] team0 (unregistering): Port device team_slave_0 removed [ 704.713733][ T53] Bluetooth: hci3: command tx timeout [ 705.062942][T10945] team0: Port device team_slave_0 added [ 705.196506][T10945] team0: Port device team_slave_1 added [ 705.307131][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.328399][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.386066][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.411405][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.421920][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.466250][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.506230][ T53] Bluetooth: hci0: command tx timeout [ 705.688580][T10945] hsr_slave_0: entered promiscuous mode [ 705.706525][T10945] hsr_slave_1: entered promiscuous mode [ 705.713172][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.720938][T10945] Cannot create hsr debugfs directory [ 705.870852][T11008] batadv_slave_0: entered promiscuous mode [ 705.998742][T10847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.226274][ T5111] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 706.343307][T10847] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.407745][ T5111] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 706.427744][ T5111] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 706.447568][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.454744][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.467326][ T5111] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.488251][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.495452][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.515211][ T5111] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 706.525664][ T5111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.540683][T10976] chnl_net:caif_netlink_parms(): no params data found [ 706.563734][ T5111] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 706.750762][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.795827][ T8] usb 4-1: USB disconnect, device number 9 [ 706.869103][T11006] batadv_slave_0: left promiscuous mode [ 706.940650][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.134068][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.208899][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.223653][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.231735][T10976] bridge_slave_0: entered allmulticast mode [ 707.241705][T10976] bridge_slave_0: entered promiscuous mode [ 707.281293][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.327939][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.335279][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.353434][T10976] bridge_slave_1: entered allmulticast mode [ 707.373452][T10976] bridge_slave_1: entered promiscuous mode [ 707.520154][T10976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.533395][T10976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.595043][ T5109] Bluetooth: hci0: command tx timeout [ 708.373949][T10976] team0: Port device team_slave_0 added [ 708.395887][T11020] loop3: detected capacity change from 0 to 512 [ 708.436572][T11020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 708.496560][T11020] EXT4-fs (loop3): orphan cleanup on readonly fs [ 708.565965][T10976] team0: Port device team_slave_1 added [ 708.598661][T11020] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 264: padding at end of block bitmap is not set [ 708.631262][T11020] EXT4-fs (loop3): Remounting filesystem read-only [ 708.646643][T11020] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 708.682985][T11020] EXT4-fs (loop3): 1 truncate cleaned up [ 708.707750][T11020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 708.720534][ T5109] Bluetooth: hci5: command 0x0406 tx timeout [ 708.745217][ T35] bridge_slave_1: left allmulticast mode [ 708.780880][ T35] bridge_slave_1: left promiscuous mode [ 708.806819][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.829667][ T35] bridge_slave_0: left allmulticast mode [ 708.832916][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.836740][ T35] bridge_slave_0: left promiscuous mode [ 708.859808][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.038490][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 709.581820][T11027] loop3: detected capacity change from 0 to 32768 [ 709.619998][T11027] ERROR: (device loop3): diAllocBit: iag inconsistent [ 709.619998][T11027] [ 709.641793][T11027] ERROR: (device loop3): remounting filesystem as read-only [ 709.655580][T11027] ialloc: diAlloc returned -5! [ 709.666318][ T53] Bluetooth: hci0: command tx timeout [ 709.929553][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.981919][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.006973][ T35] bond0 (unregistering): Released all slaves [ 710.036960][T10976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.043953][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.135615][T10976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.210599][T10976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.239260][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.296405][T10976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.358280][T10847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.365390][T10945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.616477][T10945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.640151][T10945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.709481][T10976] hsr_slave_0: entered promiscuous mode [ 710.747073][T10976] hsr_slave_1: entered promiscuous mode [ 710.773746][T11029] loop3: detected capacity change from 0 to 32768 [ 710.786270][T10976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.793878][T10976] Cannot create hsr debugfs directory [ 710.809932][T10945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.896776][T11029] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 711.000332][ T35] hsr_slave_0: left promiscuous mode [ 711.024444][ T35] hsr_slave_1: left promiscuous mode [ 711.056515][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.063981][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.093272][T11029] XFS (loop3): Ending clean mount [ 711.116934][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.124513][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.155447][ T35] veth1_macvtap: left promiscuous mode [ 711.175235][ T35] veth0_macvtap: left promiscuous mode [ 711.181209][ T35] veth1_vlan: left promiscuous mode [ 711.196347][ T35] veth0_vlan: left promiscuous mode [ 711.247560][T11044] fuse: Unknown parameter '0x000000000000000a' [ 711.422229][ T8444] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 712.114976][T11054] loop3: detected capacity change from 0 to 256 [ 712.137310][T11054] exfat: Unknown parameter 'ÿÿÿÿ' [ 712.611780][ T35] team0 (unregistering): Port device team_slave_1 removed [ 712.715024][ T29] audit: type=1326 audit(1719191455.719:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d647d0a9 code=0x0 [ 712.738171][ T35] team0 (unregistering): Port device team_slave_0 removed [ 712.775578][T11059] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 712.783978][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 714.282761][T10847] veth0_vlan: entered promiscuous mode [ 714.424268][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.451276][T10847] veth1_vlan: entered promiscuous mode [ 714.459944][ T29] audit: type=1800 audit(1719191457.469:139): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1949 res=0 errno=0 [ 714.570799][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.629847][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.637061][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.660442][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.667657][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.681717][T10847] veth0_macvtap: entered promiscuous mode [ 714.719931][T10847] veth1_macvtap: entered promiscuous mode [ 714.763669][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.786227][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.806366][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.826170][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.836994][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.867066][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.890371][T10847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.991447][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.008048][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.031513][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.059499][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.069585][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.096407][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.108671][T10847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.120164][T10847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.129132][T10847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.137879][T10847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.176778][T10847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.359593][T11066] loop3: detected capacity change from 0 to 128 [ 715.378057][T11066] efs: Unknown parameter 'euid' [ 715.465670][ T5415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.470504][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.487043][ T5415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.557365][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.565235][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.573458][T10976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.627467][T10976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.640154][T10976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.655869][T10976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.151436][T11078] loop4: detected capacity change from 0 to 128 [ 717.746692][ T30] INFO: task syz-executor.2:9683 blocked for more than 147 seconds. [ 717.754713][ T30] Not tainted 6.10.0-rc4-syzkaller-00330-g7c16f0a4ed1c #0 [ 717.762804][ T29] audit: type=1326 audit(1719191459.319:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11071 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d647d0a9 code=0x0 2024/06/24 01:11:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 717.809202][ T53] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 717.822803][ T53] Bluetooth: Wrong link type (-22) [ 717.868027][T11078] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 717.870779][T11078] EXT4-fs: failed to create workqueue [ 717.886144][T11078] EXT4-fs (loop4): mount failed [ 717.918007][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.929240][T11079] loop3: detected capacity change from 0 to 32768 [ 717.953547][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.962687][ T30] task:syz-executor.2 state:D stack:26112 pid:9683 tgid:9669 ppid:8616 flags:0x00000006 [ 717.973508][ T30] Call Trace: [ 717.976899][ T30] [ 717.979852][ T30] __schedule+0x1796/0x49d0 [ 717.984411][ T30] ? __pfx___schedule+0x10/0x10 [ 718.006066][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.023106][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 718.036181][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.042568][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 718.076190][ T30] ? schedule+0x90/0x320 [ 718.080518][ T30] schedule+0x14b/0x320 [ 718.084706][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.116428][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 718.122242][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 718.146797][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 718.153666][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 718.170011][ T30] __down_write_common+0x1af/0x200 [ 718.181356][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 718.196238][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 718.201597][ T30] ? __pfx___down_write_common+0x10/0x10 [ 718.216088][ T30] filename_create+0x260/0x540 [ 718.225262][ T30] ? __pfx_filename_create+0x10/0x10 [ 718.233739][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.241039][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.256053][ T30] ? __virt_addr_valid+0x183/0x520 [ 718.261249][ T30] do_mknodat+0x18b/0x5b0 [ 718.265611][ T30] ? __pfx_do_mknodat+0x10/0x10 [ 718.286129][ T30] ? getname_flags+0x1fe/0x4f0 [ 718.290976][ T30] __x64_sys_mknod+0x8e/0xa0 [ 718.295590][ T30] do_syscall_64+0xf3/0x230 [ 718.316071][ T30] ? clear_bhb_loop+0x35/0x90 [ 718.320827][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.322749][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.336783][ T30] RIP: 0033:0x7f2c89c7d0a9 [ 718.341245][ T30] RSP: 002b:00007f2c8a9730c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 718.366113][ T30] RAX: ffffffffffffffda RBX: 00007f2c89db4050 RCX: 00007f2c89c7d0a9 [ 718.375964][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.376139][ T30] RDX: 0000000000000705 RSI: 0000000000000000 RDI: 0000000020000000 [ 718.383134][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.416238][ T30] RBP: 00007f2c89cec074 R08: 0000000000000000 R09: 0000000000000000 [ 718.424274][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.446699][ T30] R13: 000000000000006e R14: 00007f2c89db4050 R15: 00007ffc81fe8188 [ 718.454861][ T30] [ 718.471443][T11079] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 718.471819][T11079] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 718.472518][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.496130][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.500083][ T30] INFO: task syz-executor.2:9686 blocked for more than 148 seconds. [ 718.536215][ T30] Not tainted 6.10.0-rc4-syzkaller-00330-g7c16f0a4ed1c #0 [ 718.543911][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.596215][ T30] task:syz-executor.2 state:D stack:27568 pid:9686 tgid:9669 ppid:8616 flags:0x00000006 [ 718.643857][ T30] Call Trace: [ 718.647395][ T30] [ 718.650349][ T30] __schedule+0x1796/0x49d0 [ 718.654904][ T30] ? __pfx___schedule+0x10/0x10 [ 718.659913][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.665569][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 718.672304][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.679192][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 718.684351][ T30] ? schedule+0x90/0x320 [ 718.688650][ T30] schedule+0x14b/0x320 [ 718.692828][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.698817][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 718.704603][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 718.728123][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 718.734376][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 718.761543][ T30] __down_write_common+0x1af/0x200 [ 718.776533][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 718.781889][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 718.837572][ T30] ? __pfx___down_write_common+0x10/0x10 [ 718.843304][ T30] path_openat+0x7d3/0x3280 [ 718.902715][ T30] ? mark_lock+0x9a/0x350 [ 718.916587][ T30] ? mark_lock+0x9a/0x350 [ 718.921005][ T30] ? __pfx_path_openat+0x10/0x10 [ 718.955184][ T30] do_filp_open+0x235/0x490 [ 718.959852][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 718.964952][ T30] ? _raw_spin_unlock+0x28/0x50 [ 718.996121][ T30] ? alloc_fd+0x5a1/0x640 [ 719.000534][ T30] do_sys_openat2+0x13e/0x1d0 [ 719.005253][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.058683][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.063954][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 719.094801][ T30] ? lockdep_hardirqs_on+0x99/0x150 [