last executing test programs: 13.369511628s ago: executing program 1 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000500)=0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x40, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8, @ANYRES16, @ANYRESDEC], 0x1, 0x127f, &(0x7f0000005500)="$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") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x0, 0x0) r4 = dup2(r3, r2) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) 13.137838055s ago: executing program 4 (id=664): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 11.702637942s ago: executing program 3 (id=668): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f00000004c0)={0x40, 0x5, 0xc1, {0xc1, 0x24, "c3800f5b2d9dc2ca8d045d8b9567819f3a2f73604c8d62500ae654b303b6428ad8903b426784b338950b275e55fdd3f59c4000e4ecf5b4116eb0e86471d327d794d46dc80f73501d487c33851bcdf8f9eb754035177b62c6aba4bfeae173ac8a196135b99fc029743097d4590ef476a4940232791a8fc2b698c7b9052c90ebb2bcefd41c4b9107b3c3bd48bcc50a368c1012cba7ecf5757eae2861da6a2da92609b26e038acc370549c36788c877a6e4d22d7543fa71cdc2d137e30ea3d3bf"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000005c0)={0x40, 0x12, 0xda, "85de8bc03d13b63bca46383a7ffcf2ee0ef7d3bf0f69f80fcc6ca1f74f2578f2ec772529f5b0c17bc1e315f75ab8cfb9ec6fda55a4a436ed12f5e088cbedd5a05b2364dd5f231c45bf3e90c92353b728c450ae453ea1a53fc241f0d0cbe2819a48e7008e0e111b46e60774d5b926cb52ac78343f496eace0bab9d03c9c40044b31df84167459af685d87a85f1339b9e9521ac233c0df85848922b83d2c7e2256226eb10929a606f42194e0ecb680d92e88c88402244f128355f9a1964e4586a76d83a8e2283bbd33f3466674d5ae528d915d9499751650cac827"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.702046811s ago: executing program 4 (id=670): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c982257856bcdcf2fa02010000001f54fb934570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b76a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731ab1125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c6576ce7ca99caa49c031703a92fde1ab235728bf933e15c13dd3129ece4f41e5022aaa25badb06004dfbed8857ac81d84c063b8d9f6b4d8a8cb534002a24cd63590e34bccce76800c69b2f9be796b3f0066f08c1681a12bb1468653359ee1522c93c4a4bce2c37caaec0b1a56e0d1069f02cea23520437d3febe9b8622884e17bc29ba41bd38168697445c07ebdb3ae8ba04714c61e30277c041774147a127fdf8a589e11a2c3d90bd6a8dfe50cf4bfd4314600978060f57af1cdc7d4cccd24", @ANYRES16=0x0], 0x1, 0x5547, &(0x7f0000008d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x4008f510, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2401}) 11.689285512s ago: executing program 1 (id=671): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x659}, {@broadcast, 0x8000}, {@empty, 0x80000}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev, 0x9}, {@multicast2, 0x2000003}, {}, {@broadcast, 0x1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@loopback, @broadcast]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.764488925s ago: executing program 2 (id=673): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x84830, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRES16=0x0], 0x11, 0x6a0, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnDgbDVOY8VJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trd9UvebMPnE80+zzPPzDO/+c3LvkTWBPi/delU2vfTyaVTr9+p2mv35pbW7s3d6NWTjCdpJe1ukeJmUnyYXEx3yheqmc1wxbDt/Grx/OWPPln7uNtqZ2O86qUzPMD2bvZitZkynWSkKR/BpvHefLjxxjeqxXpmqoSd7CUO9ttoknKTHx3f6BmkHOlrDL3egcOj6L5v9ule/1PJkSQTvTe01W5n6+lHuKM93YtWn1wcAAAAcGAcfXA3uZPJ/Y4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpPm+f9FM7V69ekUvef/j/U9Y39sn8MdbvvIJnqV+62nEQwAAAAAAAAAPFlfepDfXi7LyV67LOr/83+5bhyrX5/JO7mdhSzndO5kPitZyXJmk0z1DTR2Z35lZXm2t+ZnZVkOWfPswDXP7jLgzuPYawAAAAAAAAD4n3GhKX+aS5nc51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTIhnpFvV0rFefSqudZCLJWLXcavL3Xv0wu7/fAQAAAMBTcPRBHuROJnvtsqi/8x+vv/dP5J3czEoWs5KlLORK/VtA91t/a+3e3NLavbkb1fT5cb/17436HyZ3DKMeMd3fHgZv+US9RCdXs1jPOZ0383aWciWtes3KiV48g+N6v4qpuNBVlrtL0JWmrPb8l015MEzVGRldz8hME1uVjWe3z0T/0XmILc2mtf7Lz7E95PzCtlsp/tM7Jkd6c5Jnvrdzzkf3tDOPZGsmzvadfce3z0TylT/+7ofXlm5ev1asnjo4p9EejP9z46rZmom5vky8uOtMXL19ODOxVSsvrNcv5bv5QU5lOm9kOYv5ceazkoVM5zt1bb45n6vXqe0zdXFT642dohhrjsvIlpi+fLRbbhfTy/W6k1nM9/N2rmQhr9X/zmY2X8+5nMv5viP8wi6u+taAq/5Pw4M/+dWm0knyi6Y8GKq8PtuX1/577lTd1z+nlXK8u95zj+3euK79xaZSHYmfNeXBsJ6Jiay/S/Sie76XgdGBmfh1fVu5vXTz+vK1+Vtbxi1WB2/vlWze/T3dSEb2svBeVefLc9XBqlubz46q7/mBfbN137H1vtbWvt901vt2ulLHms9wnx/pbN334sC+ubrvRF/fxuetz8qy7H7eAuDAO/LqkbHOvzp/63zQ+XnnWuf1iW+Pf2P8pbGM/nX0m+2ZkVdaLxW/zwf5SXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo9rvvXZ9fWlpY3lIpy/LukK4nUkk72TTnL3/uWyZJ/TCg3Q9YLX2xldRz2mkqewvs7sPtzvsPm4R/NMfkqST8sVQmhp4/WyuflmV5MGLeTaVsHJR4nkDl1bIst11mX29LwFNwZuXGrTO3333va4s35t9aeGvh5vlz587PnD/32tyZq4tLCzPd1/2OEngS+j6BAwAAAAAAAAAAAIfE7v44p3i0v+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeASXTqV9P0VmZ07PVO21e3NL1dSrbyz5aZJWkmI6KT5MLqY7ZapvuGLYdlaTyx99svZxt9Vupnr51nbr7c5qM2U6yUhTDjAxaGZ5d9h4RT3OreHjbTFsL4r1viphJ3uJg/323wAAAP//H4wcFQ==") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc27, 0x189301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020020011c0007006000000002000020d3"]) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x40000) fadvise64(0xffffffffffffffff, 0x3, 0x7, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x34}}, 0x0) 9.640084004s ago: executing program 1 (id=674): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x800003, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) 9.468100877s ago: executing program 1 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0xffff0000, 0x1, 0x4}) 9.193854088s ago: executing program 2 (id=677): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) 8.240453498s ago: executing program 1 (id=688): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x7e, 0xbb}}]}}]}}, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 8.103796788s ago: executing program 0 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) 8.089422309s ago: executing program 4 (id=680): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) 7.164806788s ago: executing program 0 (id=681): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000f00)={0x50, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000040) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 7.164620378s ago: executing program 2 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x7, 0x1, 0xff, 0x9, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.348569759s ago: executing program 4 (id=683): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0xff, 0x493, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x4) 6.218111078s ago: executing program 3 (id=684): socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) fanotify_init(0x4c, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x2000012, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x84a, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x28) 4.936868053s ago: executing program 2 (id=685): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r3, 0x5d801) read$FUSE(r3, &(0x7f0000002e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[], 0x28) 4.934964404s ago: executing program 0 (id=686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) 4.894258226s ago: executing program 4 (id=687): r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x200108cc, &(0x7f0000000140)=ANY=[@ANYBLOB=',errors=remount-ro,errors=continue,\x00', @ANYBLOB="8eee371aa4f77526fa8dd9b08d64127579dcb5500430e2d3b37ddcbf2e630f2b95d899d82386e933664e7ed6cc1cad9fe91d8c80206084e83221de248dd3e3921e1dc63fc02909340d4e032ad7e0546190e0531c6d5c6457edd791ed75894f680e9b34f2b8a235a0de9a0c661daec5aaa406bf692155b2a03fdfcc516b85cafc9ed8ffe209c785fbf2e4a50ee5fca2b4c63308cc469db59ce0666c66bcb303cf64d423f0aee683c3fc28fc18", @ANYRES16, @ANYRES64, @ANYBLOB='iocharset=iso8859-6,errors=continue,allow_utime=00000000000002000000006,uid=', @ANYRESHEX, @ANYRESHEX, @ANYRES32=r0], 0x0, 0x14fd, &(0x7f0000002ac0)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 3.561438735s ago: executing program 0 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 3.560191876s ago: executing program 2 (id=690): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d303030303030303025303030303030303030303030303735ef75c24e2c646973636172642c00"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20b0422, &(0x7f0000000300)={[{@prjquota}, {@norecovery}], [{@obj_user={'obj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") capset(&(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.548767236s ago: executing program 1 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000a80), &(0x7f0000000040)=@tcp6=r4}, 0x20) 3.273998587s ago: executing program 3 (id=692): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) 2.236772854s ago: executing program 0 (id=693): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc43, &(0x7f00000011c0)="$eJzs3U9sHOd9N/DfM1qKK/l9KyZ2FCeNi01bpLJiufoXU7EKd1XTbAPIshCKuQXgiqTUhSmSIKlGNtKC6aWHHgIURQ85EWiNAikaGE0R9Mi0LpBcfChy6oloYSMoemCLADkFLGb2WXFJkRYjkhJlfT429Z2dfZ6Z55lZzVAEn3kCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4vdcunT6THnUrAICH6crIV0+fdf8HgCfKNf/+BwAAAAAAAAAAAACAgy5FEU9Hitkrq2mset1Rv9zuu31ndGh462pHUlXzUFW+/KqfOXvu/JdeGrzQzcvt6Y+ov9c+G2+MXLvUeHXm1uzc5Pz85ERjdLo9PjMxueMt7Lb+ZierA9C49ebtiRs35htnXzy34e07Ax/2P3V84OLg86ee65YdHRoeHlkvUu8tX3vghnRsN8LjcBRxKlK88L2fplZEFLH7Y1F/uOd+syNVJ05WnRgdGq46MtVuTS+Ub17tHogiotFTqdk9Rlufi6j1PdQ+bK8ZsVg2v2zwybJ7I7Otudb1qcnG1dbcQnuhPTN9NXVaW/anEUVcSBFLEbHSf+/m+qKIWqT4zrHVdD0iDnWPwxergcHbt6PYxz7uQNnORl/EUvEYnLMDrD+KeD1S/Oy9EzGerzPVteYLEa+X+YOId8p8JSKVH4zzER9s8Tni8VSLIv68PP8XV9NEdT3oXlcuf63xlekbMz1lu9eVX/L+cM+V4hHdH45syofjgF+b6lFEq7rir6YH/2YHAAAAAAAAAAAAAAAAgL12JIr4TKR47d/+qBpXHNW49GMXB39/4P/3jhl/9j7bKcu+GBGLxc7G5B7OAwOvpqspPeKxxE+yehTxx3n837cedWMAAAAAAAAAAAAAAAAAAACeaEX8JFK8/P6JtBS9c4q3p282rrWuT3Vmhe3O/dudM31tbW2tkTrZzDmWczHnUs7lnCs5o8j1czZzjuVczLmUcznnSs44lOvnbOYcy7mYcynncs6VnFHL9XM2c47lXMy5lHM550rOOCBz9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJwUUcQvIsW3v7GaIkVEM2IsOrnc/6hbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU+lMR348UjT9o3l1Xi4hU/d9xovzjfDQPl/nJaA6W+Uo0L+VsVVlrfusRtJ/d6UtF/DhS9NffvXvC8/nv67y6+zGId765/uqztU4e6r45UETEsYuDw7/2bAx82P/U8XuX01YNOHm5PX37TmN0aHh4pGd1Le/9kz3rBvJ+i73pOhEx/9bbb7ampibnHnyh/AjsovpjtJBqT0pPLVQLUTsQzXgIC/35etDTd54A5f3/g0jx2+//e/eG37n/1+P/dV7dvcPHz/9k/f7/8uYNbXPP33z/r22ul+//5T19q/v/0z3rXs7fjfTVIuoLt2b7jkfU5996+1T7Vuvm5M3J6fOnT395cPDL5073HY6o32hPTfYs7cnhAgAAAAAAAAAAAAAAAHh4UhG/GylaP15NjYi4U43XGrg4+Pyp5w7FoWq81YZx22+MXLvUeHXm1uzc5Pz85ERjdLo9PjMxudPd1avhXqNDw/vSmfs6ss/tP1J/dWb2rbn2zT9c2PL9o/VL1+cX5lrjW78dR6KIaPauOVk1eHRouGr0VLs1XVW9uuVg+l9eXyriPyLF+PlG+nxel8f/bx7hv2H8/+LmDe1w/N897jP+/xM968p9plTEzyPFb/3Fs/H5qp1H455jlsv9TaQ4eeFzuVwcLst129B5rkBnZGBZ9n8ixT/8YmPZ7njIp9fLntnxgX1MlOf/WKT4/p99N349r9v4/Ietz//RzRval/Nfj2d61h3d8LyCPeg81fk/FSleefrd+I287qOe/9F99saJXPju8zn26e//p3rWDeT9/ubedB0AAAAAAAAAAOCx1peK+NtI8cPhWnopr9vJ7/9NbN7QPv3+16d71k3szXxF913Y9UEFAAAAgAOiLxXxk0hxc+Hdu2OoN47/7hn/+Tvr4z+H0qZ3q5/z/Ur13IC9/Plfr4G837HddxsAAAAAAAAAAAAAAAAAAAAOlJSKeCnPpz5Wjeef2HY+9eVI8dp/vZDLpeNlue488APVn/UrM9OnLk1NzYy3FlrXpyYbI7Ot8cmy7jORYvWvP5frFtX86t355jtzvK/PxT4XKYb/rlu2Mxd7d27yZ9bLninLfiJS/Offbyzbncf6U+tlz5Zl/ypSfP2fti57fL3subLsdyPFj77e6JY9WpbtPh/10+tlXxyfKfbhrAAAAAAAAAAAAAAAAAAAAPCk6UtF/Gmk+O9bS3fH8uf5//t6Xlbe+WbPfP+b3Knm+R+o5v/fbvlB5v+vniuwuN1eAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4ylFEW9Hitkrq2m5v3zdUb/cnr59Z3RoeOtqR1JV81BVvvyqnzl77vyXXhq80M2Prr/XPhNvjFy71Hh15tbs3OT8/OREY3S6PT4zMbnjLey2/mYnqwPQuPXm7YkbN+YbZ188t+HtOwMf9j91fODi4POnnuuWHR0aHh7pKVPre+C93yNts/5wFPGXkeKF7/00/bA/oojdH4v7fHb225GqEyerTowODVcdmWq3phfKN692D0QR0eip1Oweo4dwLnalGbFYNr9s8MmyeyOzrbnW9anJxtXW3EJ7oT0zfTV1Wlv2pxFFXEgRSxGx0n/v5vqiiDcjxXeOraZ/7o841D0OX7wy8tXTZ7dvR7GPfdyBsp2Nvoil4jE4ZwdYfxTxj5HiZ++diH/pj6hF5yu+EPF6mT+IeCc65zuVH4zzER9s8Tni8VSLIv63PP8XV9N7/eX1oHtdufy1xlemb8z0lO29rpQe2/vDw3TAr031KOJH1RldTf/q7zUAAAAAAAAAAAAAAADAAVLEr0aKl98/karxwXfHFLenbzauta5PdYb1dcf+dcdMr62trTVSJ5s5x3Iu5lzKuZxzJWcUuX7OZpn1tbWx/Hox51LO5ZwrOeNQrp+zmXMs52LOpZzLOVdyRi3Xz9nMOZZzMedSzuWcKznjgIzdAwAAAAAAAAAAAAAAAAAAPl6K6r8U3/7Galrr78wvPRadXDYf6Mfe/wUAAP//n3DyMQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00') 1.350927439s ago: executing program 3 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000001700)='o', 0x1}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x7f, 0x0) 272.827529ms ago: executing program 2 (id=695): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) 228.511113ms ago: executing program 3 (id=696): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000900000000ff0300000000000008000100ac"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0x9, 0x100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.134108ms ago: executing program 0 (id=697): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0xeb8) 16.985088ms ago: executing program 4 (id=698): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) 0s ago: executing program 3 (id=699): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000dd2482ad4da9d0ae35a821557365d84a68bfdd55e9edb34f60d11837e57768a7cda393f98c27336f05834014174536cc7c806e4369d1c6566af57c447e44ca72da517b62b8cae803a913ce55af6741c724a13e593c5ea610aa5e8f45babd7553d6cec45a5f9daf2269be1a6c35f78307ea3c07865622e3213ce36b7940eb3c574a1769b1b0749c16cbe074453c6fa76200411cc9b812d1013997c5aa3eda8ec70000000000000000000"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x4207, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x0) kernel console output (not intermixed with test programs): 07.752448][ T26] usb 3-1: config 0 descriptor?? [ 107.814837][ T4143] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 107.814925][ T26] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 107.825075][ T4143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.839290][ T4143] usb 1-1: Product: syz [ 107.843459][ T4143] usb 1-1: Manufacturer: syz [ 107.848148][ T4143] usb 1-1: SerialNumber: syz [ 107.854941][ T4143] usb 1-1: config 0 descriptor?? [ 107.901792][ T4143] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 107.912887][ T26] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 107.939942][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 107.967599][ T3642] Bluetooth: hci5: command tx timeout [ 108.066016][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 108.126472][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 108.158844][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 108.180992][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 108.226461][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 108.265382][ T4143] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 108.300533][ T4143] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 108.390852][ T4433] device ip6gretap0 entered promiscuous mode [ 108.434438][ T4433] device ip6gretap0 left promiscuous mode [ 108.517203][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.526834][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.544995][ T4419] device bridge_slave_0 entered promiscuous mode [ 108.614491][ T3636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.640678][ T3636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.659264][ T3636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.678247][ T3681] usb 1-1: USB disconnect, device number 4 [ 108.687961][ T3636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.707915][ T3636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.716004][ T3681] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 108.734093][ T3636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.744732][ T3681] keyspan 1-1:0.0: device disconnected [ 108.785341][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.794919][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.807637][ T4419] device bridge_slave_1 entered promiscuous mode [ 108.942267][ T4419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.955163][ T4443] loop1: detected capacity change from 0 to 32768 [ 109.054413][ T4419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.092260][ T4443] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 109.115285][ T4443] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 109.257043][ T4443] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 109.273689][ T4419] team0: Port device team_slave_0 added [ 109.315171][ T4143] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 109.331847][ T4143] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 109.395807][ T4419] team0: Port device team_slave_1 added [ 109.434011][ T4143] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 109.446237][ T4143] gfs2: fsid=syz:syz.0: jid=0: Done [ 109.453265][ T4443] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 109.546449][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.558816][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.608660][ T947] usb 3-1: USB disconnect, device number 5 [ 109.687571][ T4419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.765410][ T4470] loop2: detected capacity change from 0 to 1024 [ 109.804973][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.823620][ T4470] EXT4-fs: Ignoring removed nobh option [ 109.863590][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.898740][ T4470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.906149][ T4419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.978808][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.048454][ T3642] Bluetooth: hci5: command tx timeout [ 110.139063][ T4470] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 110.163980][ T4470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.163980][ T4470] [ 110.184739][ T4470] EXT4-fs (loop2): Total free blocks count 0 [ 110.191441][ T4470] EXT4-fs (loop2): Free/Dirty block details [ 110.197847][ T4470] EXT4-fs (loop2): free_blocks=0 [ 110.214213][ T4470] EXT4-fs (loop2): dirty_blocks=0 [ 110.219737][ T4470] EXT4-fs (loop2): Block reservation details [ 110.229272][ T4470] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 110.251896][ T4419] device hsr_slave_0 entered promiscuous mode [ 110.270786][ T4419] device hsr_slave_1 entered promiscuous mode [ 110.296958][ T4419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.317102][ T4419] Cannot create hsr debugfs directory [ 110.436712][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 111.234037][ T4459] chnl_net:caif_netlink_parms(): no params data found [ 111.508174][ T3642] Bluetooth: hci2: command tx timeout [ 111.651826][ T4504] loop2: detected capacity change from 0 to 64 [ 112.052483][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.061801][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.072955][ T4459] device bridge_slave_0 entered promiscuous mode [ 112.086821][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.099315][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.131680][ T4459] device bridge_slave_1 entered promiscuous mode [ 112.139703][ T3642] Bluetooth: hci5: command tx timeout [ 112.783058][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.845357][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.048281][ T4517] devpts: called with bogus options [ 113.105487][ T4459] team0: Port device team_slave_0 added [ 113.135887][ T4459] team0: Port device team_slave_1 added [ 113.373940][ T4505] loop1: detected capacity change from 0 to 32768 [ 113.455870][ T4528] loop0: detected capacity change from 0 to 2048 [ 113.533732][ T3776] device batadv_slave_0 left promiscuous mode [ 113.577715][ T3642] Bluetooth: hci2: command tx timeout [ 113.647813][ T3776] device hsr_slave_0 left promiscuous mode [ 113.654521][ T3776] device hsr_slave_1 left promiscuous mode [ 113.674344][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.689699][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.697794][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.705308][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.713938][ T3776] device bridge_slave_1 left promiscuous mode [ 113.720301][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.731215][ T3776] device bridge_slave_0 left promiscuous mode [ 113.737493][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.782054][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.058753][ T4524] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 114.132304][ T4524] EXT4-fs (loop0): Remounting filesystem read-only [ 114.182259][ T4524] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.167: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 114.207704][ T3636] Bluetooth: hci5: command tx timeout [ 114.306591][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 114.326873][ T3776] device veth1_macvtap left promiscuous mode [ 114.345062][ T3776] device veth0_macvtap left promiscuous mode [ 114.367831][ T3776] device veth1_vlan left promiscuous mode [ 114.373676][ T3776] device veth0_vlan left promiscuous mode [ 114.596245][ T4553] loop0: detected capacity change from 0 to 16 [ 114.617793][ T4553] erofs: (device loop0): mounted with root inode @ nid 36. [ 115.674283][ T3636] Bluetooth: hci2: command tx timeout [ 116.089381][ T3776] team0 (unregistering): Port device team_slave_1 removed [ 116.357281][ T3776] team0 (unregistering): Port device team_slave_0 removed [ 116.653646][ T3776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.994481][ T4565] xt_bpf: check failed: parse error [ 117.326232][ T3776] bond0 (unregistering): Released all slaves [ 117.347664][ T4143] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.444185][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.468909][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.515215][ T4459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.620775][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.635409][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.662098][ T4459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.720843][ T4143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.732682][ T4143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.737853][ T3636] Bluetooth: hci2: command tx timeout [ 117.745919][ T4143] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 117.757546][ T4143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.770153][ T4143] usb 2-1: config 0 descriptor?? [ 117.807052][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 118.047029][ T4567] capability: warning: `syz.1.175' uses 32-bit capabilities (legacy support in use) [ 118.193196][ T4459] device hsr_slave_0 entered promiscuous mode [ 118.204292][ T4459] device hsr_slave_1 entered promiscuous mode [ 118.213428][ T4459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.227130][ T4459] Cannot create hsr debugfs directory [ 118.404503][ T4419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.469138][ T4419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.486192][ T4419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.520868][ T4143] logitech 0003:046D:C219.0002: invalid report_size 213086753 [ 118.557597][ T4143] logitech 0003:046D:C219.0002: item 0 4 1 7 parsing failed [ 118.585757][ T4143] logitech 0003:046D:C219.0002: parse failed [ 118.592833][ T4143] logitech: probe of 0003:046D:C219.0002 failed with error -22 [ 118.666433][ T3776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.702170][ T4419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.765454][ T4140] usb 2-1: USB disconnect, device number 4 [ 118.840049][ T3776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.943704][ T3776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.989370][ T4419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.055762][ T3776] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.110027][ T4419] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.117451][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.126355][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.154540][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.165760][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.177045][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.184195][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.203083][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.221367][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.235192][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.242355][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.260767][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.284557][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.299450][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.317230][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.423716][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.513571][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.529502][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.544550][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.619098][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.627442][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.644872][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.679193][ T4623] loop1: detected capacity change from 0 to 1024 [ 119.688269][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.714709][ T4611] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.726855][ T4623] EXT4-fs: Ignoring removed nobh option [ 119.728843][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.794526][ T4623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.943291][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.050636][ T4617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 120.224586][ T3970] EXT4-fs (loop1): unmounting filesystem. [ 120.289757][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 121.622250][ T4419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.838482][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.846085][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.046197][ T4459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.056141][ T4459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.066181][ T4459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.076226][ T4459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.219580][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.238038][ T4701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.197'. [ 124.238301][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.283511][ T4701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.197'. [ 124.386071][ T4419] device veth0_vlan entered promiscuous mode [ 124.405843][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.425386][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.456729][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.471941][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.549981][ T4419] device veth1_vlan entered promiscuous mode [ 124.714832][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.747632][ T4459] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.760764][ T4148] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.787447][ T4419] device veth0_macvtap entered promiscuous mode [ 124.815909][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.825422][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.037019][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.168799][ T4148] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 125.204033][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.235788][ T4148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.335124][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.406780][ T4148] usb 3-1: config 0 descriptor?? [ 125.542061][ T4148] gspca_main: spca508-2.14.0 probing 8086:0110 [ 125.549429][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.638144][ T4419] device veth1_macvtap entered promiscuous mode [ 125.666660][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.693525][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.706602][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.723467][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.734493][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.741685][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.787679][ T4148] gspca_spca508: reg_read err -32 [ 125.832524][ T4148] gspca_spca508: reg_read err -32 [ 125.897722][ T4148] gspca_spca508: reg_read err -32 [ 126.515457][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.552923][ T4705] overlayfs: invalid origin (0000) [ 126.617644][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.626422][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.676205][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.683414][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.712410][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.736455][ T4729] loop0: detected capacity change from 0 to 256 [ 126.746779][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.793154][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.802670][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.811866][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.821165][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.838066][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.848784][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.860484][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.096006][ T4729] FAT-fs (loop0): Directory bread(block 64) failed [ 127.165820][ T4729] FAT-fs (loop0): Directory bread(block 65) failed [ 127.182139][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.240765][ T4729] FAT-fs (loop0): Directory bread(block 66) failed [ 127.295660][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.352335][ T4729] FAT-fs (loop0): Directory bread(block 67) failed [ 127.537784][ T4729] FAT-fs (loop0): Directory bread(block 68) failed [ 127.544354][ T4729] FAT-fs (loop0): Directory bread(block 69) failed [ 127.551088][ T4148] gspca_spca508: reg write: error -110 [ 127.556782][ T4148] spca508: probe of 3-1:0.0 failed with error -110 [ 127.575282][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.595692][ T4729] FAT-fs (loop0): Directory bread(block 70) failed [ 127.611659][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.623160][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.639847][ T4729] FAT-fs (loop0): Directory bread(block 71) failed [ 127.646500][ T4729] FAT-fs (loop0): Directory bread(block 72) failed [ 127.662339][ T7] usb 3-1: USB disconnect, device number 6 [ 127.668259][ T4729] FAT-fs (loop0): Directory bread(block 73) failed [ 127.713787][ T3776] device hsr_slave_0 left promiscuous mode [ 127.740723][ T3776] device hsr_slave_1 left promiscuous mode [ 127.750361][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.759461][ T4729] autofs4:pid:4729:autofs_fill_super: called with bogus options [ 127.767655][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.777282][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.786888][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.801675][ T3776] device bridge_slave_1 left promiscuous mode [ 127.817678][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.829356][ T3776] device bridge_slave_0 left promiscuous mode [ 127.847014][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.964519][ T3776] device veth1_macvtap left promiscuous mode [ 127.992802][ T3776] device veth0_macvtap left promiscuous mode [ 128.009226][ T3776] device veth1_vlan left promiscuous mode [ 128.017638][ T3776] device veth0_vlan left promiscuous mode [ 128.034559][ T4738] loop0: detected capacity change from 0 to 1024 [ 128.267780][ T4734] loop1: detected capacity change from 0 to 40427 [ 128.298949][ T4734] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.319004][ T4734] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.485433][ T4734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.583182][ T4746] netlink: 64 bytes leftover after parsing attributes in process `syz.2.205'. [ 128.819150][ T4734] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.850842][ T4734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.051255][ T3776] team0 (unregistering): Port device team_slave_1 removed [ 130.205239][ T3776] team0 (unregistering): Port device team_slave_0 removed [ 130.315291][ T3776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.382425][ T3776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.881020][ T4763] loop1: detected capacity change from 0 to 32768 [ 131.884243][ T3776] bond0 (unregistering): Released all slaves [ 131.982358][ T4763] XFS (loop1): Mounting V5 Filesystem [ 131.992865][ T4765] loop2: detected capacity change from 0 to 32768 [ 132.007665][ T4765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.210 (4765) [ 132.017066][ T4763] XFS (loop1): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 132.037603][ T4765] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.058412][ T4765] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.067113][ T4765] BTRFS info (device loop2): using free space tree [ 132.082043][ T4763] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 132.101271][ T4763] XFS (loop1): log mount/recovery failed: error -22 [ 132.123242][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.142397][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.165505][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.174212][ T4763] XFS (loop1): log mount failed [ 132.194750][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.210028][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.227185][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.237905][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.248473][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.258330][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.270605][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.280693][ T4419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.293668][ T4419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.314984][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.324182][ T4738] netlink: 25 bytes leftover after parsing attributes in process `syz.0.204'. [ 132.347739][ T4738] device 00ªX¹¦Dö» entered promiscuous mode [ 132.413305][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.422628][ T4765] BTRFS info (device loop2): enabling ssd optimizations [ 132.436985][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.456614][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.493805][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.558557][ T4419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.567294][ T4419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.614951][ T4419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.637653][ T4419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.657036][ T3639] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.660413][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.688990][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.695315][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074525][ T3715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.088724][ T3715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.166700][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.503550][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.513509][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.556826][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.622249][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.634488][ T4813] loop2: detected capacity change from 0 to 512 [ 134.681644][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.697600][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.788409][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.847094][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.867683][ T4813] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 134.878783][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.898720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.907202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.916325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.924562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.980298][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 135.672095][ T4828] loop4: detected capacity change from 0 to 256 [ 135.705326][ T4828] exfat: Deprecated parameter 'namecase' [ 135.743750][ T4828] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 135.851513][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 135.865013][ T4459] device veth0_vlan entered promiscuous mode [ 135.922871][ T4459] device veth1_vlan entered promiscuous mode [ 136.104175][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.125162][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.173762][ T4459] device veth0_macvtap entered promiscuous mode [ 136.237766][ T4459] device veth1_macvtap entered promiscuous mode [ 136.535124][ T4837] loop1: detected capacity change from 0 to 2048 [ 136.952571][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.961182][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.961951][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.026537][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.113166][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.123740][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.134739][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.153955][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.177665][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.229913][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.254139][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.269823][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.295861][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.305219][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.388010][ T4848] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.994652][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.075659][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.135329][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.155259][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.166453][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.181529][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.193070][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.209092][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.234705][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.384545][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.434501][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.445745][ T3970] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.484083][ T4459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.521559][ T4459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.537624][ T4459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.546889][ T4459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.447855][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.455962][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.511675][ T4846] EXT4-fs (loop1): unmounting filesystem. [ 139.599844][ T3776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.642191][ T3776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.731160][ T3799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.801194][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.821974][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.018037][ T3799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.174682][ T3799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.402500][ T3799] team0: Port device netdevsim0 removed [ 140.444279][ T3799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.540453][ T947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.740554][ T3636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.750209][ T3636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.759299][ T3636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.767695][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.776633][ T3636] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.806904][ T3636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.977999][ T947] usb 5-1: Using ep0 maxpacket: 32 [ 141.138612][ T947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 141.318999][ T947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 141.638519][ T947] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 141.653870][ T4896] loop2: detected capacity change from 0 to 256 [ 141.659576][ T947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.719983][ T947] usb 5-1: Product: syz [ 141.724381][ T947] usb 5-1: Manufacturer: syz [ 141.743555][ T947] usb 5-1: SerialNumber: syz [ 141.821068][ T947] usb 5-1: config 0 descriptor?? [ 141.870447][ T947] hub 5-1:0.0: bad descriptor, ignoring hub [ 141.876384][ T947] hub: probe of 5-1:0.0 failed with error -5 [ 141.923257][ T947] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 141.965277][ T947] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 142.056002][ T947] usbtouchscreen: probe of 5-1:0.0 failed with error -90 [ 142.163549][ T947] usb 5-1: USB disconnect, device number 2 [ 142.258666][ T4883] chnl_net:caif_netlink_parms(): no params data found [ 142.848886][ T3636] Bluetooth: hci3: command tx timeout [ 143.917792][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.924930][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.994099][ T4883] device bridge_slave_0 entered promiscuous mode [ 144.009751][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.017179][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.036446][ T4883] device bridge_slave_1 entered promiscuous mode [ 144.100258][ T4155] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.178500][ T4941] loop0: detected capacity change from 0 to 512 [ 144.189224][ T4941] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 144.196991][ T4941] UDF-fs: Scanning with blocksize 512 failed [ 144.209552][ T4941] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 144.217194][ T4941] UDF-fs: Scanning with blocksize 1024 failed [ 144.245846][ T4941] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 144.253479][ T4941] UDF-fs: Scanning with blocksize 2048 failed [ 144.272907][ T4883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.273398][ T4941] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 144.296131][ T4941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.322647][ T4947] loop2: detected capacity change from 0 to 512 [ 144.324962][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 144.324973][ T27] audit: type=1800 audit(1725547920.861:67): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 144.383439][ T4947] EXT4-fs: Ignoring removed orlov option [ 144.401562][ T4947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.424482][ T4883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.454557][ T4947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.484193][ T4947] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.245: casefold flag without casefold feature [ 144.493426][ T4155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.499757][ T4947] EXT4-fs (loop2): Remounting filesystem read-only [ 144.515957][ T4947] EXT4-fs (loop2): 1 truncate cleaned up [ 144.521711][ T4155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.521741][ T4155] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.545028][ T4947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.587089][ T4155] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 144.590642][ T4883] team0: Port device team_slave_0 added [ 144.602914][ T4155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.633404][ T4883] team0: Port device team_slave_1 added [ 144.674264][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.687308][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.716768][ T4883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.732208][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.743756][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.801407][ T4155] usb 5-1: config 0 descriptor?? [ 144.806728][ T4883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.938771][ T3636] Bluetooth: hci3: command tx timeout [ 145.261193][ T4883] device hsr_slave_0 entered promiscuous mode [ 145.277904][ T4883] device hsr_slave_1 entered promiscuous mode [ 145.284618][ T4883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.337755][ T4883] Cannot create hsr debugfs directory [ 145.491280][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 145.825448][ T4155] logitech 0003:046D:C293.0003: item fetching failed at offset 5/7 [ 145.917155][ T4155] logitech 0003:046D:C293.0003: parse failed [ 145.989715][ T4155] logitech: probe of 0003:046D:C293.0003 failed with error -22 [ 146.259723][ T4148] usb 5-1: USB disconnect, device number 3 [ 147.017741][ T3636] Bluetooth: hci3: command tx timeout [ 149.090340][ T3636] Bluetooth: hci3: command tx timeout [ 149.125133][ T4989] kernel read not supported for file /  (pid: 4989 comm: syz.0.252) [ 149.169662][ T27] audit: type=1800 audit(1725547925.711:68): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.252" name=2001 dev="mqueue" ino=39587 res=0 errno=0 [ 149.217430][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 149.255427][ T3799] device hsr_slave_0 left promiscuous mode [ 149.269076][ T3799] device hsr_slave_1 left promiscuous mode [ 149.305492][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.321868][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.361071][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.380218][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.406927][ T3799] device bridge_slave_1 left promiscuous mode [ 149.423429][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.446543][ T3799] device bridge_slave_0 left promiscuous mode [ 149.462949][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.539903][ T3799] device veth1_macvtap left promiscuous mode [ 149.566319][ T3799] device veth0_macvtap left promiscuous mode [ 149.593081][ T3799] device veth1_vlan left promiscuous mode [ 149.614501][ T3799] device veth0_vlan left promiscuous mode [ 150.169359][ T4997] loop3: detected capacity change from 0 to 40427 [ 150.260318][ T4997] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 150.277364][ T4997] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.403735][ T4997] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.560060][ T4997] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.578083][ T4997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.029955][ T5027] serio: Serial port ptm0 [ 152.124918][ T4997] F2FS-fs (loop3): Inconsistent error blkaddr:5663, sit bitmap:0 [ 152.187872][ T4997] CPU: 1 PID: 4997 Comm: syz.3.253 Not tainted 6.1.108-syzkaller #0 [ 152.195911][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 152.205976][ T4997] Call Trace: [ 152.209250][ T4997] [ 152.212173][ T4997] dump_stack_lvl+0x1e3/0x2cb [ 152.216841][ T4997] ? nf_tcp_handle_invalid+0x642/0x642 [ 152.222321][ T4997] ? f2fs_dirty_node_folio+0x513/0xa60 [ 152.227786][ T4997] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 152.233156][ T4997] f2fs_truncate_data_blocks_range+0x5d4/0xe50 [ 152.239308][ T4997] f2fs_do_truncate_blocks+0x546/0xd50 [ 152.244755][ T4997] ? addrs_per_block+0x110/0x110 [ 152.249689][ T4997] f2fs_truncate_blocks+0x109/0x2f0 [ 152.254879][ T4997] do_convert_inline_dir+0xded/0x1c90 [ 152.260260][ T4997] ? f2fs_try_convert_inline_dir+0x4c0/0x4c0 [ 152.266232][ T4997] ? pagecache_get_page+0x120/0x250 [ 152.271417][ T4997] ? f2fs_grab_cache_page+0x38/0x3c0 [ 152.276703][ T4997] ? _find_next_zero_bit+0x101/0x140 [ 152.281986][ T4997] ? _find_next_bit+0xe9/0x120 [ 152.286747][ T4997] ? f2fs_room_for_filename+0x90/0xb0 [ 152.292120][ T4997] f2fs_add_inline_entry+0x503/0x8d0 [ 152.297394][ T4997] ? do_convert_inline_dir+0x1c90/0x1c90 [ 152.303028][ T4997] ? f2fs_init_casefolded_name+0x6c0/0x6c0 [ 152.308823][ T4997] f2fs_add_dentry+0xb6/0x1e0 [ 152.313486][ T4997] f2fs_do_add_link+0x21a/0x340 [ 152.318323][ T4997] ? f2fs_add_dentry+0x1e0/0x1e0 [ 152.323247][ T4997] ? up_read+0x20/0x20 [ 152.327296][ T4997] ? f2fs_dquot_initialize+0xd6/0x2e0 [ 152.332669][ T4997] f2fs_create+0x749/0xa10 [ 152.337078][ T4997] ? f2fs_lookup+0xae0/0xae0 [ 152.341654][ T4997] path_openat+0x12f1/0x2e60 [ 152.346242][ T4997] ? do_filp_open+0x480/0x480 [ 152.350927][ T4997] do_filp_open+0x230/0x480 [ 152.355413][ T4997] ? vfs_tmpfile+0x4a0/0x4a0 [ 152.359997][ T4997] ? _raw_spin_unlock+0x24/0x40 [ 152.364831][ T4997] ? alloc_fd+0x5a0/0x640 [ 152.369148][ T4997] do_sys_openat2+0x13b/0x4f0 [ 152.373831][ T4997] ? do_sys_open+0x220/0x220 [ 152.378505][ T4997] ? do_mknodat+0x562/0x5a0 [ 152.383007][ T4997] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 152.388972][ T4997] __x64_sys_creat+0x11f/0x160 [ 152.393732][ T4997] ? __x64_compat_sys_openat+0x290/0x290 [ 152.399366][ T4997] ? syscall_enter_from_user_mode+0x2e/0x230 [ 152.405327][ T4997] ? lockdep_hardirqs_on+0x94/0x130 [ 152.410520][ T4997] ? syscall_enter_from_user_mode+0x2e/0x230 [ 152.416479][ T4997] do_syscall_64+0x3b/0xb0 [ 152.420896][ T4997] ? clear_bhb_loop+0x45/0xa0 [ 152.425597][ T4997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.431507][ T4997] RIP: 0033:0x7f4085f7cef9 [ 152.435909][ T4997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.455510][ T4997] RSP: 002b:00007f4086e09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 152.463923][ T4997] RAX: ffffffffffffffda RBX: 00007f4086135f80 RCX: 00007f4085f7cef9 [ 152.471891][ T4997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 152.479847][ T4997] RBP: 00007f4085fef01e R08: 0000000000000000 R09: 0000000000000000 [ 152.487801][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.495757][ T4997] R13: 0000000000000000 R14: 00007f4086135f80 R15: 00007fffe54c1898 [ 152.503736][ T4997] [ 152.609298][ T3799] team0 (unregistering): Port device team_slave_1 removed [ 152.669168][ T3799] team0 (unregistering): Port device team_slave_0 removed [ 152.965146][ T3799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.119194][ T3799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.436354][ T5045] loop4: detected capacity change from 0 to 1024 [ 154.533114][ T5045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.837027][ T5052] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2738: inode #2: comm syz.4.264: corrupted in-inode xattr [ 154.970694][ T5052] EXT4-fs (loop4): Remounting filesystem read-only [ 155.027370][ T5052] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2808: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 155.333048][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 155.484050][ T3799] bond0 (unregistering): Released all slaves [ 155.595322][ T5055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.265'. [ 155.635133][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 155.659592][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 155.802549][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 156.001471][ T5073] binder: 5072:5073 ioctl c018620b 20000380 returned -14 [ 156.478878][ T5078] loop4: detected capacity change from 0 to 512 [ 156.534046][ T5078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.543944][ T5085] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 156.590023][ T5078] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.625373][ T4883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.647805][ T5078] EXT4-fs (loop4): DAX unsupported by block device. [ 156.661810][ T4883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.687616][ T3714] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.697200][ T4883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.755107][ T4883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.045856][ T4883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.058548][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.084553][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.085443][ T5093] sched: RT throttling activated [ 159.109282][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.058540][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.065924][ T3714] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 160.094713][ T4883] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.107191][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.131570][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.155619][ T3714] usb 1-1: config 0 descriptor?? [ 160.185780][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.197791][ T3714] usb 1-1: can't set config #0, error -71 [ 160.226007][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.233204][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.233737][ T3714] usb 1-1: USB disconnect, device number 5 [ 160.442882][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.399811][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.428254][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.282186][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.289349][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.329183][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.343639][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.352682][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.373863][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.388365][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.416889][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.472239][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 162.522913][ T5120] device vlan2 entered promiscuous mode [ 162.547523][ T5120] device wlan0 entered promiscuous mode [ 162.573528][ T5120] device wlan0 left promiscuous mode [ 162.640880][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.652671][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.696534][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.763030][ T5104] loop0: detected capacity change from 0 to 32768 [ 162.773584][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.783841][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.813833][ T5104] (syz.0.284,5104,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 162.838482][ T5104] (syz.0.284,5104,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 162.848691][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.265726][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.306732][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.344498][ T4883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.708444][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.717411][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.080364][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.120701][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.142961][ T5184] 9pnet_fd: p9_fd_create_tcp (5184): problem connecting socket to 127.0.0.1 [ 167.148472][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.210778][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.235589][ T4883] device veth0_vlan entered promiscuous mode [ 167.248107][ T3636] Bluetooth: hci0: command tx timeout [ 167.292644][ T4883] device veth1_vlan entered promiscuous mode [ 167.372468][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.396114][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.426992][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.450100][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.466168][ T4883] device veth0_macvtap entered promiscuous mode [ 167.492170][ T4883] device veth1_macvtap entered promiscuous mode [ 167.606670][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.663177][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.694723][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.753946][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.777319][ T5201] loop2: detected capacity change from 0 to 512 [ 167.801504][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.826055][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.836824][ T5201] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 167.858363][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.904075][ T5201] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.295: iget: bad i_size value: -67835469387268086 [ 167.931889][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.951430][ T5201] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.295: couldn't read orphan inode 15 (err -117) [ 167.997774][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.030193][ T5201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.047982][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.071829][ T5201] ext2 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff) [ 168.092495][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.156180][ T5201] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.295: Directory hole found for htree leaf block 0 [ 168.174676][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.194785][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.215215][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.238574][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.271724][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.311926][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.357087][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.366054][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.386645][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.397043][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.415912][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.426365][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.436095][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.457742][ T4883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.470314][ T4883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.480878][ T4883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.495919][ T4883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.775414][ T3776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.809428][ T3776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.856505][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.885375][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.905610][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.957425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.418953][ T5228] loop1: detected capacity change from 0 to 2048 [ 170.161224][ T5228] loop1: p4 < > [ 170.228003][ T3092] loop1: p4 < > [ 170.379234][ T5235] device vlan2 entered promiscuous mode [ 170.388909][ T5235] device team_slave_0 entered promiscuous mode [ 170.395595][ T5235] device team_slave_1 entered promiscuous mode [ 170.419657][ T5235] device team0 entered promiscuous mode [ 170.444856][ T3758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.500367][ T5235] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 170.502685][ T3758] udevd[3758]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 170.540663][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 170.783962][ T5244] loop0: detected capacity change from 0 to 512 [ 170.875551][ T5244] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.711713][ T5244] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 171.740596][ T5244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 171.751193][ T5244] System zones: 0-2, 18-18, 34-34 [ 171.759373][ T5244] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.304: bad orphan inode 15 [ 171.778355][ T5244] ext4_test_bit(bit=14, block=18) = 1 [ 171.783764][ T5244] is_bad_inode(inode)=0 [ 171.810488][ T5244] NEXT_ORPHAN(inode)=2264924160 [ 171.877829][ T5244] max_ino=32 [ 171.881061][ T5244] i_nlink=0 [ 171.894375][ T5244] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 171.948031][ T5244] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.304: bg 0: block 80: padding at end of block bitmap is not set [ 171.987727][ T5244] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 171.997162][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.588126][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 172.654970][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 172.812994][ T5254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.828375][ T5254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.835097][ T5254] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 172.845736][ T5254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.863501][ T5254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.870542][ T5254] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 172.878269][ T5254] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 172.884592][ T5254] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 172.891546][ T5254] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 172.899313][ T5254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.905422][ T5254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.911827][ T5254] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 172.919713][ T5254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.925874][ T5254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.932292][ T5254] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 173.003900][ T5268] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.867359][ T5260] loop1: detected capacity change from 0 to 32768 [ 173.892854][ T5260] [ 173.892854][ T5260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.892854][ T5260] [ 174.217788][ T3649] Bluetooth: hci0: command tx timeout [ 174.726191][ T5260] find_entry called with index = 0 [ 174.726364][ T5260] find_entry called with index = 0 [ 174.727193][ T5260] read_mapping_page failed! [ 174.727237][ T5260] ERROR: (device loop1): txCommit: [ 174.727237][ T5260] [ 174.740066][ T5260] ERROR: (device loop1): remounting filesystem as read-only [ 174.847871][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.928719][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.934804][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.942191][ T3636] Bluetooth: hci5: command 0x0c1a tx timeout [ 175.115513][ T5298] device syzkaller0 entered promiscuous mode [ 176.287606][ T3642] Bluetooth: hci0: command tx timeout [ 176.354267][ T3642] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 176.664999][ T4151] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.937767][ T4151] usb 4-1: Using ep0 maxpacket: 32 [ 177.088232][ T4151] usb 4-1: config 0 has an invalid interface number: 103 but max is 1 [ 177.119306][ T4151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.261885][ T4151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.366111][ T4151] usb 4-1: config 0 has no interface number 0 [ 177.376770][ T4151] usb 4-1: config 0 interface 103 has no altsetting 0 [ 177.428103][ T3642] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.434727][ T3642] Bluetooth: hci5: command 0x0c1a tx timeout [ 177.440863][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.614515][ T5322] loop2: detected capacity change from 0 to 8192 [ 177.648181][ T4151] usb 4-1: string descriptor 0 read error: -22 [ 177.654568][ T4151] usb 4-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=44.10 [ 177.665782][ T5322] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.684235][ T4151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.695494][ T5326] Bluetooth: MGMT ver 1.22 [ 177.714808][ T4151] usb 4-1: config 0 descriptor?? [ 177.969025][ T4151] usb 4-1: USB disconnect, device number 3 [ 178.097598][ T5329] capability: warning: `syz.2.328' uses deprecated v2 capabilities in a way that may be insecure [ 178.113177][ T27] audit: type=1326 audit(1725547954.651:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.141490][ T27] audit: type=1326 audit(1725547954.671:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.170021][ T27] audit: type=1326 audit(1725547954.671:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.203331][ T27] audit: type=1326 audit(1725547954.671:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.225959][ T27] audit: type=1326 audit(1725547954.671:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.248312][ T27] audit: type=1326 audit(1725547954.671:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.271403][ T27] audit: type=1326 audit(1725547954.671:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.293515][ T27] audit: type=1326 audit(1725547954.671:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.315869][ T27] audit: type=1326 audit(1725547954.671:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.348307][ T27] audit: type=1326 audit(1725547954.671:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b77cef9 code=0x7ffc0000 [ 178.370670][ T3642] Bluetooth: hci0: command tx timeout [ 178.643764][ T5333] loop3: detected capacity change from 0 to 4096 [ 178.719626][ T5333] loop3: detected capacity change from 0 to 64 [ 180.369878][ T3636] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 180.378530][ T3636] Bluetooth: hci1: Injecting HCI hardware error event [ 180.388888][ T3642] Bluetooth: hci1: hardware error 0x00 [ 180.463222][ T5345] loop4: detected capacity change from 0 to 2048 [ 180.552115][ T5345] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 180.567234][ T5345] UDF-fs: Scanning with blocksize 512 failed [ 180.601599][ T5345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.646402][ T5349] loop0: detected capacity change from 0 to 24 [ 182.248993][ T5364] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 182.266295][ T5364] Error parsing options; rc = [-22] [ 182.527705][ T3642] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 183.033954][ T5372] overlayfs: failed to resolve './file0': -2 [ 183.464248][ T5380] loop1: detected capacity change from 0 to 512 [ 183.560271][ T5386] loop3: detected capacity change from 0 to 1024 [ 183.629762][ T5390] rdma_op ffff88814b3a61f0 conn xmit_rdma 0000000000000000 [ 183.922001][ T5386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.013008][ T5380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.235238][ T5375] loop0: detected capacity change from 0 to 8192 [ 184.241939][ T5380] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 184.258229][ T5386] UDF-fs: error (device loop3): udf_read_inode: (ino 832) failed !bh [ 184.266948][ T5386] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 184.353408][ T5394] dccp_close: ABORT with 32 bytes unread [ 184.558810][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 184.565726][ T5397] loop4: detected capacity change from 0 to 2048 [ 184.566773][ T5402] loop2: detected capacity change from 0 to 2048 [ 184.659708][ T5402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.681657][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.705933][ T5397] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 184.760684][ T5397] fs-verity: sha512 using implementation "sha512-avx2" [ 184.884969][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 184.884983][ T27] audit: type=1800 audit(1725547961.421:79): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 184.937136][ T27] audit: type=1800 audit(1725547961.461:80): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 185.061892][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 185.069197][ T5397] syz.4.348 (5397) used greatest stack depth: 20000 bytes left [ 185.111799][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 185.239737][ T3642] Bluetooth: hci5: unexpected event 0x09 length: 13 > 3 [ 186.223188][ T5422] dccp_close: ABORT with 32 bytes unread [ 186.237393][ T5410] loop1: detected capacity change from 0 to 40427 [ 186.257782][ T5410] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 186.264142][ T5437] loop2: detected capacity change from 0 to 512 [ 186.274741][ T5410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 186.289830][ T5410] F2FS-fs (loop1): invalid crc value [ 186.295997][ T5437] ext4: Unknown parameter 'noacl' [ 186.311543][ T5429] loop4: detected capacity change from 0 to 1024 [ 186.354989][ T5410] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.438305][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.477695][ T4155] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.537684][ T5410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 186.544798][ T5410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.612521][ T4883] syz-executor: attempt to access beyond end of device [ 186.612521][ T4883] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.837703][ T3626] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 186.867745][ T4155] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.879377][ T4155] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 186.890103][ T4155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.899568][ T4155] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.037750][ T4155] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.046816][ T4155] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.058341][ T4155] usb 1-1: Product: syz [ 187.062533][ T4155] usb 1-1: Manufacturer: syz [ 187.111425][ T4155] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 187.197684][ T3626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.208776][ T3626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.218730][ T3626] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 187.228045][ T3626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.240685][ T3626] usb 3-1: config 0 descriptor?? [ 187.312681][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.322092][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.339615][ T3714] usb 1-1: USB disconnect, device number 6 [ 187.702442][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 187.721879][ T5447] loop2: detected capacity change from 0 to 256 [ 187.766806][ T3626] wacom 0003:056A:0016.0004: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 187.784921][ T3626] wacom 0003:056A:0016.0004: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 187.797823][ T3626] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0004/input/input8 [ 187.967443][ T5455] loop0: detected capacity change from 0 to 512 [ 188.024122][ T5455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.035539][ T5455] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 188.096378][ T3626] usb 3-1: USB disconnect, device number 7 [ 188.200450][ T5462] dccp_close: ABORT with 32 bytes unread [ 188.251654][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 188.539369][ T5471] loop2: detected capacity change from 0 to 256 [ 188.547354][ T5471] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.564006][ T5471] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1911af20) [ 188.574947][ T5471] exFAT-fs (loop2): invalid boot region [ 188.581003][ T5471] exFAT-fs (loop2): failed to recognize exfat type [ 189.574034][ T3714] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.957644][ T3714] usb 1-1: Using ep0 maxpacket: 8 [ 191.047983][ T5502] loop4: detected capacity change from 0 to 512 [ 191.184720][ T5502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.209286][ T5502] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 191.459006][ T3795] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 191.749966][ T3795] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.884210][ T5508] dccp_close: ABORT with 32 bytes unread [ 191.997829][ T3714] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 192.006919][ T3714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.027680][ T3714] usb 1-1: Product: syz [ 192.031888][ T3714] usb 1-1: Manufacturer: syz [ 192.051560][ T3714] usb 1-1: config 0 descriptor?? [ 192.067685][ T3714] usb 1-1: can't set config #0, error -71 [ 192.074601][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 192.098573][ T3714] usb 1-1: USB disconnect, device number 7 [ 192.338188][ T5519] netlink: 'syz.0.378': attribute type 4 has an invalid length. [ 193.409245][ T3636] Bluetooth: hci4: command 0x1003 tx timeout [ 193.416030][ T3642] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.864900][ T5538] loop2: detected capacity change from 0 to 512 [ 194.129123][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.135607][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.757224][ T5538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.775596][ T5538] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 195.140792][ T5549] Cannot find set identified by id 0 to match [ 195.583788][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 195.725665][ T5551] loop1: detected capacity change from 0 to 1024 [ 195.769519][ T5551] EXT4-fs: Invalid want_extra_isize 137 [ 196.065665][ T5558] loop2: detected capacity change from 0 to 8192 [ 196.242283][ T27] audit: type=1800 audit(1725547972.781:81): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.389" name="bus" dev="loop2" ino=1048670 res=0 errno=0 [ 196.491465][ T5565] loop1: detected capacity change from 0 to 256 [ 196.591603][ T5567] loop0: detected capacity change from 0 to 1024 [ 196.603941][ T5565] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 196.659432][ T5563] loop3: detected capacity change from 0 to 32768 [ 196.671424][ T5563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.391 (5563) [ 196.721710][ T5563] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.726783][ T5567] EXT4-fs: Invalid want_extra_isize 137 [ 196.732002][ T5563] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 196.746347][ T5563] BTRFS info (device loop3): using free space tree [ 196.845846][ T5569] loop2: detected capacity change from 0 to 512 [ 196.996327][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.010047][ T5569] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038 (0x7fffffff) [ 197.240767][ T5563] BTRFS info (device loop3): enabling ssd optimizations [ 197.293168][ T5594] loop0: detected capacity change from 0 to 2048 [ 197.370242][ T5594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.579275][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 198.586511][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 198.593305][ T4459] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.513739][ T5638] loop4: detected capacity change from 0 to 256 [ 199.532653][ T5638] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 200.465580][ T5647] loop0: detected capacity change from 0 to 512 [ 200.570731][ T5647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.598030][ T5647] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038 (0x7fffffff) [ 200.633557][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 200.649624][ T5660] device bond_slave_0 entered promiscuous mode [ 200.656283][ T5660] device bond_slave_1 entered promiscuous mode [ 200.663186][ T5660] device macvtap1 entered promiscuous mode [ 200.675352][ T5660] device bond0 entered promiscuous mode [ 200.683613][ T5660] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 200.851350][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 201.803416][ T5680] loop2: detected capacity change from 0 to 128 [ 201.826492][ T5680] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.892100][ T5682] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.898773][ T5680] overlayfs: upper fs needs to support d_type. [ 201.947151][ T5680] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 202.013998][ T5689] loop1: detected capacity change from 0 to 512 [ 202.014670][ T5680] overlayfs: failed to set xattr on upper [ 202.048488][ T5680] overlayfs: ...falling back to index=off,metacopy=off. [ 202.085127][ T5689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.419: inode #1: comm syz.1.419: iget: illegal inode # [ 202.105414][ T5689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.419: error while reading EA inode 1 err=-117 [ 202.118489][ T5689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.419: inode #1: comm syz.1.419: iget: illegal inode # [ 202.133455][ T5689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.419: error while reading EA inode 1 err=-117 [ 202.151645][ T5689] EXT4-fs (loop1): 1 orphan inode deleted [ 202.157404][ T5689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.340748][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 202.452146][ T5700] loop0: detected capacity change from 0 to 256 [ 202.506335][ T5700] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 202.566530][ T3639] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 202.611250][ T3639] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 203.166444][ T1071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.860904][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.946061][ T1071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.101877][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.135386][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.145354][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.163946][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.176155][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.184834][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.730571][ T1071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.890569][ T1071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.985784][ T5741] loop4: detected capacity change from 0 to 1024 [ 205.018556][ T5741] EXT4-fs: Ignoring removed nobh option [ 205.074426][ T5741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.175428][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 205.233706][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 205.521442][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.535478][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.544836][ T5725] device bridge_slave_0 entered promiscuous mode [ 205.567117][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.574783][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.586109][ T5725] device bridge_slave_1 entered promiscuous mode [ 205.744090][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.771242][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.847448][ T5725] team0: Port device team_slave_0 added [ 205.855682][ T5725] team0: Port device team_slave_1 added [ 205.884716][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.894184][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.931295][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.004514][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.012103][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.038721][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.101401][ T5725] device hsr_slave_0 entered promiscuous mode [ 206.110249][ T5725] device hsr_slave_1 entered promiscuous mode [ 206.117057][ T5725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.127808][ T5725] Cannot create hsr debugfs directory [ 206.287745][ T3649] Bluetooth: hci1: command tx timeout [ 206.602611][ T1071] device hsr_slave_0 left promiscuous mode [ 206.617382][ T1071] device hsr_slave_1 left promiscuous mode [ 206.628232][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.635672][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.645784][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.653544][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.661790][ T1071] device bridge_slave_1 left promiscuous mode [ 206.668322][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.676751][ T1071] device bridge_slave_0 left promiscuous mode [ 206.683694][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.714978][ T1071] device veth1_macvtap left promiscuous mode [ 206.721477][ T1071] device veth0_macvtap left promiscuous mode [ 206.728016][ T1071] device veth1_vlan left promiscuous mode [ 206.733801][ T1071] device veth0_vlan left promiscuous mode [ 207.203600][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 207.254221][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 207.296385][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.339826][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.798133][ T1071] bond0 (unregistering): Released all slaves [ 208.110243][ T5725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.153246][ T5725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.175511][ T5725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.194303][ T5725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.328448][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.354144][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.362803][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.370682][ T3649] Bluetooth: hci1: command tx timeout [ 208.380243][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.396663][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.406000][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.420408][ T3797] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.427594][ T3797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.450566][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.459716][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.469169][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.478323][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.485422][ T3797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.493938][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.504154][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.513484][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.523303][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.544981][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.553318][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.562619][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.573679][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.583360][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.593619][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.611384][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.623494][ T5725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.808079][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.815617][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.832927][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.860236][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.873353][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.911380][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.923678][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.935434][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.947179][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.963533][ T5725] device veth0_vlan entered promiscuous mode [ 208.977355][ T5725] device veth1_vlan entered promiscuous mode [ 209.011835][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.023839][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.034703][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.045957][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.057311][ T5725] device veth0_macvtap entered promiscuous mode [ 209.069943][ T5725] device veth1_macvtap entered promiscuous mode [ 209.086358][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.098685][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.108716][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.119279][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.129884][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.142374][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.152566][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.163122][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.178081][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.186679][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.196624][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.205138][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.216229][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.234378][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.257969][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.267891][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.278681][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.289325][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.300511][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.310466][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.320972][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.335804][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.351550][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.360521][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.371525][ T5725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.387532][ T5725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.396273][ T5725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.405619][ T5725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.483743][ T3776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.508235][ T3776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.520544][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.534425][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.541764][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.559775][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.713977][ T5826] netlink: 'syz.1.446': attribute type 2 has an invalid length. [ 210.459832][ T3649] Bluetooth: hci1: command tx timeout [ 210.754082][ T5848] loop2: detected capacity change from 0 to 256 [ 211.612084][ T5848] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 211.967743][ T4155] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 213.387653][ T3649] Bluetooth: hci1: command tx timeout [ 213.502287][ T4155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 213.611469][ T3649] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 213.614252][ T3649] Bluetooth: hci0: unexpected event 0x03 length: 16 > 11 [ 213.807923][ T4155] usb 5-1: string descriptor 0 read error: -22 [ 213.868934][ T4155] usb 5-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 213.904867][ T4155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.941827][ T4155] usb 5-1: config 0 descriptor?? [ 213.970401][ T5856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.986132][ T5858] loop3: detected capacity change from 0 to 32768 [ 213.995448][ T4155] r8712u: register rtl8712_netdev_ops to netdev_ops [ 214.002420][ T4155] usb 5-1: r8712u: USB_SPEED_LOW with 1 endpoints [ 214.076189][ T5858] XFS (loop3): Mounting V5 Filesystem [ 214.147780][ T5858] XFS (loop3): Ending clean mount [ 214.163763][ T5858] XFS (loop3): Quotacheck needed: Please wait. [ 214.227684][ T4155] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 214.238474][ T4155] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 214.251828][ T5858] XFS (loop3): Quotacheck: Done. [ 214.273067][ T4155] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 214.301410][ T4155] usb 5-1: USB disconnect, device number 4 [ 214.891936][ T5877] loop2: detected capacity change from 0 to 32768 [ 215.042645][ T5904] loop1: detected capacity change from 0 to 512 [ 215.052072][ T5877] XFS (loop2): Mounting V5 Filesystem [ 215.181676][ T5904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.266243][ T5877] XFS (loop2): Ending clean mount [ 215.272392][ T5904] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 215.284065][ T3682] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.309046][ T5877] XFS (loop2): Quotacheck needed: Please wait. [ 215.517931][ T5877] XFS (loop2): Quotacheck: Done. [ 215.537663][ T3682] usb 1-1: Using ep0 maxpacket: 32 [ 215.657653][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.664845][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 215.677694][ T5925] netlink: 164 bytes leftover after parsing attributes in process `syz.4.458'. [ 215.694260][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.746863][ T3682] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.765913][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.795600][ T3682] usb 1-1: config 0 descriptor?? [ 215.838674][ T3682] hub 1-1:0.0: USB hub found [ 215.976560][ T5725] XFS (loop2): Unmounting Filesystem [ 216.057701][ T3682] hub 1-1:0.0: 1 port detected [ 216.077057][ T4459] XFS (loop3): Unmounting Filesystem [ 216.707809][ T3682] hub 1-1:0.0: activate --> -90 [ 217.077911][ T3682] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 217.558615][ T4148] usb 1-1: USB disconnect, device number 8 [ 217.621943][ T5952] Cannot find set identified by id 0 to match [ 217.653447][ T5931] loop1: detected capacity change from 0 to 32768 [ 217.810979][ T4151] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.102066][ T5967] loop0: detected capacity change from 0 to 47 [ 218.301992][ T4151] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 218.996519][ T4151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.123014][ T4151] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.162621][ T4151] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.204709][ T4151] usb 4-1: Manufacturer: syz [ 219.242052][ T4151] usb 4-1: config 0 descriptor?? [ 219.596361][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 220.063118][ T5960] loop4: detected capacity change from 0 to 32768 [ 220.221917][ T4151] rc_core: IR keymap rc-hauppauge not found [ 220.228761][ T4151] Registered IR keymap rc-empty [ 220.651142][ T4151] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 221.721728][ T4151] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 221.937038][ T4151] usb 4-1: USB disconnect, device number 4 [ 222.233997][ T6015] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 224.071368][ T6015] syz.1.477 (6015) used greatest stack depth: 19992 bytes left [ 225.052360][ T6036] loop1: detected capacity change from 0 to 256 [ 225.068274][ T6036] FAT-fs (loop1): Unrecognized mount option "00000000000000000004" or missing value [ 227.229077][ T3758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.261798][ T3649] Bluetooth: hci0: Malformed Event: 0x02 [ 227.567734][ T4151] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.857227][ T6058] loop2: detected capacity change from 0 to 256 [ 227.936427][ T6058] FAT-fs (loop2): Directory bread(block 64) failed [ 227.951430][ T6053] loop4: detected capacity change from 0 to 32768 [ 227.956382][ T6058] FAT-fs (loop2): Directory bread(block 65) failed [ 227.963034][ T4151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.984926][ T6058] FAT-fs (loop2): Directory bread(block 66) failed [ 227.988955][ T6053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.485 (6053) [ 227.994954][ T6058] FAT-fs (loop2): Directory bread(block 67) failed [ 228.009138][ T4151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.038573][ T6058] FAT-fs (loop2): Directory bread(block 68) failed [ 228.045190][ T4151] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.061861][ T4151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.065584][ T6058] FAT-fs (loop2): Directory bread(block 69) failed [ 228.084338][ T6053] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.091194][ T6058] FAT-fs (loop2): Directory bread(block 70) failed [ 228.106405][ T4151] usb 4-1: config 0 descriptor?? [ 228.111476][ T6058] FAT-fs (loop2): Directory bread(block 71) failed [ 228.111578][ T6058] FAT-fs (loop2): Directory bread(block 72) failed [ 228.111605][ T6058] FAT-fs (loop2): Directory bread(block 73) failed [ 228.147636][ T6053] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 228.167617][ T6053] BTRFS info (device loop4): use zlib compression, level 3 [ 228.174874][ T6053] BTRFS info (device loop4): using free space tree [ 228.204998][ T6058] autofs4:pid:6058:autofs_fill_super: called with bogus options [ 228.407347][ T6053] BTRFS info (device loop4): enabling ssd optimizations [ 228.505443][ T27] audit: type=1800 audit(1725548005.041:82): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.485" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 228.631784][ T6060] loop0: detected capacity change from 0 to 32768 [ 228.669614][ T4151] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 228.719693][ T4151] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 229.392663][ T4151] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 232.753460][ T3682] usb 4-1: USB disconnect, device number 5 [ 233.202939][ T4419] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.819552][ T3652] Bluetooth: hci5: command 0x0c1a tx timeout [ 234.826621][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.480108][ T6125] loop1: detected capacity change from 0 to 1024 [ 235.661020][ T6125] hfsplus: xattr searching failed [ 235.722962][ T6118] loop3: detected capacity change from 0 to 32768 [ 235.756827][ T6125] hfsplus: b-tree write err: -5, ino 3 [ 237.635483][ T6159] loop3: detected capacity change from 0 to 1024 [ 238.508237][ T6153] loop1: detected capacity change from 0 to 32768 [ 241.018672][ T6184] loop1: detected capacity change from 0 to 64 [ 241.044162][ T6181] loop0: detected capacity change from 0 to 512 [ 241.061007][ T6181] EXT4-fs (loop0): Unsupported encryption level 9 [ 241.195165][ T6181] loop0: detected capacity change from 0 to 512 [ 241.235486][ T6187] md: array md2 already initialised! [ 241.259905][ T6181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.272036][ T6181] EXT4-fs (loop0): orphan cleanup on readonly fs [ 241.280601][ T6181] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 241.391880][ T6191] hfs: request for non-existent node 1280 in B*Tree [ 241.398948][ T6191] hfs: request for non-existent node 1280 in B*Tree [ 241.487116][ T6181] EXT4-fs (loop0): 1 truncate cleaned up [ 241.608056][ T6181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 241.945205][ T6193] loop3: detected capacity change from 0 to 256 [ 242.089868][ T27] audit: type=1326 audit(1725548018.631:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.184743][ T6200] loop1: detected capacity change from 0 to 1024 [ 242.199583][ T6200] hfsplus: invalid attributes max_key_len 0 [ 242.206307][ T6200] hfsplus: failed to load attributes file [ 242.224215][ T27] audit: type=1326 audit(1725548018.631:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.263045][ T3758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.267364][ T27] audit: type=1326 audit(1725548018.631:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.508881][ T27] audit: type=1326 audit(1725548018.631:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.836216][ T27] audit: type=1326 audit(1725548018.661:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.885632][ T27] audit: type=1326 audit(1725548018.671:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.908857][ T27] audit: type=1326 audit(1725548018.671:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 242.932123][ T27] audit: type=1326 audit(1725548018.681:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 243.003332][ T27] audit: type=1326 audit(1725548018.681:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4085f7cef9 code=0x7ffc0000 [ 243.578708][ T6216] loop4: detected capacity change from 0 to 1024 [ 245.192455][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 245.780773][ T27] audit: type=1326 audit(1725548022.321:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.4.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628477cef9 code=0x7ffc0000 [ 247.344566][ T6237] loop4: detected capacity change from 0 to 512 [ 247.393485][ T6237] ext4: Bad value for 'auto_da_alloc' [ 247.653618][ T6246] loop0: detected capacity change from 0 to 1024 [ 248.371786][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 248.371801][ T27] audit: type=1326 audit(1725548024.911:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.401125][ T27] audit: type=1326 audit(1725548024.941:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.425182][ T6237] loop4: detected capacity change from 0 to 1024 [ 248.479381][ T27] audit: type=1326 audit(1725548025.021:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.511967][ T6237] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 248.526470][ T27] audit: type=1326 audit(1725548025.041:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.578099][ T6237] JBD2: no valid journal superblock found [ 248.585163][ T6237] EXT4-fs (loop4): error loading journal [ 248.593516][ T27] audit: type=1326 audit(1725548025.041:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.652174][ T27] audit: type=1326 audit(1725548025.051:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.683750][ T6236] dccp_close: ABORT with 80 bytes unread [ 248.771065][ T27] audit: type=1326 audit(1725548025.051:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.856362][ T27] audit: type=1326 audit(1725548025.051:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.917674][ T27] audit: type=1326 audit(1725548025.051:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 248.977612][ T27] audit: type=1326 audit(1725548025.051:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cdd7cef9 code=0x7ffc0000 [ 249.227859][ T6254] md: array md2 already initialised! [ 249.346155][ T6245] loop3: detected capacity change from 0 to 32768 [ 251.721844][ T6274] loop0: detected capacity change from 0 to 1024 [ 251.833712][ T6274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.106397][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 253.086730][ T6264] loop4: detected capacity change from 0 to 32768 [ 254.083654][ T6292] loop1: detected capacity change from 0 to 2048 [ 254.093414][ T6292] UDF-fs: bad mount option "adincb" or missing value [ 254.897052][ T6316] loop1: detected capacity change from 0 to 1024 [ 255.569982][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.576356][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.675822][ T6331] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 256.716222][ T6322] loop4: detected capacity change from 0 to 32768 [ 257.999272][ T6331] team0: Port device netdevsim0 added [ 258.291819][ T6345] loop3: detected capacity change from 0 to 512 [ 258.305736][ T6345] EXT4-fs: Ignoring removed orlov option [ 258.934803][ T6345] EXT4-fs: Ignoring removed i_version option [ 259.060310][ T6341] bond0: (slave bond_slave_0): Releasing backup interface [ 259.173105][ T6345] EXT4-fs (loop3): 1 truncate cleaned up [ 259.182768][ T6345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.396235][ T6355] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 259.477380][ T6355] device netdevsim0 entered promiscuous mode [ 259.696800][ T6355] team0: Port device netdevsim0 added [ 260.096389][ T6355] syz.0.573 (6355) used greatest stack depth: 19320 bytes left [ 260.295317][ T6365] loop1: detected capacity change from 0 to 1024 [ 260.346347][ T6365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.623764][ T4459] EXT4-fs (loop3): unmounting filesystem. [ 261.668904][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 262.152442][ T6389] kvm [6388]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 262.203095][ T6389] kvm [6388]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 262.236063][ T6389] kvm [6388]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 262.258038][ T6389] kvm [6388]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000 [ 262.317992][ T152] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.587785][ T152] usb 2-1: Using ep0 maxpacket: 16 [ 262.664902][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.574'. [ 262.672527][ T6387] loop0: detected capacity change from 0 to 32768 [ 262.712966][ T152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.734683][ T152] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.447696][ T152] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 263.457593][ T152] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 263.472224][ T152] usb 2-1: Product: syz [ 263.476431][ T152] usb 2-1: Manufacturer: syz [ 263.518673][ T152] usb 2-1: SerialNumber: syz [ 263.982397][ T152] usb 2-1: config 0 descriptor?? [ 264.093697][ T152] usb 2-1: NFC: intf ffff88805c16d000 id ffffffff8dbdb2a0 [ 264.482105][ T6420] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 265.527058][ T6420] team0: Port device netdevsim0 added [ 265.647067][ T26] usb 2-1: USB disconnect, device number 5 [ 266.788311][ T3626] libceph: connect (1)[c::]:6789 error -101 [ 266.795061][ T3626] libceph: mon0 (1)[c::]:6789 connect error [ 266.806072][ T6444] ceph: No mds server is up or the cluster is laggy [ 268.562133][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.576186][ T3626] libceph: connect (1)[c::]:6789 error -101 [ 268.613419][ T3626] libceph: mon0 (1)[c::]:6789 connect error [ 268.960945][ T6484] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 269.004729][ T6484] team0: Port device netdevsim0 added [ 271.664997][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 272.661312][ T6523] loop1: detected capacity change from 0 to 512 [ 272.692151][ T6513] loop2: detected capacity change from 0 to 512 [ 272.720102][ T6523] EXT4-fs: Ignoring removed orlov option [ 272.790934][ T6513] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 272.804527][ T6523] EXT4-fs: Ignoring removed i_version option [ 272.881981][ T6523] EXT4-fs (loop1): 1 truncate cleaned up [ 272.922490][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.942375][ T3758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.385558][ T6534] loop2: detected capacity change from 0 to 40427 [ 274.457123][ T6534] F2FS-fs (loop2): Unrecognized mount option "errore" or missing value [ 275.411535][ T6541] loop3: detected capacity change from 0 to 2048 [ 275.441707][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.326792][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 276.601662][ T6547] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 277.244500][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'. [ 277.354501][ T14] usb 5-1: device not accepting address 5, error -71 [ 277.655786][ T6561] loop1: detected capacity change from 0 to 256 [ 277.770049][ T6561] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 277.882011][ T6569] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 278.787707][ T6561] loop1: detected capacity change from 256 to 0 [ 278.816926][ T6578] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 278.875312][ T6578] exFAT-fs (loop1): Filesystem has been set read-only [ 279.049612][ T6589] loop4: detected capacity change from 0 to 16 [ 279.100080][ T6589] erofs: (device loop4): mounted with root inode @ nid 36. [ 279.125953][ T6589] syz.4.621: attempt to access beyond end of device [ 279.125953][ T6589] loop4: rw=0, sector=40, nr_sectors = 8 limit=16 [ 279.993484][ T6589] syz.4.621 (6589): drop_caches: 2 [ 280.617712][ T4883] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 280.707646][ T4883] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 281.097665][ T5626] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 281.698627][ T5626] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 281.722124][ T6602] loop1: detected capacity change from 0 to 256 [ 281.747731][ T5626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.758789][ T6602] exfat: Bad value for 'uid' [ 281.788488][ T5626] usb 5-1: Product: syz [ 281.792693][ T5626] usb 5-1: Manufacturer: syz [ 281.823062][ T5626] usb 5-1: SerialNumber: syz [ 281.871322][ T5626] usb 5-1: config 0 descriptor?? [ 281.928954][ T5626] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 281.968023][ T6609] loop0: detected capacity change from 0 to 512 [ 281.974932][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 281.975309][ T6609] EXT4-fs: Ignoring removed orlov option [ 281.988474][ T6609] EXT4-fs: Ignoring removed i_version option [ 282.015122][ T6609] EXT4-fs (loop0): 1 truncate cleaned up [ 282.015250][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 282.021034][ T6609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.073705][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 282.083358][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 282.103505][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 282.112398][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 282.139392][ T5626] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 282.172465][ T6600] device ip6gretap0 entered promiscuous mode [ 282.194287][ T5626] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 282.243569][ T3758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.286061][ T6602] loop1: detected capacity change from 0 to 1024 [ 282.293196][ T6600] device ip6gretap0 left promiscuous mode [ 282.346949][ T6602] EXT4-fs: Ignoring removed orlov option [ 282.397635][ T6602] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.536367][ T6602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.537136][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 283.343003][ T5626] usb 5-1: USB disconnect, device number 7 [ 283.381550][ T5626] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 283.414971][ T5626] keyspan 5-1:0.0: device disconnected [ 283.548440][ T6614] loop2: detected capacity change from 0 to 32768 [ 283.590706][ T6614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 283.607259][ T6614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 283.668855][ T6625] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 283.683910][ T6614] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 283.698768][ T4149] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 283.705889][ T4149] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 283.748273][ T4883] EXT4-fs (loop1): unmounting filesystem. [ 283.906081][ T4149] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 200ms [ 283.915842][ T4149] gfs2: fsid=syz:syz.0: jid=0: Done [ 283.927864][ T6614] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 285.154919][ T6642] netlink: 'syz.0.636': attribute type 25 has an invalid length. [ 285.162942][ T6642] netlink: 'syz.0.636': attribute type 8 has an invalid length. [ 285.181604][ T6632] loop3: detected capacity change from 0 to 512 [ 285.192904][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.636'. [ 285.203293][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.636'. [ 285.242104][ T6632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.259738][ T6644] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 285.285353][ T6632] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.303359][ T6632] EXT4-fs (loop3): DAX unsupported by block device. [ 285.316586][ T6644] batman_adv: batadv0: Adding interface: team0 [ 285.352481][ T6644] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.424359][ T6644] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 287.156685][ T6653] loop2: detected capacity change from 0 to 40427 [ 287.183583][ T6653] F2FS-fs (loop2): invalid crc value [ 287.251506][ T6653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.313330][ T6653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 289.373538][ T5725] syz-executor: attempt to access beyond end of device [ 289.373538][ T5725] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 289.416160][ T5725] syz-executor: attempt to access beyond end of device [ 289.416160][ T5725] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 289.467783][ T6690] loop3: detected capacity change from 0 to 128 [ 289.476317][ T5725] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 289.476365][ T5725] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 289.502739][ T6690] ext4: Unknown parameter 'smackfsfloor' [ 290.157684][ T3626] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 290.199983][ T6701] loop3: detected capacity change from 0 to 1024 [ 290.359882][ T6701] EXT4-fs: Ignoring removed orlov option [ 290.430318][ T6701] ext4: Unknown parameter 'dont_hash' [ 290.452427][ T6702] loop0: detected capacity change from 0 to 512 [ 290.466247][ T6702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.506796][ T6702] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.517163][ T6702] EXT4-fs (loop0): DAX unsupported by block device. [ 290.716534][ T3806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.777650][ T3626] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.886408][ T6711] process 'syz.2.645' launched './file0' with NULL argv: empty string added [ 290.917805][ T3626] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.931804][ T3626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.947362][ T3626] usb 5-1: SerialNumber: syz [ 293.661343][ T6715] serio: Serial port ptm1 [ 293.803862][ T6713] loop3: detected capacity change from 0 to 8192 [ 293.854499][ T6713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.028400][ T3626] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 294.069989][ T3626] usb 5-1: USB disconnect, device number 8 [ 295.774710][ T6729] kernel read not supported for file /  (pid: 6729 comm: syz.3.658) [ 295.805388][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 295.805403][ T27] audit: type=1800 audit(1725548072.341:114): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.658" name=2001 dev="mqueue" ino=50216 res=0 errno=0 [ 295.819158][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 296.017617][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 296.225738][ T6742] loop1: detected capacity change from 0 to 8192 [ 297.317669][ T27] audit: type=1800 audit(1725548073.851:115): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.662" name="bus" dev="loop1" ino=1048730 res=0 errno=0 [ 297.667699][ T14] usb 1-1: device not accepting address 9, error -71 [ 297.875427][ T6769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 297.953675][ T6762] loop2: detected capacity change from 0 to 256 [ 298.149225][ T6762] exfat: Deprecated parameter 'namecase' [ 298.484916][ T6762] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 298.622635][ T4155] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.815119][ T6775] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.687918][ T4155] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 299.711827][ T4155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.748299][ T4155] usb 4-1: config 0 descriptor?? [ 299.750779][ T6782] loop2: detected capacity change from 0 to 1024 [ 299.799621][ T4155] gspca_main: spca508-2.14.0 probing 8086:0110 [ 299.827702][ T6767] loop4: detected capacity change from 0 to 40427 [ 299.846651][ T6767] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 299.855944][ T6767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 299.888944][ T6788] netlink: 25 bytes leftover after parsing attributes in process `syz.2.673'. [ 299.905804][ T6788] device gretap0 entered promiscuous mode [ 299.928334][ T6767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.187930][ T4155] gspca_spca508: reg_read err -32 [ 300.817740][ T6799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.676'. [ 301.122830][ T4155] gspca_spca508: reg_read err -32 [ 301.137432][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 301.197835][ T4155] gspca_spca508: reg_read err -32 [ 301.777766][ T4155] gspca_spca508: reg_read err -110 [ 301.808253][ T4155] gspca_spca508: reg write: error -32 [ 301.822893][ T6768] overlayfs: invalid origin (0000) [ 301.872312][ T4155] spca508: probe of 4-1:0.0 failed with error -32 [ 302.049957][ T5626] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.254562][ T6819] loop0: detected capacity change from 0 to 512 [ 302.582016][ T6819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 302.689751][ T5626] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 302.745677][ T6819] ext4 filesystem being mounted at /154/bus supports timestamps until 2038 (0x7fffffff) [ 302.765648][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.902738][ T5626] usb 2-1: Product: syz [ 302.940961][ T5626] usb 2-1: Manufacturer: syz [ 302.972840][ T5626] usb 2-1: SerialNumber: syz [ 303.061170][ T6830] loop4: detected capacity change from 0 to 512 [ 303.075139][ T6830] EXT4-fs: Ignoring removed orlov option [ 303.102984][ T6830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.124193][ T6830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.129577][ T5626] usb 2-1: config 0 descriptor?? [ 303.162612][ T4158] usb 4-1: USB disconnect, device number 6 [ 303.187596][ T6830] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.683: casefold flag without casefold feature [ 303.201476][ T5626] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 303.292465][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 303.341536][ T6830] EXT4-fs (loop4): Remounting filesystem read-only [ 303.524965][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 303.534000][ T6830] EXT4-fs (loop4): 1 truncate cleaned up [ 303.547648][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 303.555625][ T6830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 303.571715][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 303.608164][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 303.616076][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 303.649657][ T5626] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 303.806086][ T6807] device ip6gretap0 entered promiscuous mode [ 303.825946][ T5626] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 303.873063][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 303.882208][ T6807] device ip6gretap0 left promiscuous mode [ 304.488688][ T4419] EXT4-fs (loop4): unmounting filesystem. [ 304.533912][ T4158] usb 2-1: USB disconnect, device number 6 [ 304.542639][ T4158] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 304.569740][ T4158] keyspan 2-1:0.0: device disconnected [ 305.356817][ T6849] loop2: detected capacity change from 0 to 512 [ 305.396176][ T6849] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 305.404334][ T6849] UDF-fs: Scanning with blocksize 512 failed [ 305.490115][ T6849] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 305.497763][ T6849] UDF-fs: Scanning with blocksize 1024 failed [ 305.504626][ T6849] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 305.512107][ T6849] UDF-fs: Scanning with blocksize 2048 failed [ 305.519561][ T6849] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 305.531270][ T6849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.787634][ T27] audit: type=1800 audit(1725548082.091:116): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.685" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 305.849183][ T6850] loop4: detected capacity change from 0 to 256 [ 306.009514][ T6859] loop2: detected capacity change from 0 to 256 [ 306.049540][ T6859] exfat: Bad value for 'uid' [ 306.071342][ T6850] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 306.227308][ T6861] loop0: detected capacity change from 0 to 16 [ 306.243172][ T6861] erofs: (device loop0): mounted with root inode @ nid 36. [ 306.268816][ T6861] syz.0.689: attempt to access beyond end of device [ 306.268816][ T6861] loop0: rw=0, sector=40, nr_sectors = 8 limit=16 [ 306.988197][ T6861] syz.0.689 (6861): drop_caches: 2 [ 307.108869][ T6865] loop2: detected capacity change from 0 to 1024 [ 307.115810][ T6865] EXT4-fs: Ignoring removed orlov option [ 307.134410][ T6865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 308.060361][ T6865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 308.075307][ T6871] loop0: detected capacity change from 0 to 2048 [ 308.096910][ T6871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.347814][ T6850] loop4: detected capacity change from 256 to 0 [ 309.129850][ T5725] EXT4-fs (loop2): unmounting filesystem. [ 309.255979][ T4419] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 309.287674][ T4419] exFAT-fs (loop4): Filesystem has been set read-only [ 309.332099][ T4419] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 309.359947][ T3635] ================================================================== [ 309.368054][ T3635] BUG: KASAN: slab-out-of-bounds in udf_readdir+0xc5f/0x2240 [ 309.375467][ T3635] Write of size 73 at addr ffff88802804a4b6 by task syz-executor/3635 [ 309.383630][ T3635] [ 309.385968][ T3635] CPU: 1 PID: 3635 Comm: syz-executor Not tainted 6.1.108-syzkaller #0 [ 309.394396][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 309.404475][ T3635] Call Trace: [ 309.407789][ T3635] [ 309.410721][ T3635] dump_stack_lvl+0x1e3/0x2cb [ 309.415405][ T3635] ? nf_tcp_handle_invalid+0x642/0x642 [ 309.420952][ T3635] ? panic+0x764/0x764 [ 309.425026][ T3635] ? _printk+0xd1/0x111 [ 309.429189][ T3635] ? __virt_addr_valid+0x17f/0x530 [ 309.434323][ T3635] ? __virt_addr_valid+0x17f/0x530 [ 309.439444][ T3635] print_report+0x15f/0x4f0 [ 309.443955][ T3635] ? __virt_addr_valid+0x17f/0x530 [ 309.449074][ T3635] ? __virt_addr_valid+0x17f/0x530 [ 309.454180][ T3635] ? __virt_addr_valid+0x45b/0x530 [ 309.459283][ T3635] ? __phys_addr+0xb6/0x170 [ 309.463966][ T3635] ? udf_readdir+0xc5f/0x2240 [ 309.468643][ T3635] kasan_report+0x136/0x160 [ 309.473155][ T3635] ? udf_readdir+0xc5f/0x2240 [ 309.477825][ T3635] kasan_check_range+0x27f/0x290 [ 309.482750][ T3635] ? udf_readdir+0xc5f/0x2240 [ 309.487418][ T3635] memcpy+0x3c/0x60 [ 309.491216][ T3635] udf_readdir+0xc5f/0x2240 [ 309.495729][ T3635] ? load_block_bitmap+0x520/0x520 [ 309.500832][ T3635] ? __might_sleep+0xb0/0xb0 [ 309.505411][ T3635] ? aa_file_perm+0x3e3/0xf60 [ 309.510118][ T3635] ? trace_raw_output_contention_end+0xd0/0xd0 [ 309.516352][ T3635] ? load_block_bitmap+0x520/0x520 [ 309.521549][ T3635] ? __fdget_pos+0x2ba/0x360 [ 309.526129][ T3635] ? end_current_label_crit_section+0x147/0x170 [ 309.532363][ T3635] ? common_file_perm+0x17d/0x1d0 [ 309.537382][ T3635] ? fsnotify_perm+0x439/0x590 [ 309.542133][ T3635] iterate_dir+0x224/0x560 [ 309.546538][ T3635] ? load_block_bitmap+0x520/0x520 [ 309.551644][ T3635] __se_sys_getdents64+0x209/0x4f0 [ 309.556742][ T3635] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 309.562807][ T3635] ? __x64_sys_getdents64+0x80/0x80 [ 309.567991][ T3635] ? filldir+0x6f0/0x6f0 [ 309.572220][ T3635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 309.578192][ T3635] ? lockdep_hardirqs_on+0x94/0x130 [ 309.583381][ T3635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 309.589350][ T3635] do_syscall_64+0x3b/0xb0 [ 309.593782][ T3635] ? clear_bhb_loop+0x45/0xa0 [ 309.598467][ T3635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.604373][ T3635] RIP: 0033:0x7f2d7c1af093 [ 309.608782][ T3635] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 309.628376][ T3635] RSP: 002b:00007fff6d58e6a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 309.636779][ T3635] RAX: ffffffffffffffda RBX: 0000555591da0600 RCX: 00007f2d7c1af093 [ 309.644740][ T3635] RDX: 0000000000008000 RSI: 0000555591da0600 RDI: 0000000000000005 [ 309.652786][ T3635] RBP: 0000555591da05d4 R08: 0000000000000000 R09: 0000000000000000 [ 309.660837][ T3635] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 309.668794][ T3635] R13: 0000000000000010 R14: 0000555591da05d0 R15: 00007fff6d590950 [ 309.676757][ T3635] [ 309.679763][ T3635] [ 309.682086][ T3635] Allocated by task 3635: [ 309.686404][ T3635] kasan_set_track+0x4b/0x70 [ 309.691001][ T3635] __kasan_kmalloc+0x97/0xb0 [ 309.695586][ T3635] udf_readdir+0xb78/0x2240 [ 309.700115][ T3635] iterate_dir+0x224/0x560 [ 309.704515][ T3635] __se_sys_getdents64+0x209/0x4f0 [ 309.709641][ T3635] do_syscall_64+0x3b/0xb0 [ 309.714048][ T3635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.719940][ T3635] [ 309.722248][ T3635] Last potentially related work creation: [ 309.727943][ T3635] kasan_save_stack+0x3b/0x60 [ 309.732609][ T3635] __kasan_record_aux_stack+0xb0/0xc0 [ 309.737966][ T3635] call_rcu+0x163/0xa10 [ 309.742106][ T3635] fib_release_info+0x61c/0x6e0 [ 309.746941][ T3635] fib_table_flush+0xcfe/0x13d0 [ 309.751781][ T3635] fib_netdev_event+0x3c2/0x730 [ 309.756621][ T3635] raw_notifier_call_chain+0xd0/0x170 [ 309.762009][ T3635] dev_close_many+0x37c/0x530 [ 309.766711][ T3635] unregister_netdevice_many+0x4f7/0x17a0 [ 309.772422][ T3635] default_device_exit_batch+0x956/0x9d0 [ 309.778045][ T3635] cleanup_net+0x763/0xb60 [ 309.782452][ T3635] process_one_work+0x8a9/0x11d0 [ 309.787377][ T3635] worker_thread+0xa47/0x1200 [ 309.792041][ T3635] kthread+0x28d/0x320 [ 309.796093][ T3635] ret_from_fork+0x1f/0x30 [ 309.800502][ T3635] [ 309.802809][ T3635] Second to last potentially related work creation: [ 309.809375][ T3635] kasan_save_stack+0x3b/0x60 [ 309.814067][ T3635] __kasan_record_aux_stack+0xb0/0xc0 [ 309.819426][ T3635] kvfree_call_rcu+0x116/0x8c0 [ 309.824205][ T3635] inetdev_event+0x38a/0x1490 [ 309.828871][ T3635] raw_notifier_call_chain+0xd0/0x170 [ 309.834232][ T3635] dev_close_many+0x37c/0x530 [ 309.838900][ T3635] unregister_netdevice_many+0x4f7/0x17a0 [ 309.844611][ T3635] default_device_exit_batch+0x956/0x9d0 [ 309.850229][ T3635] cleanup_net+0x763/0xb60 [ 309.854647][ T3635] process_one_work+0x8a9/0x11d0 [ 309.859593][ T3635] worker_thread+0xa47/0x1200 [ 309.864260][ T3635] kthread+0x28d/0x320 [ 309.868315][ T3635] ret_from_fork+0x1f/0x30 [ 309.872721][ T3635] [ 309.875028][ T3635] The buggy address belongs to the object at ffff88802804a400 [ 309.875028][ T3635] which belongs to the cache kmalloc-256 of size 256 [ 309.889099][ T3635] The buggy address is located 182 bytes inside of [ 309.889099][ T3635] 256-byte region [ffff88802804a400, ffff88802804a500) [ 309.902384][ T3635] [ 309.904697][ T3635] The buggy address belongs to the physical page: [ 309.911103][ T3635] page:ffffea0000a01280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2804a [ 309.921241][ T3635] head:ffffea0000a01280 order:1 compound_mapcount:0 compound_pincount:0 [ 309.929551][ T3635] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 309.937529][ T3635] raw: 00fff00000010200 ffffea0000a35b80 dead000000000006 ffff888017c41b40 [ 309.946098][ T3635] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 309.954663][ T3635] page dumped because: kasan: bad access detected [ 309.961068][ T3635] page_owner tracks the page as allocated [ 309.966852][ T3635] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3646, tgid 3646 (syz-executor), ts 55421603688, free_ts 55417387110 [ 309.988194][ T3635] post_alloc_hook+0x18d/0x1b0 [ 309.992945][ T3635] get_page_from_freelist+0x322e/0x33b0 [ 309.998478][ T3635] __alloc_pages+0x28d/0x770 [ 310.003141][ T3635] alloc_slab_page+0x6a/0x150 [ 310.007807][ T3635] new_slab+0x84/0x2d0 [ 310.011895][ T3635] ___slab_alloc+0xc20/0x1270 [ 310.016560][ T3635] __kmem_cache_alloc_node+0x19f/0x260 [ 310.022008][ T3635] __kmalloc+0xa1/0x230 [ 310.026151][ T3635] fib_create_info+0xa37/0x2500 [ 310.030995][ T3635] fib_table_insert+0x1f2/0x1f20 [ 310.035925][ T3635] fib_add_ifaddr+0xf4c/0x1730 [ 310.040676][ T3635] fib_netdev_event+0x620/0x730 [ 310.045512][ T3635] raw_notifier_call_chain+0xd0/0x170 [ 310.050958][ T3635] __dev_notify_flags+0x304/0x610 [ 310.055973][ T3635] dev_change_flags+0xe7/0x190 [ 310.060724][ T3635] do_setlink+0xcf4/0x3de0 [ 310.065233][ T3635] page last free stack trace: [ 310.070009][ T3635] free_unref_page_prepare+0xf63/0x1120 [ 310.075569][ T3635] free_unref_page+0x33/0x3e0 [ 310.080279][ T3635] qlist_free_all+0x76/0xe0 [ 310.084773][ T3635] kasan_quarantine_reduce+0x156/0x170 [ 310.090226][ T3635] __kasan_slab_alloc+0x1f/0x70 [ 310.095064][ T3635] slab_post_alloc_hook+0x52/0x3a0 [ 310.100164][ T3635] kmem_cache_alloc_node+0x136/0x310 [ 310.105436][ T3635] __alloc_skb+0xde/0x670 [ 310.109810][ T3635] netlink_sendmsg+0x6f8/0xd60 [ 310.114568][ T3635] __sys_sendto+0x480/0x600 [ 310.119065][ T3635] __x64_sys_sendto+0xda/0xf0 [ 310.123733][ T3635] do_syscall_64+0x3b/0xb0 [ 310.128140][ T3635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.134025][ T3635] [ 310.136355][ T3635] Memory state around the buggy address: [ 310.141970][ T3635] ffff88802804a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.150017][ T3635] ffff88802804a400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.158150][ T3635] >ffff88802804a480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 [ 310.166203][ T3635] ^ [ 310.174159][ T3635] ffff88802804a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.182202][ T3635] ffff88802804a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.190246][ T3635] ================================================================== [ 310.201814][ T3635] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.209128][ T3635] CPU: 0 PID: 3635 Comm: syz-executor Not tainted 6.1.108-syzkaller #0 [ 310.217382][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 310.225643][ T6889] loop3: detected capacity change from 0 to 1024 [ 310.233762][ T3635] Call Trace: [ 310.237065][ T3635] [ 310.240004][ T3635] dump_stack_lvl+0x1e3/0x2cb [ 310.244697][ T3635] ? nf_tcp_handle_invalid+0x642/0x642 [ 310.250157][ T3635] ? panic+0x764/0x764 [ 310.254236][ T3635] ? preempt_schedule_common+0xa6/0xd0 [ 310.259711][ T3635] ? vscnprintf+0x59/0x80 [ 310.264047][ T3635] panic+0x318/0x764 [ 310.267955][ T3635] ? check_panic_on_warn+0x1d/0xa0 [ 310.273072][ T3635] ? memcpy_page_flushcache+0xfc/0xfc [ 310.278455][ T3635] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 310.284463][ T3635] ? _raw_spin_unlock+0x40/0x40 [ 310.289333][ T3635] check_panic_on_warn+0x7e/0xa0 [ 310.294286][ T3635] ? udf_readdir+0xc5f/0x2240 [ 310.299087][ T3635] end_report+0x66/0x110 [ 310.303339][ T3635] kasan_report+0x143/0x160 [ 310.307856][ T3635] ? udf_readdir+0xc5f/0x2240 [ 310.312545][ T3635] kasan_check_range+0x27f/0x290 [ 310.317485][ T3635] ? udf_readdir+0xc5f/0x2240 [ 310.322178][ T3635] memcpy+0x3c/0x60 [ 310.325999][ T3635] udf_readdir+0xc5f/0x2240 [ 310.330525][ T3635] ? load_block_bitmap+0x520/0x520 [ 310.335644][ T3635] ? __might_sleep+0xb0/0xb0 [ 310.340244][ T3635] ? aa_file_perm+0x3e3/0xf60 [ 310.344944][ T3635] ? trace_raw_output_contention_end+0xd0/0xd0 [ 310.351115][ T3635] ? load_block_bitmap+0x520/0x520 [ 310.356249][ T3635] ? __fdget_pos+0x2ba/0x360 [ 310.360935][ T3635] ? end_current_label_crit_section+0x147/0x170 [ 310.367184][ T3635] ? common_file_perm+0x17d/0x1d0 [ 310.372211][ T3635] ? fsnotify_perm+0x439/0x590 [ 310.377053][ T3635] iterate_dir+0x224/0x560 [ 310.381548][ T3635] ? load_block_bitmap+0x520/0x520 [ 310.386657][ T3635] __se_sys_getdents64+0x209/0x4f0 [ 310.391855][ T3635] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 310.397930][ T3635] ? __x64_sys_getdents64+0x80/0x80 [ 310.403115][ T3635] ? filldir+0x6f0/0x6f0 [ 310.407440][ T3635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 310.413412][ T3635] ? lockdep_hardirqs_on+0x94/0x130 [ 310.418699][ T3635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 310.424911][ T3635] do_syscall_64+0x3b/0xb0 [ 310.429336][ T3635] ? clear_bhb_loop+0x45/0xa0 [ 310.434022][ T3635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.439934][ T3635] RIP: 0033:0x7f2d7c1af093 [ 310.444341][ T3635] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 310.464118][ T3635] RSP: 002b:00007fff6d58e6a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 310.472615][ T3635] RAX: ffffffffffffffda RBX: 0000555591da0600 RCX: 00007f2d7c1af093 [ 310.480587][ T3635] RDX: 0000000000008000 RSI: 0000555591da0600 RDI: 0000000000000005 [ 310.488548][ T3635] RBP: 0000555591da05d4 R08: 0000000000000000 R09: 0000000000000000 [ 310.496506][ T3635] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 310.504464][ T3635] R13: 0000000000000010 R14: 0000555591da05d0 R15: 00007fff6d590950 [ 310.512428][ T3635] [ 310.515830][ T3635] Kernel Offset: disabled [ 310.520180][ T3635] Rebooting in 86400 seconds..