last executing test programs: 11.6832777s ago: executing program 4 (id=1507): socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 10.780243216s ago: executing program 4 (id=1513): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x40, 0x200000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, '\x00', @ptr=0x2}}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) 9.686679668s ago: executing program 3 (id=1517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$hidraw(r4, &(0x7f0000004840)="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", 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 9.430583369s ago: executing program 4 (id=1518): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) mknod(0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) 8.607034988s ago: executing program 3 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000440)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x90) 8.436965642s ago: executing program 1 (id=1520): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nodelalloc}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) llistxattr(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 7.51742886s ago: executing program 3 (id=1521): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$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") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') open(&(0x7f0000000080)='./file0\x00', 0xa00, 0x50) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c40)="af", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x6) write$cgroup_int(r2, &(0x7f0000000140)=0xffffffff, 0x12) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x4840, 0x0) sendfile(r1, r5, 0x0, 0x1000000201005) read$FUSE(r5, &(0x7f0000003780)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xb0, 0x0, 0xe00, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 6.630848064s ago: executing program 1 (id=1524): r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x0, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r6, &(0x7f00000044c0)=""/22, 0x16) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x5411, 0xfffffffffffffffe) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.366963546s ago: executing program 1 (id=1526): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad2121c752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 4.945508945s ago: executing program 3 (id=1528): creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.944647556s ago: executing program 1 (id=1538): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) 4.5325704s ago: executing program 0 (id=1531): syz_read_part_table(0x1053, &(0x7f0000000000)="$eJzsz8GJwkAYBeCXkJ2QKjZ73iKsIhZgIwbvNmIttuN5JCSHWICI8H2HGd4b5oc/fNaccR9rn1xTttRmyE9yuo//jzRr17XL2bx8SpfksGtKUo45Z6710tfym357+Gun5RrWGdPtjZsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNd4BgAA///aLQyW") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001100)=ANY=[@ANYBLOB="ee917de7eaa5363763f15792603e380000800c0f7acf75", @ANYRES32=0x0, @ANYBLOB="007d1d00140001000000000000000000000000000000000008010200ffffffff8ecbc94aee2b5a04ce2fdf94b1e35a"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x5) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1bbac77, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x4b]}}]}) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)) r5 = epoll_create1(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) 4.53171538s ago: executing program 4 (id=1532): socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x432800, 0x11) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r4, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 4.072450008s ago: executing program 0 (id=1534): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nodelalloc}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) llistxattr(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.071931899s ago: executing program 1 (id=1535): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sb={'sb', 0x3d, 0x1}}, {@prjquota}, {@usrquota}, {@usrjquota}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000c00)=""/4096, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000001c00)={0x9, {0x0, 0x5fb, 0x7112}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = io_uring_setup(0x6211, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x18, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) 3.713671129s ago: executing program 2 (id=1537): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}]}, 0x2c}}, 0x0) 3.565495961s ago: executing program 4 (id=1539): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000001880)={[{@noinit_itable}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3f5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_continue}, {@noquota}, {@jqfmt_vfsold}]}, 0x0, 0x401, &(0x7f0000001980)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000001940)='mounts\x00') pread64(r0, &(0x7f0000000880)=""/4096, 0x1000, 0x0) r1 = memfd_create(&(0x7f0000000000)='#}\x00', 0x0) ftruncate(r1, 0x8001) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000000)=@null) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000100)=0x4, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0xa8, 0x1, 0xa3, "c84f86c11978a1e651ab0214f1b3421f", "5b31709f6181c637e4b34e8c267e066bfbca6533a4bde92235904e9ebc19bec6b84580a57ecc820776fa868cfc35a1612bf76c0473dd3c0857260c781638a1db0370136049a3f40add2f202d7e012af881a5a6265791a4472d90bdc1c60b56517931ca609155c4dd26ccceb7e8d39334882afaafbe5637b5973f4c2085cdff89afcdb604236f390a56618c5388987af334fa79"}, 0xa8, 0x0) 2.901382747s ago: executing program 0 (id=1540): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0008800800"], 0x34}}, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) listen(r3, 0x0) listen(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x10001}) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002"], 0x20}}, 0x0) 2.74938228s ago: executing program 2 (id=1541): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x92000800) inotify_add_watch(r0, 0x0, 0x20000800) 2.321954016s ago: executing program 2 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev}, "00186371ae9b1c03"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) getpid() signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x200000}}, 0x10, 0x0}, 0x0) 2.160853729s ago: executing program 0 (id=1543): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x0) connect$can_bcm(r0, &(0x7f0000001200), 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@const={0x8, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x5f, 0x61, 0x61, 0x0, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/220, 0x2e, 0xdc, 0x1, 0x9f, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xff4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23edae42, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {}, 0x0, {0x2, 0xfffc, @empty}, 'veth1_macvtap\x00'}) r4 = getuid() quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r4, &(0x7f0000000480)) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "121f4496bd54e16c"}}, 0x48}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) close(r0) 2.159801809s ago: executing program 1 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGA5CpYcYjfQ5NBceimhUEoDpR+g9x5Dv0Ch3yHQBkIJpj304rLyylFiyVIcxVai3w82mdldeXY0+x9mNBIbwNAaz/4pRLwSEd8kEYdbjhUjPzi+ft7qw+sz2ZbE2tqnfyWR5Pua5yf5/webmWLEr19FnCxsLre2vDJfrlTSxTw/UV+4MlFbXjl1aaE8l86ll6emp8+8PT313rvv9K2ub5z/5/tP7n545uvjq9/9fP/I7STOxqH8WGs9nsGN1sx4jOfvyWicfeLEyT4UNkiS3b4AtmUkj/PRyPqAwzGSRz3w8vsyItaAIZWIfxhSzXFAc27fp3nwC+PBB+sToM31L65/NhL7GnOjA6vJYzOjbL471ofyszJ++fPO7WyL/n0OAdDVjZsRcbpY3Nz/JXn/t32nezjnyTL0f7Bz7mbjnzfbjX8KG+OfaDP+Odgmdreje/wX7vehmI6y8d/7bce/G4tWYyN57n+NMd9ocvFSJc36tv9HxIkY3Zvlt1rPObN6b63TsdbxX7Zl5TfHgvl13C/uffw1s+V6+Vnq3OrBzYhX245/k432T9q0f/Z+nO+xjGPpndc6Hete/+dr7aeI19u2/6MVrWTr9cmJxv0w0bwrNvv71rHfOpW/2/XP2v/A1vUfS1rXa2tPX8aP+/5NOx3b7v2/J/mskd6T77tWrtcXJyP2JB9v3j/16LXNfPP8rP4njm/d/7W7//dHxOc91v/W0VsdTx2E9p99qvZ/+sS9j774oVP5vbX/W43UiXxPL/1frxf4LO8dAAAAAAAADJpCRByKpFDaSBcKpdL69zuOxoFCpVqrn7xYXbo8G43fyo7FaKG50n245fsQk/n3YZv5qSfy0xFxJCK+HdnfyJdmqpXZ3a48AAAAAAAAAAAAAAAAAAAADIiDHX7/n/ljZLevDnjutnjk9+87eR3Azuv6yP9+POkJGEhd4x94aYl/GF7iH4aX+IfhJf5heIl/GF7iH4aX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+On/uXLatrT68PpPlZ68uL81Xr56aTWvzpYWlmdJMdfFKaa5anaukpZnqQre/V6lWr0xOxdK1iXpaq0/UllcuLFSXLtcvXFooz6UX0tEdqRUAAAAAAAAAAAAAAAAAAAC8WGrLK/PlSiVdlJDYVqI4GJch0efEVr1Gcec6KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIiP8CAAD//wTEOXk=") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x4000) 2.096046154s ago: executing program 2 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000380)) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000080)) connect$rose(0xffffffffffffffff, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x40) 1.980880024s ago: executing program 4 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x3, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xffff0001}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000015c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "de6ec7", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e3d267", 0x0, 0x8, 0x0, @loopback, @mcast1, [], "16de241b014f35b7"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bind$pptp(0xffffffffffffffff, &(0x7f00000006c0)={0x18, 0x2, {0xffff, @local}}, 0x1e) 1.19568189s ago: executing program 2 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev}, "00186371ae9b1c03"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) getpid() signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x200000}}, 0x10, 0x0}, 0x0) 1.160025313s ago: executing program 0 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r4, 0x40384708, 0x20000000) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) 968.019779ms ago: executing program 2 (id=1549): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0), 0x60) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r7, 0x29, 0xce, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0xd, 0x1, 0x81, 0x88, 0x4005, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x3c0000, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, '\x00', @p_u32=&(0x7f0000000100)=0x9}}) socket$alg(0x26, 0x5, 0x0) 962.435709ms ago: executing program 3 (id=1550): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x9, 0xc56, &(0x7f0000001bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0xafb34d06cd7b6e73, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) unshare(0x24020400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000240)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x3ff, 0x4e, 0x7ff, 0xf6, 0xad15, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00010001040103f00c0000000000000f0000000500010004000000"], 0x1c}}, 0x0) close(r1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x100000) 146.754228ms ago: executing program 0 (id=1551): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getrlimit(0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r3, 0x5421, &(0x7f0000001100)=0x2000000009) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$inet6(0xa, 0x80803, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046302}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1552): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x2000000, 0x20, 0x0, &(0x7f0000000000)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 348.615663][ T7379] netlink: 68 bytes leftover after parsing attributes in process `syz.4.932'. [ 348.615716][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 348.615833][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.932'. [ 348.615847][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.932'. [ 348.686731][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.786969][ T7382] "syz.1.938" (7382) uses obsolete ecb(arc4) skcipher [ 350.256720][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 350.481109][ T7387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.554052][ T7394] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 350.671247][ T7387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.672161][ T7390] loop2: detected capacity change from 0 to 4096 [ 350.701667][ T7387] bond0 (unregistering): Released all slaves [ 350.731102][ T26] audit: type=1326 audit(1729304873.693:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x0 [ 350.752781][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.371025][ T7390] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 351.460252][ T7393] device bond0 entered promiscuous mode [ 351.469271][ T7393] device bond_slave_0 entered promiscuous mode [ 351.479568][ T7393] device bond_slave_1 entered promiscuous mode [ 351.498019][ T7393] device bond0 left promiscuous mode [ 351.506699][ T7393] device bond_slave_0 left promiscuous mode [ 351.519154][ T7393] device bond_slave_1 left promiscuous mode [ 355.831203][ T7442] loop3: detected capacity change from 0 to 128 [ 356.062048][ T7442] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 357.818161][ T26] audit: type=1800 audit(1729304881.039:211): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.958" name="file3" dev="loop3" ino=95 res=0 errno=0 [ 357.886926][ T7454] nullb0: AHDI p1 [ 358.957730][ T7472] loop4: detected capacity change from 0 to 4096 [ 359.039011][ T7472] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 361.022233][ T4894] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 361.047941][ T7486] loop1: detected capacity change from 0 to 512 [ 361.076011][ T4894] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 361.269704][ T26] audit: type=1326 audit(1729304884.764:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.0.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x0 [ 361.271807][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #16: comm syz.1.967: casefold flag without casefold feature [ 361.291360][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.312150][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.967: couldn't read orphan inode 16 (err -117) [ 361.325979][ T7486] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 361.347856][ T7486] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.426025][ T26] audit: type=1326 audit(1729304884.922:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.1.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f712b4adff9 code=0x0 [ 363.154542][ T7519] loop2: detected capacity change from 0 to 256 [ 363.663580][ T7529] loop1: detected capacity change from 0 to 8192 [ 363.732274][ T7529] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 363.826085][ T7529] REISERFS (device loop1): using ordered data mode [ 363.850902][ T7529] reiserfs: using flush barriers [ 363.873857][ T7529] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 363.983433][ T7529] REISERFS (device loop1): checking transaction log (loop1) [ 364.022717][ T7529] REISERFS (device loop1): Using r5 hash to sort names [ 364.056888][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 364.113703][ T7529] reiserfs: enabling write barrier flush mode [ 364.166405][ T7529] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 364.740100][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.775998][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.119271][ T7524] device bridge_slave_0 entered promiscuous mode [ 365.326553][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.355339][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.381278][ T7524] device bridge_slave_1 entered promiscuous mode [ 365.417173][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.441518][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.462049][ T3616] Bluetooth: hci2: command 0x0409 tx timeout [ 365.639796][ T7524] team0: Port device team_slave_0 added [ 366.221300][ T7524] team0: Port device team_slave_1 added [ 366.699927][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.725528][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.711549][ T3617] Bluetooth: hci2: command 0x041b tx timeout [ 367.805901][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.821298][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.828555][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.854482][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.891998][ T7597] loop1: detected capacity change from 0 to 512 [ 367.905060][ T7596] loop2: detected capacity change from 0 to 512 [ 367.943796][ T7524] device hsr_slave_0 entered promiscuous mode [ 367.961153][ T7524] device hsr_slave_1 entered promiscuous mode [ 367.976395][ T7596] EXT4-fs (loop2): 1 orphan inode deleted [ 367.982431][ T7524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.990084][ T7524] Cannot create hsr debugfs directory [ 367.993406][ T7596] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 368.055114][ T7596] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.079587][ T7597] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 368.160532][ T7597] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 368.251780][ T7597] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 368.427796][ T26] audit: type=1804 audit(1729304892.257:214): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1001" name="/newroot/23/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 368.960546][ T7597] EXT4-fs (loop1): 1 truncate cleaned up [ 368.960577][ T7597] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 368.978955][ T7606] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.999: lblock 0 mapped to illegal pblock 4 (length 1) [ 369.004844][ T7524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.088401][ T7606] EXT4-fs (loop1): Remounting filesystem read-only [ 369.120804][ T7610] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.999: lblock 0 mapped to illegal pblock 4 (length 1) [ 369.133365][ T7610] EXT4-fs (loop1): Remounting filesystem read-only [ 369.135345][ T7610] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.999: lblock 0 mapped to illegal pblock 4 (length 1) [ 369.143548][ T7610] EXT4-fs (loop1): Remounting filesystem read-only [ 369.394556][ T7524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.122647][ T1078] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.266567][ T1075] Bluetooth: hci2: command 0x040f tx timeout [ 370.609926][ T7524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.746981][ T7622] loop4: detected capacity change from 0 to 8192 [ 370.782857][ T7614] Bluetooth: (null): Too short H5 packet [ 370.823373][ T7524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.866636][ T7622] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 370.875709][ T3617] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 370.876443][ T7622] REISERFS (device loop4): using ordered data mode [ 370.890955][ T7622] reiserfs: using flush barriers [ 370.936919][ T3703] tipc: Disabling bearer [ 370.945612][ T3703] tipc: Left network mode [ 370.974187][ T7622] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 371.068545][ T7622] REISERFS (device loop4): checking transaction log (loop4) [ 371.153119][ T7622] REISERFS (device loop4): Using r5 hash to sort names [ 371.275119][ T3617] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.333766][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.400998][ T7622] reiserfs: enabling write barrier flush mode [ 371.501640][ T7622] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 371.535654][ T3617] usb 3-1: config 0 descriptor?? [ 371.690483][ T7524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.735073][ T7524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.748834][ T7524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.195130][ T7524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.466400][ T3621] Bluetooth: hci2: command 0x0419 tx timeout [ 373.072758][ T7647] program syz.0.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.093758][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.105330][ T3617] [drm:udl_init] *ERROR* Selecting channel failed [ 373.930115][ T3617] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 373.937751][ T3617] [drm] Initialized udl on minor 2 [ 373.953850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.962665][ T3617] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.995924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.017959][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.020169][ T3617] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 374.047325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.068361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.097302][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.104490][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.113876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.131523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.173136][ T3617] usb 3-1: USB disconnect, device number 9 [ 374.201823][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.208899][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.297782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.338939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.394643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.408633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.453767][ T7637] loop1: detected capacity change from 0 to 32768 [ 374.471913][ T7524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.495582][ T7524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.627327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.659828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.948331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.004706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.013492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.022960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.031565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.040268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.048711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.794187][ T3621] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 375.803438][ T3621] Bluetooth: hci3: Injecting HCI hardware error event [ 375.818850][ T7689] loop2: detected capacity change from 0 to 4096 [ 375.819187][ T3583] Bluetooth: hci3: hardware error 0x00 [ 375.834286][ T7682] loop4: detected capacity change from 0 to 4096 [ 375.858848][ T7684] netlink: 'syz.1.1026': attribute type 3 has an invalid length. [ 375.866638][ T7684] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1026'. [ 375.915994][ T7682] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 375.976769][ T7689] NILFS (loop2): invalid segment: Checksum error in segment payload [ 375.985441][ T7689] NILFS (loop2): trying rollback from an earlier position [ 376.035162][ T7689] NILFS (loop2): recovery complete [ 376.046754][ T7699] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.055365][ T7682] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 376.095285][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.103592][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 376.132313][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.164459][ T3703] device hsr_slave_0 left promiscuous mode [ 376.184503][ T3703] device hsr_slave_1 left promiscuous mode [ 376.221037][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.249562][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.277500][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.285187][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.293351][ T3703] device bridge_slave_1 left promiscuous mode [ 376.299685][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.315786][ T3703] device bridge_slave_0 left promiscuous mode [ 376.322544][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.343259][ T3703] device veth1_macvtap left promiscuous mode [ 376.353491][ T3703] device veth1_vlan left promiscuous mode [ 376.369372][ T3703] device veth0_vlan left promiscuous mode [ 376.469727][ T26] audit: type=1800 audit(1729304900.715:215): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1027" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 376.649568][ T26] audit: type=1326 audit(1729304900.894:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7fc00000 [ 376.716086][ T26] audit: type=1326 audit(1729304900.957:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48eac4ff9 code=0x7fc00000 [ 376.879557][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 376.919418][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 376.961190][ T7714] loop2: detected capacity change from 0 to 256 [ 376.976066][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.982410][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.137065][ T26] audit: type=1800 audit(1729304901.418:218): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1034" name="file0" dev="loop2" ino=1048689 res=0 errno=0 [ 377.263685][ T26] audit: type=1326 audit(1729304901.544:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7fc00000 [ 377.329509][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.339006][ T154] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 377.347472][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.358961][ T4185] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 377.409342][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.418741][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.437461][ T7524] device veth0_vlan entered promiscuous mode [ 377.453333][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.465871][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.482280][ T7524] device veth1_vlan entered promiscuous mode [ 377.521076][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.538844][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.552969][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.616349][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.959063][ T7524] device veth0_macvtap entered promiscuous mode [ 378.155642][ T7524] device veth1_macvtap entered promiscuous mode [ 378.359321][ T7723] loop2: detected capacity change from 0 to 256 [ 378.511953][ T7723] FAT-fs (loop2): Directory bread(block 64) failed [ 378.518676][ T7723] FAT-fs (loop2): Directory bread(block 65) failed [ 378.525253][ T7723] FAT-fs (loop2): Directory bread(block 66) failed [ 378.531832][ T7723] FAT-fs (loop2): Directory bread(block 67) failed [ 378.538523][ T7723] FAT-fs (loop2): Directory bread(block 68) failed [ 378.545605][ T7723] FAT-fs (loop2): Directory bread(block 69) failed [ 378.552219][ T7723] FAT-fs (loop2): Directory bread(block 70) failed [ 378.558948][ T7723] FAT-fs (loop2): Directory bread(block 71) failed [ 378.566320][ T7723] FAT-fs (loop2): Directory bread(block 72) failed [ 378.572853][ T7723] FAT-fs (loop2): Directory bread(block 73) failed [ 378.703454][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.853356][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.000497][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.011217][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.028630][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.039693][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.056911][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.067665][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.087668][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.107096][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.126280][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.824011][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.833415][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.843755][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.854727][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.864592][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.875315][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.885154][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.895612][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.905438][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.915891][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.927445][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.969352][ T7738] device pim6reg1 entered promiscuous mode [ 380.009422][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.026650][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.042281][ T7524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.050998][ T7524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.067905][ T7524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.098143][ T7524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.380156][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.400514][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.410052][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.413137][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.431377][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.448596][ T7755] loop2: detected capacity change from 0 to 4096 [ 380.463330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.590933][ T7755] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 381.897199][ T7768] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1046'. [ 382.884574][ T7775] batman_adv: batadv0: Adding interface: ip6gretap1 [ 382.891201][ T7775] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 385.931067][ T3620] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 386.089584][ T7794] loop3: detected capacity change from 0 to 8192 [ 386.159869][ T3620] usb 5-1: Using ep0 maxpacket: 8 [ 386.284499][ T3620] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 386.294640][ T3620] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 386.339468][ T7794] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 386.382968][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 386.395386][ T7794] REISERFS (device loop3): using ordered data mode [ 386.402455][ T3620] usb 5-1: config 135 has no interface number 0 [ 386.452893][ T7794] reiserfs: using flush barriers [ 386.455565][ T3620] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.459138][ T7794] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 386.496064][ T7794] REISERFS (device loop3): checking transaction log (loop3) [ 386.508924][ T7794] REISERFS (device loop3): Using r5 hash to sort names [ 386.631194][ T7794] reiserfs: enabling write barrier flush mode [ 386.671970][ T7794] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 386.691279][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.704889][ T3620] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 386.725548][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.739684][ T3620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.742121][ T7792] device bridge_slave_0 entered promiscuous mode [ 386.760405][ T3620] usb 5-1: Product: syz [ 386.764641][ T3620] usb 5-1: Manufacturer: syz [ 386.769234][ T3620] usb 5-1: SerialNumber: syz [ 386.838158][ T3620] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 386.844640][ T3620] usb 5-1: No valid video chain found. [ 386.889194][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.919578][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.928313][ T7792] device bridge_slave_1 entered promiscuous mode [ 387.209850][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.317010][ T7808] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 387.348640][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.371656][ T7751] usb 5-1: USB disconnect, device number 9 [ 387.557580][ T7792] team0: Port device team_slave_0 added [ 387.577949][ T7792] team0: Port device team_slave_1 added [ 387.672611][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.702749][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.712000][ T7818] loop2: detected capacity change from 0 to 512 [ 387.756254][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.782099][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.789194][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 387.797768][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.838394][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.872666][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.880607][ T7818] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.1061: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 387.891926][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.915120][ T7818] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1061: couldn't read orphan inode 15 (err -117) [ 387.927414][ T7818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.950071][ T7818] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1061: Directory hole found for htree leaf block 0 [ 387.975673][ T7818] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1061: Directory hole found for htree leaf block 0 [ 388.000677][ T7818] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1061: Directory hole found for htree leaf block 0 [ 388.025816][ T7823] loop4: detected capacity change from 0 to 8 [ 388.178215][ T7825] loop2: detected capacity change from 0 to 1024 [ 388.234964][ T7792] device hsr_slave_0 entered promiscuous mode [ 388.248320][ T7792] device hsr_slave_1 entered promiscuous mode [ 388.267943][ T7823] loop4: detected capacity change from 0 to 512 [ 388.307439][ T7825] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,abort,dioread_lock,norecovery,discard,lazytime,nojournal_checksum,usrquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 388.439520][ T7828] Cannot find del_set index 0 as target [ 388.580636][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 388.891377][ T7792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.923213][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 388.943487][ T7792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.003381][ T7792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.037626][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 27751, setting to 1024 [ 389.056199][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 389.072969][ T21] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 389.082223][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.100754][ T21] usb 5-1: config 0 descriptor?? [ 389.119571][ T7792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.123402][ T7823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 389.143562][ T21] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 389.152552][ T21] usb 5-1: Detected SIO [ 389.159288][ T21] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 389.242128][ T7792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.258043][ T7792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.267824][ T7792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.283055][ T7792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.353341][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.373667][ T7751] usb 5-1: USB disconnect, device number 10 [ 389.379812][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.392856][ T7751] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 389.402946][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.412348][ T7751] ftdi_sio 5-1:0.0: device disconnected [ 389.422090][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.444914][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.456093][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.464996][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.472110][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.481020][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 389.526152][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.538708][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.547836][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.554934][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.826985][ T3620] Bluetooth: hci5: command 0x041b tx timeout [ 390.831732][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 390.929778][ T3621] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 390.943380][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 390.983722][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 390.995039][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 391.006571][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 391.023834][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1068'. [ 391.085359][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 391.097521][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 391.122821][ T7850] loop4: detected capacity change from 0 to 8192 [ 391.146865][ T7792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.169899][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.180618][ T7850] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 391.193491][ T7850] REISERFS (device loop4): using ordered data mode [ 391.202641][ T7850] reiserfs: using flush barriers [ 391.207823][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 391.308607][ T7850] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.342499][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 391.343800][ T7850] REISERFS (device loop4): checking transaction log (loop4) [ 391.365448][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 391.404090][ T7850] REISERFS (device loop4): Using r5 hash to sort names [ 391.496191][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.507734][ T3621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.577588][ T3621] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.624594][ T3621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.002581][ T3621] usb 3-1: config 0 descriptor?? [ 392.046456][ T7850] reiserfs: enabling write barrier flush mode [ 392.075924][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.097658][ T7850] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 392.127275][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 392.765567][ T3620] Bluetooth: hci5: command 0x040f tx timeout [ 393.031988][ T3621] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 393.068681][ T3621] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 393.101494][ T3621] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 393.189462][ T3621] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 393.248919][ T3621] usb 3-1: USB disconnect, device number 10 [ 393.325361][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.369735][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.383840][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.432291][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.448123][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 393.464178][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.544057][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.557422][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.595409][ T7792] device veth0_vlan entered promiscuous mode [ 393.625541][ T7792] device veth1_vlan entered promiscuous mode [ 393.679919][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.695337][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.740121][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.589746][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 394.615237][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1078'. [ 394.645073][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.669151][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.751744][ T1075] Bluetooth: hci5: command 0x0419 tx timeout [ 394.776663][ T7792] device veth0_macvtap entered promiscuous mode [ 394.843533][ T3703] device hsr_slave_0 left promiscuous mode [ 394.907775][ T3703] device hsr_slave_1 left promiscuous mode [ 394.934785][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.074006][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.089054][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.104992][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.106993][ T7911] loop4: detected capacity change from 0 to 512 [ 396.262306][ T3703] device bridge_slave_1 left promiscuous mode [ 396.299176][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.330629][ T3703] device bridge_slave_0 left promiscuous mode [ 396.336865][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.360958][ T7913] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1086'. [ 396.424833][ T3703] device veth1_macvtap left promiscuous mode [ 396.460295][ T3703] device veth0_macvtap left promiscuous mode [ 396.493501][ T3703] device veth1_vlan left promiscuous mode [ 398.545598][ T7930] loop2: detected capacity change from 0 to 512 [ 398.658022][ T7930] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 398.724305][ T7930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 398.759861][ T7930] System zones: 1-12 [ 398.780309][ T7930] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.812985][ T7930] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1091: invalid indirect mapped block 12 (level 1) [ 398.862751][ T7930] EXT4-fs (loop2): Remounting filesystem read-only [ 398.863995][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 398.869468][ T7930] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1091: invalid indirect mapped block 2 (level 2) [ 398.892734][ T7930] EXT4-fs (loop2): Remounting filesystem read-only [ 398.893458][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 398.899602][ T7930] EXT4-fs (loop2): 1 truncate cleaned up [ 398.913484][ T7930] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x00000000000006bb,noload,errors=remount-ro,errors=remount-ro,init_itable=0x0000000000000002. Quota mode: none. [ 398.936149][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.953079][ T3703] device bond_slave_1 left promiscuous mode [ 398.986920][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.996598][ T3703] device bond_slave_0 left promiscuous mode [ 399.091297][ T7751] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 399.172579][ T3703] bond0 (unregistering): Released all slaves [ 399.226531][ T7792] device veth1_macvtap entered promiscuous mode [ 399.233540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.242324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.251950][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'. [ 399.270920][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.310546][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.336733][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.359020][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.369127][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.395322][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.412203][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.413696][ T7942] loop4: detected capacity change from 0 to 8192 [ 399.423342][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.452145][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.464523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.503614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.513418][ T7942] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 399.525076][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.536766][ T7751] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 399.545982][ T7942] REISERFS (device loop4): using ordered data mode [ 399.557457][ T7942] reiserfs: using flush barriers [ 399.566850][ T7942] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 399.579252][ T7751] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 399.591584][ T7942] REISERFS (device loop4): checking transaction log (loop4) [ 399.600684][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.615925][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.626813][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.637060][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.647974][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.658163][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.681572][ T7950] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 399.699917][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.712222][ T7949] ip_tunnel: non-ECT from 172.30.0.3 with TOS=0x2 [ 399.739906][ T7942] REISERFS (device loop4): Using r5 hash to sort names [ 399.779273][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.926284][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.983620][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.007799][ T7942] reiserfs: enabling write barrier flush mode [ 400.206257][ T7751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 400.214465][ T7792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.232073][ T7942] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 400.239647][ T7792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.256830][ T7792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.269911][ T7792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.415613][ T7751] usb 4-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 400.446240][ T7751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.493905][ T7751] usb 4-1: Product: syz [ 400.537673][ T7751] usb 4-1: Manufacturer: syz [ 400.558468][ T26] audit: type=1400 audit(1729304925.932:220): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7941 comm="syz.4.1096" [ 400.642058][ T7751] usb 4-1: SerialNumber: syz [ 400.670470][ T7751] usb 4-1: config 0 descriptor?? [ 400.744507][ T7751] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 400.785851][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.815500][ T7751] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 400.835153][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.882311][ T7751] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 400.904789][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.928798][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.987587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.995578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.047448][ T7751] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 401.064350][ T7751] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 401.165029][ T7751] usb 4-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 401.194969][ T7751] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 401.257534][ T7751] usb 4-1: USB disconnect, device number 6 [ 401.828715][ T7967] loop1: detected capacity change from 0 to 128 [ 402.225337][ T7969] loop3: detected capacity change from 0 to 256 [ 402.311255][ T3620] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 402.327444][ T7967] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.395412][ T7967] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.465928][ T7969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 404.552934][ T7981] loop4: detected capacity change from 0 to 8 [ 405.972007][ T7751] Bluetooth: hci1: command 0x0406 tx timeout [ 407.321057][ T8000] loop4: detected capacity change from 0 to 256 [ 407.553601][ T1078] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 407.954170][ T1078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.052330][ T1078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.221202][ T1078] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.886189][ T1078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.893846][ T8018] loop3: detected capacity change from 0 to 512 [ 412.139985][ T1078] usb 4-1: config 0 descriptor?? [ 412.158794][ T8018] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 412.166705][ T8018] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 412.184364][ T1078] usb 4-1: can't set config #0, error -71 [ 412.223727][ T8018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 412.592451][ T8018] System zones: 1-12 [ 412.842171][ T1078] usb 4-1: USB disconnect, device number 7 [ 412.915044][ T8018] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1117: corrupted in-inode xattr [ 412.935762][ T8018] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1117: couldn't read orphan inode 15 (err -117) [ 413.030018][ T8018] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 413.930862][ T8052] 9pnet: Insufficient options for proto=fd [ 413.992035][ T8052] IPVS: length: 198 != 420120 [ 415.443698][ T8061] loop4: detected capacity change from 0 to 8192 [ 415.586170][ T8061] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 415.612583][ T8061] REISERFS (device loop4): using ordered data mode [ 415.619655][ T8061] reiserfs: using flush barriers [ 415.643684][ T8061] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 415.821448][ T8061] REISERFS (device loop4): checking transaction log (loop4) [ 415.859252][ T8061] REISERFS (device loop4): Using r5 hash to sort names [ 415.945927][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 415.973726][ T8061] reiserfs: enabling write barrier flush mode [ 416.013873][ T8061] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 416.239810][ T8088] loop3: detected capacity change from 0 to 2048 [ 416.247307][ T26] audit: type=1400 audit(1729304942.460:221): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8060 comm="syz.4.1132" [ 416.327290][ T8088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 416.340517][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 416.413782][ T8088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 416.443723][ T8088] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 416.471379][ T8088] UDF-fs: Scanning with blocksize 512 failed [ 416.492427][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.799509][ T8106] x_tables: duplicate underflow at hook 1 [ 417.017733][ T1075] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 417.415461][ T1075] usb 2-1: Using ep0 maxpacket: 8 [ 417.711360][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 417.722562][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.735342][ T1075] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.285001][ T1078] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 418.295312][ T1078] Bluetooth: hci1: Injecting HCI hardware error event [ 418.329457][ T3583] Bluetooth: hci1: hardware error 0x00 [ 418.430153][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 418.441828][ T1075] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 418.451937][ T1075] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 418.463962][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.490724][ T1075] usb 2-1: config 0 descriptor?? [ 418.503748][ T8127] loop3: detected capacity change from 0 to 8192 [ 418.512282][ T8101] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 418.693660][ T8127] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 418.741036][ T8127] REISERFS (device loop3): using ordered data mode [ 418.747743][ T8127] reiserfs: using flush barriers [ 418.882532][ T8135] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1156'. [ 418.903272][ T8127] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 419.238997][ T8127] REISERFS (device loop3): checking transaction log (loop3) [ 419.477886][ T8127] REISERFS (device loop3): Using r5 hash to sort names [ 419.516455][ T3617] usb 2-1: USB disconnect, device number 9 [ 419.565073][ T8127] reiserfs: enabling write barrier flush mode [ 419.658214][ T8127] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 419.680205][ T26] audit: type=1400 audit(1729304946.060:222): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=8128 comm="syz.4.1155" [ 419.960270][ T26] audit: type=1400 audit(1729304946.312:223): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8126 comm="syz.3.1154" [ 420.275622][ T26] audit: type=1400 audit(1729304946.689:224): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8146 comm="syz.0.1161" [ 421.998791][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 422.292071][ T8182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 422.988391][ T8189] loop4: detected capacity change from 0 to 8192 [ 423.177107][ T8193] loop2: detected capacity change from 0 to 8192 [ 423.272969][ T26] audit: type=1326 audit(1729304949.827:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.306708][ T26] audit: type=1326 audit(1729304949.859:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.346362][ T26] audit: type=1326 audit(1729304949.859:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.409083][ T26] audit: type=1326 audit(1729304949.859:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.528069][ T26] audit: type=1326 audit(1729304949.859:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.568204][ T26] audit: type=1326 audit(1729304949.859:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.966665][ T26] audit: type=1326 audit(1729304949.859:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 423.977384][ T8193] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 424.057581][ T8193] REISERFS (device loop2): using ordered data mode [ 424.066537][ T26] audit: type=1326 audit(1729304949.859:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 424.093739][ T8189] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 424.104296][ T8193] reiserfs: using flush barriers [ 424.130431][ T8189] REISERFS (device loop4): using ordered data mode [ 424.146950][ T8193] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.183924][ T8189] reiserfs: using flush barriers [ 424.211264][ T8189] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.252404][ T26] audit: type=1326 audit(1729304949.859:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 424.283316][ T8193] REISERFS (device loop2): checking transaction log (loop2) [ 424.293377][ T8193] REISERFS (device loop2): Using r5 hash to sort names [ 424.306669][ T8189] REISERFS (device loop4): checking transaction log (loop4) [ 424.320387][ T26] audit: type=1326 audit(1729304949.859:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48eac4ff9 code=0x7ffc0000 [ 424.349676][ T8189] REISERFS (device loop4): Using r5 hash to sort names [ 424.420389][ T8189] reiserfs: enabling write barrier flush mode [ 424.427999][ T8193] reiserfs: enabling write barrier flush mode [ 424.525262][ T8189] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 424.576182][ T8193] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 425.750644][ T8221] loop1: detected capacity change from 0 to 8192 [ 425.820804][ T8221] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 425.830013][ T8221] REISERFS (device loop1): using ordered data mode [ 425.878300][ T8221] reiserfs: using flush barriers [ 425.896929][ T8221] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 425.936965][ T8234] loop3: detected capacity change from 0 to 1024 [ 425.947938][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 425.977699][ T8221] REISERFS (device loop1): checking transaction log (loop1) [ 426.026045][ T8221] REISERFS (device loop1): Using r5 hash to sort names [ 426.063962][ T8221] reiserfs: enabling write barrier flush mode [ 426.070187][ T8241] input: syz0 as /devices/virtual/input/input14 [ 426.187733][ T8221] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 426.315336][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1195'. [ 426.342423][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 427.110679][ T8251] loop2: detected capacity change from 0 to 8192 [ 427.123596][ T301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.189087][ T8251] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 427.218545][ T8251] REISERFS (device loop2): using ordered data mode [ 427.240673][ T8251] reiserfs: using flush barriers [ 427.241912][ T301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.249191][ T8264] loop4: detected capacity change from 0 to 8192 [ 427.278538][ T8251] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.296860][ T8251] REISERFS (device loop2): checking transaction log (loop2) [ 427.306962][ T8251] REISERFS (device loop2): Using r5 hash to sort names [ 427.313849][ T8251] REISERFS (device loop2): using 3.5.x disk format [ 427.335418][ T8264] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 427.341436][ T8251] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 427.385123][ T301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.401089][ T8264] REISERFS (device loop4): using ordered data mode [ 427.421190][ T8264] reiserfs: using flush barriers [ 427.519860][ T8264] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.551351][ T8264] REISERFS (device loop4): checking transaction log (loop4) [ 427.565132][ T301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.604615][ T8264] REISERFS (device loop4): Using r5 hash to sort names [ 427.637333][ T8264] reiserfs: enabling write barrier flush mode [ 427.694380][ T8264] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 427.765181][ T8279] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.344580][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 428.344595][ T26] audit: type=1400 audit(1729304955.145:253): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8263 comm="syz.4.1202" [ 428.692690][ T8285] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 428.750715][ T8284] bond0: (slave bond_slave_0): Releasing backup interface [ 428.996160][ T8287] loop2: detected capacity change from 0 to 8192 [ 429.105023][ T301] batman_adv: batadv0: Removing interface: ip6gretap1 [ 429.164157][ T8287] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 429.182128][ T8287] REISERFS (device loop2): using ordered data mode [ 429.193698][ T8287] reiserfs: using flush barriers [ 429.212652][ T8287] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 429.356284][ T8287] REISERFS (device loop2): checking transaction log (loop2) [ 429.476297][ T8287] REISERFS (device loop2): Using r5 hash to sort names [ 429.565281][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 429.904707][ T8272] chnl_net:caif_netlink_parms(): no params data found [ 429.932081][ T8287] reiserfs: enabling write barrier flush mode [ 429.941040][ T8287] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 431.357026][ T8337] loop4: detected capacity change from 0 to 128 [ 431.549546][ T4425] Bluetooth: hci2: command 0x041b tx timeout [ 431.825219][ T8337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.836088][ T8337] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.887331][ T8335] loop1: detected capacity change from 0 to 4096 [ 431.921912][ T26] audit: type=1400 audit(1729304958.902:254): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8315 comm="syz.0.1218" [ 431.936155][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.959884][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.968384][ T8272] device bridge_slave_0 entered promiscuous mode [ 431.976542][ T8341] device lo entered promiscuous mode [ 432.004340][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.033372][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.093800][ T8272] device bridge_slave_1 entered promiscuous mode [ 432.128415][ T8335] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 432.171330][ T8335] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 432.302888][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.384678][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.400365][ T144] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 432.423779][ T7792] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 432.570898][ T8272] team0: Port device team_slave_0 added [ 432.616955][ T8272] team0: Port device team_slave_1 added [ 432.744119][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.763837][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.856878][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.888409][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.888785][ T8376] loop4: detected capacity change from 0 to 8192 [ 432.898037][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.998196][ T8376] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 433.012188][ T8376] REISERFS (device loop4): using ordered data mode [ 433.043749][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.046828][ T8385] loop2: detected capacity change from 0 to 8192 [ 433.061208][ T8376] reiserfs: using flush barriers [ 433.080058][ T8376] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.101853][ T8376] REISERFS (device loop4): checking transaction log (loop4) [ 433.132084][ T8376] REISERFS (device loop4): Using r5 hash to sort names [ 433.137765][ T8392] loop1: detected capacity change from 0 to 256 [ 433.149254][ T8376] reiserfs: enabling write barrier flush mode [ 433.167499][ T8376] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 433.210680][ T8385] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 433.234347][ T8385] REISERFS (device loop2): using ordered data mode [ 433.240890][ T8385] reiserfs: using flush barriers [ 433.360628][ T8385] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.448632][ T26] audit: type=1400 audit(1729304960.508:255): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8372 comm="syz.4.1230" [ 433.513230][ T8385] REISERFS (device loop2): checking transaction log (loop2) [ 433.529409][ T4425] Bluetooth: hci2: command 0x040f tx timeout [ 433.555434][ T8400] hub 6-0:1.0: USB hub found [ 433.560721][ T8400] hub 6-0:1.0: 1 port detected [ 433.582322][ T8392] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.690507][ T8385] REISERFS (device loop2): Using r5 hash to sort names [ 433.730146][ T8392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 433.787223][ T8385] reiserfs: enabling write barrier flush mode [ 433.797171][ T8272] device hsr_slave_0 entered promiscuous mode [ 433.828375][ T8272] device hsr_slave_1 entered promiscuous mode [ 433.857288][ T8272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.867899][ T8272] Cannot create hsr debugfs directory [ 433.886288][ T8385] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 433.960544][ T301] device hsr_slave_0 left promiscuous mode [ 433.975410][ T301] device hsr_slave_1 left promiscuous mode [ 433.985249][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.086387][ T301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.137617][ T26] audit: type=1400 audit(1729304961.221:256): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8384 comm="syz.2.1233" [ 434.169048][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.176894][ T301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.191795][ T301] device bridge_slave_1 left promiscuous mode [ 434.208266][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.231979][ T301] device bridge_slave_0 left promiscuous mode [ 434.242312][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.273343][ T301] device veth1_macvtap left promiscuous mode [ 434.279392][ T301] device veth0_macvtap left promiscuous mode [ 434.294742][ T301] device veth1_vlan left promiscuous mode [ 434.300766][ T301] device veth0_vlan left promiscuous mode [ 434.967978][ T301] team0 (unregistering): Port device team_slave_1 removed [ 434.995645][ T301] team0 (unregistering): Port device team_slave_0 removed [ 435.025077][ T301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.055042][ T301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.141094][ T301] bond0 (unregistering): Released all slaves [ 435.539596][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.550725][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.617507][ T8449] loop1: detected capacity change from 0 to 8192 [ 435.652013][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 436.481509][ T8449] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 436.506836][ T8449] REISERFS (device loop1): using ordered data mode [ 436.531974][ T8449] reiserfs: using flush barriers [ 436.578747][ T8449] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.754173][ T8449] REISERFS (device loop1): checking transaction log (loop1) [ 436.819371][ T8449] REISERFS (device loop1): Using r5 hash to sort names [ 436.905364][ T8449] reiserfs: enabling write barrier flush mode [ 436.943055][ T8472] device bridge3 entered promiscuous mode [ 436.949095][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 437.000747][ T8449] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 437.758531][ T26] audit: type=1400 audit(1729304964.548:257): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8448 comm="syz.1.1248" [ 438.228925][ T3620] Bluetooth: hci0: command 0x0406 tx timeout [ 438.478188][ T8483] loop2: detected capacity change from 0 to 8192 [ 438.595899][ T8483] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 438.622040][ T8490] loop4: detected capacity change from 0 to 64 [ 438.628119][ T8483] REISERFS (device loop2): using ordered data mode [ 438.646007][ T8483] reiserfs: using flush barriers [ 438.661112][ T8483] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.706399][ T8483] REISERFS (device loop2): checking transaction log (loop2) [ 438.729451][ T8483] REISERFS (device loop2): Using r5 hash to sort names [ 438.752014][ T8483] reiserfs: enabling write barrier flush mode [ 438.760790][ T8483] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 438.974495][ T26] audit: type=1400 audit(1729304966.311:258): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8482 comm="syz.2.1255" [ 440.256545][ T8528] loop2: detected capacity change from 0 to 2048 [ 440.380330][ T8520] loop1: detected capacity change from 0 to 8192 [ 440.382438][ T8272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.434173][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.466560][ T8528] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.483089][ T8272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.522502][ T8520] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 440.531797][ T8520] REISERFS (device loop1): using ordered data mode [ 440.538424][ T8520] reiserfs: using flush barriers [ 440.545665][ T8520] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 440.571946][ T8520] REISERFS (device loop1): checking transaction log (loop1) [ 440.623625][ T8520] REISERFS (device loop1): Using r5 hash to sort names [ 440.648979][ T8520] reiserfs: enabling write barrier flush mode [ 440.704757][ T8520] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 440.726534][ T8272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.782583][ T8542] fs-verity: sha512 using implementation "sha512-avx2" [ 440.797473][ T8542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1261: bg 0: block 288: padding at end of block bitmap is not set [ 440.800525][ T8272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.822818][ T8542] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 441.099809][ T26] audit: type=1400 audit(1729304968.536:259): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8519 comm="syz.1.1263" [ 441.559778][ T8556] sch_fq: defrate 2 ignored. [ 441.604940][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.714642][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.737606][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.747143][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.766552][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.775776][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.807952][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.815110][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.897527][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.932558][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.969968][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 441.973626][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.986070][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.081896][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.130436][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.160517][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.189269][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.204443][ T8585] tmpfs: Bad value for 'mode' [ 442.263575][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.318179][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.354456][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.387345][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.440609][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.466997][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.502794][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.541640][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.587118][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.837085][ T8598] loop2: detected capacity change from 0 to 4096 [ 442.870525][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.897264][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.939324][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.955131][ T8598] ntfs3: Unknown parameter 'ÿ“5w' [ 443.071320][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.089498][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.160459][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.184378][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.214201][ T8272] device veth0_vlan entered promiscuous mode [ 443.222900][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.248306][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.281163][ T8272] device veth1_vlan entered promiscuous mode [ 443.287595][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 443.363431][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 443.404463][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 443.447457][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.479756][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.492225][ T8272] device veth0_macvtap entered promiscuous mode [ 443.531886][ T8272] device veth1_macvtap entered promiscuous mode [ 443.623310][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.634206][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.655327][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.685776][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.707006][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 443.716068][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.734628][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.757638][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.782892][ T21] usb 2-1: config 0 descriptor?? [ 443.817545][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.848601][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.894468][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.922650][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.948422][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.973592][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.985837][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.009992][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.065925][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.089706][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.116276][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.135943][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.182163][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.372548][ T21] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 444.444694][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.684304][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.761982][ T21] usb 2-1: USB disconnect, device number 10 [ 444.818453][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.835430][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.913659][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.007937][ T8272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.053819][ T8272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.063487][ T8272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.072356][ T8272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.100222][ T8643] tipc: Started in network mode [ 445.106009][ T8643] tipc: Node identity , cluster identity 4711 [ 445.117526][ T8643] tipc: Failed to set node id, please configure manually [ 445.126595][ T8643] tipc: Enabling of bearer rejected, failed to enable media [ 446.662311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.724043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.986031][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 447.007688][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 447.020951][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.071283][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.136064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.196125][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.237988][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.292174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.493928][ T8692] loop4: detected capacity change from 0 to 128 [ 448.178179][ T8679] loop1: detected capacity change from 0 to 8192 [ 448.191560][ T8696] loop2: detected capacity change from 0 to 128 [ 448.210942][ T8692] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 448.217205][ T8695] option changes via remount are deprecated (pid=8686 comm=syz.0.1300) [ 448.474584][ T4185] sysv_free_block: flc_count > flc_size [ 448.483429][ T4185] sysv_free_block: flc_count > flc_size [ 448.488990][ T4185] sysv_free_block: flc_count > flc_size [ 448.494970][ T4185] sysv_free_block: flc_count > flc_size [ 448.501054][ T4185] sysv_free_block: flc_count > flc_size [ 448.508682][ T4185] sysv_free_block: flc_count > flc_size [ 448.514454][ T4185] sysv_free_block: flc_count > flc_size [ 448.520255][ T4185] sysv_free_block: flc_count > flc_size [ 448.525799][ T4185] sysv_free_block: flc_count > flc_size [ 448.541179][ T4185] sysv_free_block: flc_count > flc_size [ 448.549169][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 448.725242][ T8696] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.748432][ T8696] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 448.923449][ T8679] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 449.133815][ T8679] REISERFS (device loop1): using ordered data mode [ 449.419163][ T8679] reiserfs: using flush barriers [ 449.479964][ T8679] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 449.709223][ T8679] REISERFS (device loop1): checking transaction log (loop1) [ 450.645541][ T8679] REISERFS (device loop1): Using r5 hash to sort names [ 451.489155][ T8726] loop4: detected capacity change from 0 to 8192 [ 451.575147][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 451.610919][ T8726] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 451.646299][ T8726] REISERFS (device loop4): using ordered data mode [ 451.652949][ T8726] reiserfs: using flush barriers [ 451.798486][ T8726] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 452.190651][ T8726] REISERFS (device loop4): checking transaction log (loop4) [ 452.297250][ T8726] REISERFS (device loop4): Using r5 hash to sort names [ 452.407642][ T8726] reiserfs: enabling write barrier flush mode [ 452.457300][ T8726] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 452.752360][ T26] audit: type=1400 audit(1729304980.740:260): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8725 comm="syz.4.1308" [ 452.979892][ T8756] loop2: detected capacity change from 0 to 1024 [ 454.049412][ T8770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1318'. [ 454.064080][ T8771] loop3: detected capacity change from 0 to 1024 [ 455.037448][ T8771] hfsplus: failed to load root directory [ 456.285092][ T8811] loop1: detected capacity change from 0 to 512 [ 456.408552][ T8811] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1325: bg 0: block 393: padding at end of block bitmap is not set [ 456.468002][ T8811] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 456.537193][ T8811] EXT4-fs (loop1): 2 truncates cleaned up [ 456.565133][ T8811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 457.105749][ T8833] loop2: detected capacity change from 0 to 64 [ 457.391564][ T8827] futex_wake_op: syz.4.1317 tries to shift op by -1; fix this program [ 457.803981][ T26] audit: type=1800 audit(1729305242.068:261): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1329" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 458.112920][ T26] audit: type=1400 audit(1729305242.383:262): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8818 comm="syz.0.1327" [ 458.205133][ T8849] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 458.259777][ T8849] loop4: detected capacity change from 0 to 256 [ 458.403557][ T8849] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 458.500631][ T26] audit: type=1804 audit(1729305242.792:263): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1333" name="/newroot/245/file0/bus" dev="loop4" ino=1048700 res=1 errno=0 [ 459.539477][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.705470][ T8876] loop3: detected capacity change from 0 to 1024 [ 459.863076][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.342645][ T8870] loop4: detected capacity change from 0 to 4096 [ 460.393644][ T8876] EXT4-fs (loop3): Test dummy encryption mode enabled [ 460.400514][ T8876] EXT4-fs (loop3): Ignoring removed orlov option [ 460.422540][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.495631][ T8882] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 460.569046][ T8876] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 460.618536][ T8870] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 461.649515][ T8893] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 461.877485][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.501220][ T8887] chnl_net:caif_netlink_parms(): no params data found [ 463.675587][ T8922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1356'. [ 463.829818][ T1075] Bluetooth: hci3: command 0x0409 tx timeout [ 463.953720][ T8934] device batadv_slave_1 entered promiscuous mode [ 464.803641][ T8931] loop4: detected capacity change from 0 to 1024 [ 465.064725][ T8931] hfsplus: request for non-existent node -709361664 in B*Tree [ 465.100487][ T8931] hfsplus: request for non-existent node -709361664 in B*Tree [ 465.115257][ T8931] hfsplus: b-tree write err: -5, ino 8 [ 465.796447][ T1075] Bluetooth: hci3: command 0x041b tx timeout [ 465.803090][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.816626][ T1075] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/2 [ 465.833380][ T8962] loop3: detected capacity change from 0 to 2048 [ 465.836562][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.858340][ T8887] device bridge_slave_0 entered promiscuous mode [ 465.860046][ T1075] hid-generic: probe of 0000:0000:0000.0006 failed with error -22 [ 465.926128][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.963853][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.987278][ T8887] device bridge_slave_1 entered promiscuous mode [ 465.999676][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 466.037615][ T8928] device batadv_slave_1 left promiscuous mode [ 466.054646][ T8971] tap0: tun_chr_ioctl cmd 2147767511 [ 466.212552][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.241882][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.557311][ T8984] vimc link validate: Scaler:src:1920x1440 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 467.832325][ T7751] Bluetooth: hci3: command 0x040f tx timeout [ 467.832715][ T8887] team0: Port device team_slave_0 added [ 467.909144][ T8887] team0: Port device team_slave_1 added [ 468.197008][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.204193][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.231885][ T8887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.256695][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.263822][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.290985][ T8887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.852660][ T9013] loop3: detected capacity change from 0 to 64 [ 468.869324][ T8887] device hsr_slave_0 entered promiscuous mode [ 468.889594][ T8887] device hsr_slave_1 entered promiscuous mode [ 468.921635][ T8887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.929248][ T8887] Cannot create hsr debugfs directory [ 469.005378][ T9013] loop3: detected capacity change from 0 to 16 [ 469.340545][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 470.056287][ T3620] Bluetooth: hci3: command 0x0419 tx timeout [ 470.158387][ T9041] loop4: detected capacity change from 0 to 1024 [ 470.191162][ T21] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 470.200683][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.208828][ T21] usb 3-1: Product: syz [ 470.213468][ T21] usb 3-1: Manufacturer: syz [ 470.218152][ T21] usb 3-1: SerialNumber: syz [ 470.227773][ T21] usb 3-1: config 0 descriptor?? [ 470.377617][ T9045] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 470.692894][ T21] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 011 [ 472.476017][ T21] (null): failure reading functionality [ 472.527383][ T154] device hsr_slave_0 left promiscuous mode [ 472.542780][ T154] device hsr_slave_1 left promiscuous mode [ 472.554201][ T4185] hfsplus: bad catalog entry type [ 472.571246][ T21] i2c i2c-1: failure reading functionality [ 472.581847][ T21] i2c i2c-1: connected i2c-tiny-usb device [ 472.589744][ T21] usb 3-1: USB disconnect, device number 11 [ 472.612268][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.619839][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.631214][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.638690][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.688764][ T154] device bridge_slave_1 left promiscuous mode [ 472.695818][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.715530][ T154] device bridge_slave_0 left promiscuous mode [ 472.715752][ T3680] hfsplus: b-tree write err: -5, ino 4 [ 472.721726][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.740938][ T154] device veth1_macvtap left promiscuous mode [ 472.747792][ T154] device veth0_macvtap left promiscuous mode [ 472.755690][ T154] device veth1_vlan left promiscuous mode [ 472.788848][ T154] device veth0_vlan left promiscuous mode [ 473.312294][ T154] team0 (unregistering): Port device team_slave_1 removed [ 473.347917][ T154] team0 (unregistering): Port device team_slave_0 removed [ 473.371017][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.512464][ T154] bond0 (unregistering): Released all slaves [ 473.842516][ T9076] overlayfs: failed to resolve './file0': -2 [ 474.801876][ T8887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.853785][ T8887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.876151][ T8887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.899068][ T8887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.198777][ T9097] loop3: detected capacity change from 0 to 1024 [ 475.236440][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.288259][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.298264][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.324467][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.393183][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.428564][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.437175][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.444284][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.479090][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.514232][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.532548][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.568663][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.575819][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.595617][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.627195][ T9094] chnl_net:caif_netlink_parms(): no params data found [ 475.657514][ T9115] loop2: detected capacity change from 0 to 256 [ 475.703969][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.735731][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.827624][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.973705][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.191693][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.613513][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.736021][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.752777][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.819979][ T8887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.878853][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.954718][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.974255][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.992876][ T1075] Bluetooth: hci4: command 0x0409 tx timeout [ 477.037089][ T9094] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.044320][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.052651][ T9094] device bridge_slave_0 entered promiscuous mode [ 477.063883][ T9094] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.438282][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.705368][ T9094] device bridge_slave_1 entered promiscuous mode [ 477.892602][ T9094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.939511][ T9094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.058175][ T9094] team0: Port device team_slave_0 added [ 478.099934][ T9094] team0: Port device team_slave_1 added [ 478.162976][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.187942][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.219425][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.308813][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 478.336384][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.361401][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.376756][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.488904][ T9094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.518918][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.525878][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.638526][ T9094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.702743][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.737454][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.777092][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.804065][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.831526][ T9179] loop2: detected capacity change from 0 to 2048 [ 478.840626][ T8887] device veth0_vlan entered promiscuous mode [ 478.928064][ T9094] device hsr_slave_0 entered promiscuous mode [ 478.959559][ T9094] device hsr_slave_1 entered promiscuous mode [ 478.966118][ T3660] Bluetooth: hci4: command 0x041b tx timeout [ 479.027582][ T8887] device veth1_vlan entered promiscuous mode [ 479.151514][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.181686][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.216627][ T8887] device veth0_macvtap entered promiscuous mode [ 479.251531][ T8887] device veth1_macvtap entered promiscuous mode [ 479.308395][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.390012][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.752689][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.108658][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.137372][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.162821][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.213689][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.249913][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.275650][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.302400][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.327402][ T9198] loop3: detected capacity change from 0 to 8192 [ 480.334047][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.354506][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.365787][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.392379][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.404191][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.421063][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.431749][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.449812][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.478020][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 480.537254][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.548022][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.556094][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.568281][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.578454][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.781416][ T9198] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 480.799198][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.859648][ T9198] REISERFS (device loop3): using ordered data mode [ 481.009399][ T9198] reiserfs: using flush barriers [ 481.279753][ T9198] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 481.302773][ T9215] loop2: detected capacity change from 0 to 16 [ 481.322759][ T1075] Bluetooth: hci4: command 0x040f tx timeout [ 481.331564][ T8887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.342900][ T9198] REISERFS (device loop3): checking transaction log (loop3) [ 481.350794][ T8887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.361481][ T8887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.370872][ T9198] REISERFS (device loop3): Using r5 hash to sort names [ 481.385515][ T8887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.396369][ T9198] reiserfs: enabling write barrier flush mode [ 481.417633][ T9198] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 481.488920][ T9215] erofs: (device loop2): mounted with root inode @ nid 36. [ 482.558399][ T9083] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 482.642659][ T9094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.718375][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.762923][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.779705][ T9094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.804457][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.850807][ T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.862894][ T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.878375][ T9094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.897711][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.929531][ T9083] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.950654][ T9083] usb 3-1: config 179 has no interface number 0 [ 482.956935][ T9083] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 482.969607][ T9083] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 482.981081][ T9083] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 482.992776][ T9083] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 483.006498][ T9083] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 483.017384][ T9083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.057309][ T9094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.057595][ T9215] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 483.127747][ T9215] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 483.217157][ T9083] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 483.313389][ T9094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.320542][ T3617] Bluetooth: hci4: command 0x0419 tx timeout [ 483.359462][ T9094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.389700][ T9241] loop1: detected capacity change from 0 to 8192 [ 483.450725][ T9241] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 483.461142][ T9241] REISERFS (device loop1): using ordered data mode [ 483.468548][ T9241] reiserfs: using flush barriers [ 483.489926][ T9241] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.509126][ T9094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 483.511025][ T9241] REISERFS (device loop1): checking transaction log (loop1) [ 483.524820][ T7749] usb 3-1: USB disconnect, device number 12 [ 483.526591][ T9094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 483.530828][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 483.533414][ T7749] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 483.569055][ T9241] REISERFS (device loop1): Using r5 hash to sort names [ 483.591482][ T9241] reiserfs: enabling write barrier flush mode [ 483.607260][ T9241] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 483.859630][ T26] audit: type=1400 audit(1729305269.405:264): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9240 comm="syz.1.1347" [ 484.688250][ T9094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.716596][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.724802][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.780866][ T9094] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.985961][ T9264] loop1: detected capacity change from 0 to 2048 [ 485.053336][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.062110][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.103766][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.110873][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.685711][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.694528][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.703008][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.710065][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.719071][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.807886][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.831029][ T9275] loop2: detected capacity change from 0 to 512 [ 485.866723][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.879132][ T9275] EXT4-fs (loop2): Test dummy encryption mode enabled [ 485.888478][ T9273] loop3: detected capacity change from 0 to 8192 [ 485.899417][ T9275] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.1434: casefold flag without casefold feature [ 485.916346][ T9275] EXT4-fs (loop2): get root inode failed [ 485.938737][ T9275] EXT4-fs (loop2): mount failed [ 485.957333][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.064769][ T9273] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 486.073965][ T9273] REISERFS (device loop3): using ordered data mode [ 486.087401][ T9273] reiserfs: using flush barriers [ 486.100511][ T9273] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 486.123534][ T9273] REISERFS (device loop3): checking transaction log (loop3) [ 486.133573][ T9273] REISERFS (device loop3): Using r5 hash to sort names [ 486.168205][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.948251][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.989843][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.037868][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.060962][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.093604][ T9094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.124741][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.243833][ T9273] reiserfs: enabling write barrier flush mode [ 488.258156][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.261185][ T9273] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 488.301816][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.402620][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.348328][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.362104][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.404573][ T9094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.422336][ T9288] loop2: detected capacity change from 0 to 8192 [ 489.654906][ T9288] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 489.664639][ T9288] REISERFS (device loop2): using ordered data mode [ 489.672746][ T9288] reiserfs: using flush barriers [ 489.690592][ T9288] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 489.748176][ T9288] REISERFS (device loop2): checking transaction log (loop2) [ 489.895291][ T9288] REISERFS (device loop2): Using r5 hash to sort names [ 490.372161][ T9288] reiserfs: enabling write barrier flush mode [ 490.431181][ T9288] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 490.571943][ T7749] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 490.733022][ T26] audit: type=1400 audit(1729305276.615:265): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9286 comm="syz.2.1438" [ 490.943390][ T7749] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 490.967007][ T7749] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 490.993246][ T7749] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 491.026549][ T7749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.091344][ T154] device hsr_slave_0 left promiscuous mode [ 491.098546][ T154] device hsr_slave_1 left promiscuous mode [ 491.104966][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.125274][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.133056][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.141208][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.153791][ T154] device bridge_slave_1 left promiscuous mode [ 491.160014][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.183773][ T154] device bridge_slave_0 left promiscuous mode [ 491.232110][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.278753][ T154] device veth1_macvtap left promiscuous mode [ 491.287740][ T154] device veth0_macvtap left promiscuous mode [ 491.293783][ T154] device veth1_vlan left promiscuous mode [ 491.324407][ T154] device veth0_vlan left promiscuous mode [ 491.336536][ T8133] Bluetooth: hci0: ACL packet for unknown connection handle 212 [ 491.429315][ T7749] usb 2-1: string descriptor 0 read error: -22 [ 491.628989][ T1075] usb 2-1: USB disconnect, device number 11 [ 491.776391][ T154] team0 (unregistering): Port device team_slave_1 removed [ 491.790665][ T154] team0 (unregistering): Port device team_slave_0 removed [ 491.805879][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.834747][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.942266][ T154] bond0 (unregistering): Released all slaves [ 492.047957][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.424037][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.865194][ T9342] syz.0.1451[9342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.865287][ T9342] syz.0.1451[9342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.912707][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.972959][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.987378][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.014310][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.841922][ T9094] device veth0_vlan entered promiscuous mode [ 493.894829][ T9094] device veth1_vlan entered promiscuous mode [ 494.021751][ T9094] device veth0_macvtap entered promiscuous mode [ 494.056708][ T9094] device veth1_macvtap entered promiscuous mode [ 494.069286][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.076085][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.108704][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.134997][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.203012][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.248516][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.326563][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.383714][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.413699][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.418388][ T9362] 9pnet: Insufficient options for proto=fd [ 494.440341][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.466734][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.505997][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.535947][ T9362] IPVS: length: 198 != 420120 [ 494.561513][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.584496][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.607095][ T9094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.872613][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.000101][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.138813][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.280311][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.329862][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.437253][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.470031][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.498528][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.528893][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 495.550234][ T9094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.572522][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.605075][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.639012][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.673852][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.733799][ T9094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.750586][ T9094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.774790][ T9094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.797576][ T9094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.001396][ T8965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.030243][ T8965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.052519][ T9382] loop3: detected capacity change from 0 to 8192 [ 496.064048][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.098180][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.114805][ T9382] loop3: p1 p2 p4[EZD] [ 496.116598][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.127895][ T9382] loop3: p1 size 16128 extends beyond EOD, truncated [ 496.141722][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.164402][ T9383] overlayfs: missing 'lowerdir' [ 496.207046][ T9382] loop3: p2 size 2130728454 extends beyond EOD, truncated [ 496.269083][ T9382] loop3: p4 size 65536 extends beyond EOD, truncated [ 496.438183][ T9389] loop4: detected capacity change from 0 to 2048 [ 496.565857][ T9391] loop2: detected capacity change from 0 to 1024 [ 496.669379][ T9391] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 496.680044][ T9391] EXT4-fs (loop2): Ignoring removed nobh option [ 496.960985][ T9391] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nouid32,jqfmt=vfsold,quota,data=ordered,init_itable=0x0000000000000005,abort,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 497.004579][ T9389] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 497.012249][ T9389] UDF-fs: Scanning with blocksize 512 failed [ 497.034861][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 497.062021][ T9389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.064245][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 497.087114][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 498.274985][ T9405] loop1: detected capacity change from 0 to 24 [ 498.359896][ T9408] loop2: detected capacity change from 0 to 1024 [ 498.679176][ T9414] device batadv_slave_1 entered promiscuous mode [ 499.321450][ T3617] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/2 [ 499.403058][ T9419] loop4: detected capacity change from 0 to 256 [ 499.413261][ T3617] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 [ 499.416013][ T9413] device batadv_slave_1 left promiscuous mode [ 499.421643][ T26] audit: type=1800 audit(1729305541.732:266): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1466" name="bus" dev="loop4" ino=1048705 res=0 errno=0 [ 500.747353][ T9427] loop4: detected capacity change from 0 to 128 [ 500.796424][ T9432] loop3: detected capacity change from 0 to 128 [ 501.608094][ T9432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 501.644750][ T9432] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 505.879059][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 507.559413][ T9504] loop3: detected capacity change from 0 to 128 [ 511.595691][ T9517] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1493'. [ 511.984482][ T9504] EXT4-fs: error -4 creating inode table initialization thread [ 512.050797][ T9504] EXT4-fs (loop3): mount failed [ 512.378651][ T9528] loop2: detected capacity change from 0 to 1024 [ 512.555457][ T9530] loop1: detected capacity change from 0 to 512 [ 512.692193][ T9530] FAT-fs (loop1): bogus logical sector size 0 [ 512.698416][ T9530] FAT-fs (loop1): Can't find a valid FAT filesystem [ 513.123310][ T9535] loop3: detected capacity change from 0 to 1024 [ 513.192522][ T9528] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 515.436906][ T9548] loop1: detected capacity change from 0 to 2048 [ 517.591379][ T9548] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.920750][ T26] audit: type=1804 audit(1729306073.121:267): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1502" name="/newroot/16/file0/bus" dev="loop1" ino=16 res=1 errno=0 [ 518.343447][ T9573] : renamed from bond0 [ 518.376703][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 518.425646][ T9579] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 518.446241][ T9583] block nbd4: shutting down sockets [ 518.528910][ T9576] loop2: detected capacity change from 0 to 8192 [ 518.760133][ T9576] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 518.782395][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1515'. [ 518.797824][ T9576] REISERFS (device loop2): using ordered data mode [ 518.804426][ T9576] reiserfs: using flush barriers [ 518.832103][ T9576] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 519.110062][ T9576] REISERFS (device loop2): checking transaction log (loop2) [ 519.265399][ T9576] REISERFS (device loop2): Using r5 hash to sort names [ 519.436343][ T9576] reiserfs: enabling write barrier flush mode [ 519.491057][ T9597] raw_sendmsg: syz.1.1516 forgot to set AF_INET. Fix it! [ 519.629915][ T9597] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 519.641606][ T9576] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 519.704720][ T9597] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1516'. [ 520.890450][ T9611] loop1: detected capacity change from 0 to 1024 [ 521.352964][ T9611] EXT4-fs (loop1): Test dummy encryption mode enabled [ 521.458787][ T9611] EXT4-fs (loop1): Ignoring removed orlov option [ 521.553114][ T9611] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noauto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,nodelalloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 521.686633][ T9618] loop3: detected capacity change from 0 to 2048 [ 522.274575][ T9623] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 522.385320][ T9618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.450354][ T26] audit: type=1804 audit(1729306077.907:268): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1521" name="/newroot/57/file0/bus" dev="loop3" ino=16 res=1 errno=0 [ 524.186992][ T8965] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 524.232144][ T9652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 524.279158][ T8965] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1054 with error 28 [ 524.333415][ T8965] EXT4-fs (loop3): This should not happen!! Data will be lost [ 524.333415][ T8965] [ 524.375330][ T8965] EXT4-fs (loop3): Total free blocks count 0 [ 524.399945][ T8965] EXT4-fs (loop3): Free/Dirty block details [ 524.435678][ T8965] EXT4-fs (loop3): free_blocks=2415919104 [ 524.445587][ T8965] EXT4-fs (loop3): dirty_blocks=1056 [ 524.451512][ T8965] EXT4-fs (loop3): Block reservation details [ 524.460108][ T8965] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 524.874183][ T9666] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 524.959208][ T9659] overlayfs: missing 'lowerdir' [ 525.110664][ T9673] loop1: detected capacity change from 0 to 512 [ 525.133103][ T9675] loop2: detected capacity change from 0 to 164 [ 525.182309][ T9673] EXT4-fs (loop1): Test dummy encryption mode enabled [ 525.357767][ T9673] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1535: inline data xattr refers to an external xattr inode [ 525.373985][ T9673] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1535: couldn't read orphan inode 12 (err -117) [ 525.397593][ T9673] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 526.273384][ T9682] loop4: detected capacity change from 0 to 512 [ 526.323427][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 526.721886][ T9682] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1539: bad orphan inode 1 [ 526.752583][ T9682] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,resgid=0x0000000000000000,max_dir_size_kb=0x00000000000003f5,min_batch_time=0x0000000000000005,errors=continue,noquota,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 527.109494][ T9705] loop1: detected capacity change from 0 to 1024 [ 527.974732][ T9705] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext2 [ 528.173400][ T9719] loop3: detected capacity change from 0 to 2048 [ 528.430276][ T9719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.160167][ T9724] [ 529.162523][ T9724] ====================================================== [ 529.169530][ T9724] WARNING: possible circular locking dependency detected [ 529.176532][ T9724] 5.15.168-syzkaller #0 Not tainted [ 529.181714][ T9724] ------------------------------------------------------ [ 529.188713][ T9724] syz.1.1544/9724 is trying to acquire lock: [ 529.194675][ T9724] ffff88802a538170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2aa/0x370 [ 529.205121][ T9724] [ 529.205121][ T9724] but task is already holding lock: [ 529.212470][ T9724] ffff88814b43ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 529.223767][ T9724] [ 529.223767][ T9724] which lock already depends on the new lock. [ 529.223767][ T9724] [ 529.234156][ T9724] [ 529.234156][ T9724] the existing dependency chain (in reverse order) is: [ 529.243153][ T9724] [ 529.243153][ T9724] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 529.251576][ T9724] lock_acquire+0x1db/0x4f0 [ 529.256596][ T9724] percpu_down_write+0x52/0x2d0 [ 529.261961][ T9724] ext4_ind_migrate+0x254/0x760 [ 529.267329][ T9724] ext4_fileattr_set+0xe8b/0x1750 [ 529.272874][ T9724] vfs_fileattr_set+0x8f3/0xd30 [ 529.278247][ T9724] do_vfs_ioctl+0x1d85/0x2b70 [ 529.283441][ T9724] __se_sys_ioctl+0x81/0x160 [ 529.288548][ T9724] do_syscall_64+0x3b/0xb0 [ 529.293487][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.299903][ T9724] [ 529.299903][ T9724] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 529.308502][ T9724] lock_acquire+0x1db/0x4f0 [ 529.313521][ T9724] down_read+0x45/0x2e0 [ 529.318196][ T9724] ext4_bmap+0x4b/0x410 [ 529.322879][ T9724] bmap+0xa1/0xd0 [ 529.327042][ T9724] jbd2_journal_flush+0x7a2/0xc90 [ 529.332587][ T9724] ext4_ioctl+0x3249/0x5b80 [ 529.337607][ T9724] __se_sys_ioctl+0xf1/0x160 [ 529.342717][ T9724] do_syscall_64+0x3b/0xb0 [ 529.347654][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.354072][ T9724] [ 529.354072][ T9724] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 529.362848][ T9724] lock_acquire+0x1db/0x4f0 [ 529.367872][ T9724] __mutex_lock_common+0x1da/0x25a0 [ 529.373602][ T9724] mutex_lock_io_nested+0x45/0x60 [ 529.379146][ T9724] jbd2_journal_flush+0x290/0xc90 [ 529.384691][ T9724] ext4_ioctl_group_add+0x1f3/0x510 [ 529.390415][ T9724] ext4_ioctl+0x17cc/0x5b80 [ 529.395443][ T9724] __se_sys_ioctl+0xf1/0x160 [ 529.400555][ T9724] do_syscall_64+0x3b/0xb0 [ 529.405490][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.411909][ T9724] [ 529.411909][ T9724] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 529.419905][ T9724] validate_chain+0x1649/0x5930 [ 529.425363][ T9724] __lock_acquire+0x1295/0x1ff0 [ 529.430728][ T9724] lock_acquire+0x1db/0x4f0 [ 529.435743][ T9724] __mutex_lock_common+0x1da/0x25a0 [ 529.441456][ T9724] mutex_lock_nested+0x17/0x20 [ 529.446737][ T9724] jbd2_journal_lock_updates+0x2aa/0x370 [ 529.452890][ T9724] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 529.459478][ T9724] ext4_fileattr_set+0xdf4/0x1750 [ 529.465014][ T9724] vfs_fileattr_set+0x8f3/0xd30 [ 529.470383][ T9724] do_vfs_ioctl+0x1d85/0x2b70 [ 529.475576][ T9724] __se_sys_ioctl+0x81/0x160 [ 529.480678][ T9724] do_syscall_64+0x3b/0xb0 [ 529.485608][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.492017][ T9724] [ 529.492017][ T9724] other info that might help us debug this: [ 529.492017][ T9724] [ 529.502234][ T9724] Chain exists of: [ 529.502234][ T9724] &journal->j_barrier --> &sb->s_type->i_mutex_key#9 --> &sbi->s_writepages_rwsem [ 529.502234][ T9724] [ 529.517353][ T9724] Possible unsafe locking scenario: [ 529.517353][ T9724] [ 529.524787][ T9724] CPU0 CPU1 [ 529.530140][ T9724] ---- ---- [ 529.535493][ T9724] lock(&sbi->s_writepages_rwsem); [ 529.540682][ T9724] lock(&sb->s_type->i_mutex_key#9); [ 529.548574][ T9724] lock(&sbi->s_writepages_rwsem); [ 529.556283][ T9724] lock(&journal->j_barrier); [ 529.561043][ T9724] [ 529.561043][ T9724] *** DEADLOCK *** [ 529.561043][ T9724] [ 529.569173][ T9724] 4 locks held by syz.1.1544/9724: [ 529.574275][ T9724] #0: ffff88814b43c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 529.583946][ T9724] #1: ffff888074f03fc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 529.594659][ T9724] #2: ffff888074f04160 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 529.606323][ T9724] #3: ffff88814b43ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 529.618071][ T9724] [ 529.618071][ T9724] stack backtrace: [ 529.623945][ T9724] CPU: 0 PID: 9724 Comm: syz.1.1544 Not tainted 5.15.168-syzkaller #0 [ 529.632088][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.642133][ T9724] Call Trace: [ 529.645403][ T9724] [ 529.648324][ T9724] dump_stack_lvl+0x1e3/0x2d0 [ 529.652999][ T9724] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 529.658630][ T9724] ? print_circular_bug+0x12b/0x1a0 [ 529.663828][ T9724] check_noncircular+0x2f8/0x3b0 [ 529.668772][ T9724] ? add_chain_block+0x850/0x850 [ 529.673707][ T9724] ? lockdep_lock+0x11f/0x2a0 [ 529.678396][ T9724] ? validate_chain+0x112/0x5930 [ 529.683334][ T9724] validate_chain+0x1649/0x5930 [ 529.688195][ T9724] ? reacquire_held_locks+0x660/0x660 [ 529.693583][ T9724] ? mark_lock+0x98/0x340 [ 529.697913][ T9724] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 529.703898][ T9724] ? mark_lock+0x98/0x340 [ 529.708229][ T9724] __lock_acquire+0x1295/0x1ff0 [ 529.713084][ T9724] lock_acquire+0x1db/0x4f0 [ 529.717583][ T9724] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 529.723394][ T9724] ? read_lock_is_recursive+0x10/0x10 [ 529.728766][ T9724] ? __might_sleep+0xc0/0xc0 [ 529.733358][ T9724] ? print_irqtrace_events+0x210/0x210 [ 529.738810][ T9724] ? lockdep_hardirqs_off+0x70/0x100 [ 529.744098][ T9724] ? do_raw_spin_unlock+0x137/0x8b0 [ 529.749296][ T9724] __mutex_lock_common+0x1da/0x25a0 [ 529.754493][ T9724] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 529.760302][ T9724] ? preempt_schedule+0xd9/0xe0 [ 529.765152][ T9724] ? preempt_schedule_common+0xa6/0xd0 [ 529.770613][ T9724] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 529.776424][ T9724] ? preempt_schedule+0xd9/0xe0 [ 529.781276][ T9724] ? mutex_lock_io_nested+0x60/0x60 [ 529.786477][ T9724] ? preempt_schedule_thunk+0x16/0x18 [ 529.791853][ T9724] mutex_lock_nested+0x17/0x20 [ 529.796620][ T9724] jbd2_journal_lock_updates+0x2aa/0x370 [ 529.802258][ T9724] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 529.808074][ T9724] ? cpumask_next+0xc3/0xf0 [ 529.812576][ T9724] ? percpu_down_write+0x1ea/0x2d0 [ 529.817689][ T9724] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 529.823760][ T9724] ext4_fileattr_set+0xdf4/0x1750 [ 529.828791][ T9724] ? ext4_fileattr_get+0x200/0x200 [ 529.833901][ T9724] ? rwsem_write_trylock+0x166/0x210 [ 529.839192][ T9724] ? clear_nonspinnable+0x60/0x60 [ 529.844219][ T9724] ? memset+0x1f/0x40 [ 529.848206][ T9724] ? fileattr_fill_flags+0x1d0/0x300 [ 529.853488][ T9724] ? fscrypt_prepare_setflags+0x5d/0x220 [ 529.859127][ T9724] vfs_fileattr_set+0x8f3/0xd30 [ 529.863988][ T9724] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 529.869365][ T9724] do_vfs_ioctl+0x1d85/0x2b70 [ 529.874076][ T9724] ? __x64_compat_sys_ioctl+0x80/0x80 [ 529.879449][ T9724] ? __lock_acquire+0x1ff0/0x1ff0 [ 529.884471][ T9724] ? slab_free_freelist_hook+0xdd/0x160 [ 529.890022][ T9724] ? tomoyo_path_number_perm+0x648/0x810 [ 529.895657][ T9724] ? kfree+0xf1/0x270 [ 529.899648][ T9724] ? tomoyo_path_number_perm+0x6ab/0x810 [ 529.905293][ T9724] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 529.910772][ T9724] ? __fget_files+0x413/0x480 [ 529.915464][ T9724] ? bpf_lsm_file_ioctl+0x5/0x10 [ 529.920405][ T9724] ? security_file_ioctl+0x7d/0xa0 [ 529.925524][ T9724] __se_sys_ioctl+0x81/0x160 [ 529.930119][ T9724] do_syscall_64+0x3b/0xb0 [ 529.934536][ T9724] ? clear_bhb_loop+0x15/0x70 [ 529.939211][ T9724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.945106][ T9724] RIP: 0033:0x7f8ef30d9ff9 [ 529.949519][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.969126][ T9724] RSP: 002b:00007f8ef1510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.977553][ T9724] RAX: ffffffffffffffda RBX: 00007f8ef3292130 RCX: 00007f8ef30d9ff9 [ 529.985526][ T9724] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000007 [ 529.993500][ T9724] RBP: 00007f8ef314c296 R08: 0000000000000000 R09: 0000000000000000 [ 530.001467][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.009440][ T9724] R13: 0000000000000000 R14: 00007f8ef3292130 R15: 00007ffd640aa728 [ 530.017417][ T9724] [ 530.236414][ T9730] binder: BC_ACQUIRE_RESULT not supported [ 530.242259][ T9730] binder: 9725:9730 ioctl c0306201 20000080 returned -22