last executing test programs: 5m33.906959175s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 5m33.60673276s ago: executing program 3 (id=6): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000020300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 5m33.282220846s ago: executing program 3 (id=7): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 5m32.86836663s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 5m32.809111154s ago: executing program 3 (id=11): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x40, &(0x7f00000003c0)={[{@errors_remount}]}, 0x1, 0x58a, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r2 = geteuid() read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYBLOB=',dont_']) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 5m31.519105399s ago: executing program 3 (id=16): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x48000) recvmmsg$unix(r6, &(0x7f0000002380), 0x0, 0x0, 0x0) 5m30.786028958s ago: executing program 32 (id=16): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x48000) recvmmsg$unix(r6, &(0x7f0000002380), 0x0, 0x0, 0x0) 3m7.77048409s ago: executing program 0 (id=600): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x40, &(0x7f00000003c0)={[{@errors_remount}]}, 0x1, 0x58a, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r2 = geteuid() read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYBLOB=',dont_']) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 3m7.510640531s ago: executing program 0 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000040005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000480)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noblock_validity}, {@nolazytime}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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") link(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x594, &(0x7f00000009c0)="$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") 3m6.860186734s ago: executing program 0 (id=603): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 3m6.678690668s ago: executing program 0 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000280)={[{@user_xattr}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 3m6.160226831s ago: executing program 0 (id=605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x800000000000) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000005bc0), 0x12) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") 3m5.901138232s ago: executing program 0 (id=606): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/126, 0x7e) 3m5.644393603s ago: executing program 33 (id=606): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/126, 0x7e) 20.85298465s ago: executing program 2 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) getdents(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 19.197771583s ago: executing program 1 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec685000000820000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 17.762136678s ago: executing program 5 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x310, 0x0, 0xf8, 0xf8, 0x568, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0xfffe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@mcast1, @mcast1, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 'veth1_to_batadv\x00', 'gretap0\x00', {}, {0xff}, 0x62, 0x80, 0x2, 0x10}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@private, 0x9}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x9, 0x6, 0x9, 0x3, 0x130}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"c6b3"}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x7}, {0xffffffffffffffff}, {0x4, 0x2, 0x40118d1dff9a1517}, 0xe6b, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r6, &(0x7f0000000180)=""/195, 0xc3, 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000540)={[{@errors_remount}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@nombcache}]}, 0x1, 0x444, &(0x7f0000000780)="$eJzs28tvG0UYAPBv101LXySU8ugDCBRExCNp0gI9cAGBxAEkJC7lGJK0KnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKBcKJ6O1d2PHsdMkdbIF/37S1jO7s535PDv27E4cQN8azv5JIvZFxG8RMdjIriww3Hi5ubQw9ffSwlQStdpbfyb1cn8tLUwVRYvz9uaZkTQi/TSJIx3qnbt85fxktTpzKc+PzV94b2zu8pVnz12YPDtzdubixKlTJ0+Mv/D8xHM9ifOerK2HP5w9eui1t6+9MXX62js/fZMU8bfF0SPDax18olbrcXXl2t+STnaU2BA2pBIRWXcN1Mf/YFSi2XmD8eonXU9Mt6mBwJap5bocXqwB/2NJlN0CoBzFF312/1ts2zf7KN+Nlxo3QFncN/MtFqO+s7jFGWi7v+2l4Yg4vfjPl9kWW/McAgBghe+y+c8zneZ/adzfUu7ufG1oKF9LORAR99Z2xcGIuC+iXvaBiHhwg/W3L5Ksnv+k1zcV2Dpl878X87Wt5flfo96iyFAlz+2vxz+QnDlXnTmevycjMbAry4+vUcf3r/z6ebdjrfO/bMvqL+aCeTuu79i18pzpyfnJ24m51Y2PIw7v6BR/srwSkETEoYg4vMk6zj319dFux24d/xp6sM5U+yriyUb/L0Zb/IVk7fXJsbuiOnN8rLgqVvv5l6tvdqv/tuLvgaz/93S8/pfjH0pa12vnNl7H1d8/63pPM7qp67+5Y2f++sHk/Pyl8YidyeuNRrfun2ieW+SL8ln8I8c6j/8D0XwnjkREdhE/FBEPR8Qjed89GhGPRcSxNeL/8eXH3+127E7o/+m2/h9aWaSt/5uJndG+p3Oicv6Hb1f+j83k+j7/TtZTI/me9Xz+raddm7uaAQAA4L8njYh9kaSjy+k0HR1t/A3/wdiTVmfn5p8+M/v+xenGbwSGYiAtnnQNtjwPHc9v64v8RFv+RP7c+IvK7np+dGq2Ol128NDn9nYZ/5k/KmW3Dthyfq8F/cv4h/5l/EP/Mv6hf3UY/7vLaAew/Tp9/39UQjuA7dc2/i37QR9x/w/9y/iH/tU6/pMS2wFsq7ndcesfyUtIrEpEekc0ozeJZItHwb6yA9x4ouxPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74NwAA//+HM+n4") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 17.761371939s ago: executing program 1 (id=1166): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17.294785626s ago: executing program 6 (id=1167): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2118400, &(0x7f0000000000)=ANY=[@ANYBLOB="00cdf0b3373e19744a101e8c91407176ad69f47a10954db9dd96888078f300e4fd5ccd1539e0c9462c274ee70479ae4a05d9a547611852"], 0x1, 0x55e, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_getparam(r1, &(0x7f0000000440)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) write$cgroup_int(r5, &(0x7f00000003c0)=0x1000, 0x12) mkdirat$cgroup(r4, &(0x7f0000000400)='syz1\x00', 0x1ff) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='nogrpid', 0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 16.484302521s ago: executing program 2 (id=1168): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040d0479001904"], 0x7) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x14000801) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) close(0x3) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 14.542970448s ago: executing program 5 (id=1170): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r6, 0x0, 0x8}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x4000000) 13.931440267s ago: executing program 6 (id=1172): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0xfffffff6, 0x3fe, 0xfffffffd, 0x7ff, 0x3, "04ae080000000000007800000500080100", 0x4, 0x200}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) getpid() mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 13.28273273s ago: executing program 4 (id=1173): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x20000002, 0x0) 13.207220916s ago: executing program 5 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37bf40890457e00f000000000109022400030000000009"], 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') 11.776198731s ago: executing program 4 (id=1175): socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r6, &(0x7f00000007c0)=0xfffffffffffffff7, 0x4, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a", @ANYRESOCT, @ANYRES32=r4, @ANYRESDEC], 0x1, 0x150e, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xffffa000}}) 11.730472345s ago: executing program 6 (id=1176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="66736d616769633d3078303030303030303030303030653461332c726f6f74636f6e746578743d756e636f6e66696e65645f752c7375626a5f726f6c653d405c212f2e2f2ec53a2c66736e616d653d6e6f67727069642c7375626a5f747970653d646973636172642c66736d616769633d3078303030303030303030303030303030372c657569643e", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6170707261699e3c3bf8348b3e622766736465663d69736f383835392d312c6f626a5f726f6c653d2421f42c646f6e745f686173682c00"], 0x0, 0x14f5, &(0x7f0000001580)="$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") rename(&(0x7f00000000c0)='./file2\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") 11.607225585s ago: executing program 5 (id=1177): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x800000000000) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000005bc0), 0x12) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") 9.545329921s ago: executing program 4 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x2040400) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)={[{@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x802c, &(0x7f0000000900)={[{@noprefix}]}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x20, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x50) ioctl$UI_DEV_CREATE(r7, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f0000000000)='./file1\x00', 0x731181, 0x60) fallocate(r8, 0x11, 0x0, 0x3fffe) 7.782322073s ago: executing program 4 (id=1179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@errors_remount}], [{@smackfsfloor={'smackfsfloor', 0x3d, ',-'}}]}, 0x1, 0x3e2, &(0x7f0000000b00)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140), &(0x7f0000000240)={'L-', 0x4}, 0x16, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6.790390273s ago: executing program 2 (id=1180): unshare(0x22020600) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) timer_delete(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x88, 0x20, 0xffdffffd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000008c0), 0x11d5) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 6.768965885s ago: executing program 6 (id=1181): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) r4 = epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0xd, 0x4000003a, r5, 0x0) 6.739987717s ago: executing program 1 (id=1182): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000002400010028bd7000ffdbdf25040000000600040080ff0000060003"], 0x5c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 6.169264313s ago: executing program 2 (id=1183): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ecryptfs\x00', 0x10405, 0x0) 5.772122535s ago: executing program 1 (id=1184): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r6, 0x0, 0x8}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x4000000) 5.115632728s ago: executing program 2 (id=1185): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x20000002, 0x0) 5.048237443s ago: executing program 6 (id=1186): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0xfffffff6, 0x3fe, 0xfffffffd, 0x7ff, 0x3, "04ae080000000000007800000500080100", 0x4, 0x200}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) getpid() mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 4.872760768s ago: executing program 1 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') 4.186658953s ago: executing program 1 (id=1188): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@nodioread_nolock}, {@data_writeback}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 4.051248784s ago: executing program 5 (id=1189): sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.030264455s ago: executing program 4 (id=1190): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040d0479001904"], 0x7) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x14000801) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) close(0x3) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 688.120185ms ago: executing program 6 (id=1191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x800, 0x400, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) 602.664342ms ago: executing program 4 (id=1192): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 207.207144ms ago: executing program 5 (id=1193): unshare(0x22020600) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) timer_delete(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x88, 0x20, 0xffdffffd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000008c0), 0x11d5) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1194): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pwritev2(r2, 0x0, 0x0, 0xfffff, 0x10, 0x0) dup2(r2, r0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) kernel console output (not intermixed with test programs): .479794][ T4739] loop1: detected capacity change from 0 to 736 [ 82.516491][ T26] audit: type=1326 audit(1756494978.290:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8024210be9 code=0x7ffc0000 [ 82.626545][ T26] audit: type=1326 audit(1756494978.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8024210be9 code=0x7ffc0000 [ 82.767027][ T26] audit: type=1326 audit(1756494978.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8024210be9 code=0x7ffc0000 [ 82.886428][ T26] audit: type=1326 audit(1756494978.320:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8024210be9 code=0x7ffc0000 [ 83.010735][ T4751] loop2: detected capacity change from 0 to 256 [ 83.102450][ T26] audit: type=1326 audit(1756494978.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8024210be9 code=0x7ffc0000 [ 83.157283][ T4755] syz.0.130[4755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.157383][ T4755] syz.0.130[4755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.228907][ T4751] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x311d6643, utbl_chksum : 0xe619d30d) [ 85.036257][ T4757] loop1: detected capacity change from 0 to 2048 [ 85.205003][ T4757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.498094][ T4771] loop0: detected capacity change from 0 to 1024 [ 86.709857][ T4790] loop0: detected capacity change from 0 to 512 [ 86.885510][ T4790] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.140: invalid block [ 86.916807][ T4790] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.140: invalid indirect mapped block 10 (level 1) [ 87.022637][ T4790] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.140: invalid indirect mapped block 8 (level 1) [ 87.146794][ T4790] EXT4-fs (loop0): 1 truncate cleaned up [ 87.152470][ T4790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.284382][ T4819] loop2: detected capacity change from 0 to 512 [ 89.988425][ T4819] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.326523][ T4819] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.459119][ T4848] loop4: detected capacity change from 0 to 164 [ 91.883815][ T4819] EXT4-fs: failed to create workqueue [ 92.296590][ T4819] EXT4-fs (loop2): mount failed [ 92.375769][ T4865] loop0: detected capacity change from 0 to 1024 [ 92.921681][ T4865] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 93.010894][ T4865] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.096276][ T4865] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,nodiscard,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 93.164925][ T4865] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 94.656923][ T4919] loop4: detected capacity change from 0 to 1024 [ 94.861545][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.945431][ T4919] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.102437][ T21] kernel write not supported for file /111/net/psched (pid: 21 comm: kworker/1:0) [ 95.353343][ T4935] 9pnet: Unknown protocol version 9 [ 97.346761][ T4956] loop5: detected capacity change from 0 to 128 [ 97.403928][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.175'. [ 97.638548][ T4965] loop5: detected capacity change from 0 to 1024 [ 97.924580][ T4965] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 97.986128][ T4965] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.524161][ T4991] loop0: detected capacity change from 0 to 512 [ 98.669653][ T4991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.926257][ T4991] EXT4-fs (loop0): 1 truncate cleaned up [ 98.990220][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noauto_da_alloc,nogrpid,nobarrier,errors=remount-ro,quota,. Quota mode: writeback. [ 99.302328][ T4989] EXT4-fs error (device loop0): __ext4_iget:4894: inode #12: block 2: comm syz.0.182: invalid block [ 99.418919][ T4989] EXT4-fs (loop0): Remounting filesystem read-only [ 100.157321][ T5031] loop4: detected capacity change from 0 to 2048 [ 100.277218][ T5031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.283472][ T21] kernel read not supported for file /snd/controlC0 (pid: 21 comm: kworker/1:0) [ 102.024669][ T5062] loop0: detected capacity change from 0 to 256 [ 102.357875][ T5062] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 102.392197][ T5068] loop5: detected capacity change from 0 to 2048 [ 102.414984][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 102.425633][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 102.433202][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.443352][ T4195] Workqueue: hci1 hci_rx_work [ 102.448262][ T4195] Call Trace: [ 102.451547][ T4195] [ 102.454484][ T4195] dump_stack_lvl+0x168/0x230 [ 102.459372][ T4195] ? show_regs_print_info+0x20/0x20 [ 102.464588][ T4195] ? load_image+0x3b0/0x3b0 [ 102.469225][ T4195] sysfs_create_dir_ns+0x252/0x280 [ 102.474446][ T4195] ? __lock_acquire+0x7c60/0x7c60 [ 102.479489][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 102.484175][ T4195] ? le_conn_complete_evt+0xcbc/0x1590 [ 102.489683][ T4195] ? hci_event_packet+0xe05/0x12f0 [ 102.494797][ T4195] ? process_one_work+0x863/0x1000 [ 102.499999][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 102.505204][ T4195] kobject_add_internal+0x662/0xd00 [ 102.510418][ T4195] kobject_add+0x152/0x210 [ 102.514857][ T4195] ? kobject_init+0x1d0/0x1d0 [ 102.519548][ T4195] ? klist_children_get+0x50/0x50 [ 102.524579][ T4195] ? get_device_parent+0x121/0x3f0 [ 102.529730][ T4195] device_add+0x483/0xfb0 [ 102.534178][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 102.539219][ T4195] le_conn_complete_evt+0xcbc/0x1590 [ 102.544518][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 102.549688][ T4195] ? __mutex_trylock_common+0x14f/0x250 [ 102.555355][ T4195] hci_le_meta_evt+0x289/0x3b80 [ 102.560216][ T4195] ? hci_event_packet+0x36d/0x12f0 [ 102.565339][ T4195] ? hci_event_packet+0x2e2/0x12f0 [ 102.570434][ T4195] ? __lock_acquire+0x7c60/0x7c60 [ 102.575446][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 102.581499][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 102.587120][ T4195] ? mark_lock+0x94/0x320 [ 102.591431][ T4195] ? mutex_unlock+0x10/0x10 [ 102.595917][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.601891][ T4195] ? lock_chain_count+0x20/0x20 [ 102.606723][ T4195] ? __rwlock_init+0x140/0x140 [ 102.611478][ T4195] hci_event_packet+0xe05/0x12f0 [ 102.616403][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 102.621590][ T4195] ? rcu_lock_release+0x20/0x20 [ 102.626450][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 102.631935][ T4195] hci_rx_work+0x255/0xa10 [ 102.636394][ T4195] process_one_work+0x863/0x1000 [ 102.641444][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 102.647073][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 102.652346][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 102.657356][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 102.662814][ T4195] ? wq_worker_running+0x97/0x170 [ 102.667837][ T4195] worker_thread+0xaa8/0x12a0 [ 102.672522][ T4195] kthread+0x436/0x520 [ 102.676572][ T4195] ? rcu_lock_release+0x20/0x20 [ 102.681428][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 102.686006][ T4195] ret_from_fork+0x1f/0x30 [ 102.690443][ T4195] [ 102.696646][ T4195] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.710111][ T4195] Bluetooth: hci1: failed to register connection device [ 102.927254][ T5068] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.800247][ T5083] loop4: detected capacity change from 0 to 1024 [ 104.303067][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.700328][ T5111] Zero length message leads to an empty skb [ 105.609274][ T5114] loop0: detected capacity change from 0 to 2048 [ 105.636577][ T7] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 105.655101][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 105.661815][ T5114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.680967][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 105.766663][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.796583][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.808672][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.822643][ T7] usb 5-1: SerialNumber: syz [ 105.856712][ T5096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.866573][ T5096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.106584][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 106.130852][ T4173] usb 5-1: USB disconnect, device number 2 [ 106.256784][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.319261][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.369051][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 106.396420][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.450408][ T21] usb 2-1: config 0 descriptor?? [ 107.037019][ T5129] loop5: detected capacity change from 0 to 1024 [ 107.068139][ T21] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 107.344559][ T5139] loop4: detected capacity change from 0 to 256 [ 107.414807][ T5139] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.438851][ T21] usb 2-1: USB disconnect, device number 2 [ 107.441103][ T5139] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 107.513112][ T5139] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.633502][ T5140] fido_id[5140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 107.704707][ T5139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 109.151761][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 109.994073][ T5194] loop1: detected capacity change from 0 to 8 [ 110.678871][ T5194] SQUASHFS error: zlib decompression failed, data probably corrupt [ 110.687354][ T5194] SQUASHFS error: Failed to read block 0x9b: -5 [ 110.693626][ T5194] SQUASHFS error: Unable to read metadata cache entry [99] [ 110.700926][ T5194] SQUASHFS error: Unable to read inode 0x127 [ 110.942657][ T5197] loop4: detected capacity change from 0 to 2048 [ 111.091034][ T5197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.415529][ T5217] loop4: detected capacity change from 0 to 8192 [ 114.125594][ T5240] loop0: detected capacity change from 0 to 1024 [ 114.790525][ T5262] loop4: detected capacity change from 0 to 256 [ 114.970713][ T5262] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 115.022738][ T5262] FAT-fs (loop4): Filesystem has been set read-only [ 117.355177][ T5297] loop5: detected capacity change from 0 to 1024 [ 117.446116][ T5297] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.465028][ T5302] loop4: detected capacity change from 0 to 512 [ 117.497408][ T5297] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.525460][ T5297] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 118.598744][ T5297] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 118.627471][ T5302] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.428440][ T5302] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.258: iget: bad i_size value: -6917529027641081756 [ 119.542111][ T5302] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.258: couldn't read orphan inode 17 (err -117) [ 119.612634][ T5302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.785284][ T5302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.258: bg 0: block 65: padding at end of block bitmap is not set [ 119.855769][ T5302] __quota_error: 26 callbacks suppressed [ 119.867782][ T5302] Quota error (device loop4): write_blk: dquota write failed [ 119.889707][ T5302] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 119.923782][ T5302] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.258: Failed to acquire dquot type 0 [ 120.170152][ T5327] loop1: detected capacity change from 0 to 8 [ 120.754721][ T5327] SQUASHFS error: zlib decompression failed, data probably corrupt [ 120.776462][ T5327] SQUASHFS error: Failed to read block 0x4de: -5 [ 120.783390][ T5327] SQUASHFS error: Failed to read block 0x4e2: -5 [ 120.817475][ T5327] SQUASHFS error: Failed to read block 0x9ca: -5 [ 120.855365][ T5327] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 120.947039][ T5327] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 120.974740][ T5327] SQUASHFS error: Failed to read block 0x535f2: -5 [ 121.018896][ T26] audit: type=1800 audit(1756495017.220:38): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.262" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 121.041159][ T5341] loop2: detected capacity change from 0 to 4096 [ 121.098011][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.138167][ T5341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.145821][ T5341] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 121.206946][ T5341] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 121.273727][ T5341] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 121.331639][ T5341] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 121.339744][ T5155] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.460224][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 121.546663][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.557048][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.686666][ T4231] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.700227][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.708583][ T5155] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 121.717042][ T4231] usb 5-1: SerialNumber: syz [ 121.725253][ T5155] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 121.745440][ T5155] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 121.756163][ T5155] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 121.773467][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.816873][ T5344] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.046034][ T5155] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 122.052010][ T4231] usb 5-1: 0:2 : does not exist [ 122.062231][ T5155] usb 6-1: USB disconnect, device number 2 [ 122.242897][ T4231] usb 5-1: USB disconnect, device number 3 [ 122.303672][ T4506] udevd[4506]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.350147][ T5378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 122.556604][ T5155] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.966524][ T5155] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 123.009092][ T5383] loop5: detected capacity change from 0 to 1764 [ 123.032726][ T5155] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 123.073482][ T5155] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 123.102893][ T5373] udevd[5373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.246604][ T5155] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.261198][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.291339][ T5155] usb 1-1: SerialNumber: syz [ 123.306577][ T5394] loop2: detected capacity change from 0 to 1024 [ 123.346554][ T5377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.363986][ T5377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.483337][ T5394] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 123.510350][ T5394] hfsplus: xattr search failed [ 123.519528][ T26] audit: type=1326 audit(1756495019.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5401 comm="syz.5.277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdea1917be9 code=0x0 [ 123.563131][ T5394] attempt to access beyond end of device [ 123.563131][ T5394] loop2: rw=0, want=917506, limit=1024 [ 123.609014][ T5394] Buffer I/O error on dev loop2, logical block 458752, async page read [ 123.620548][ T5394] hfsplus: unable to mark blocks free: error -5 [ 123.628362][ T5394] hfsplus: can't free extent [ 123.711558][ T5155] usb 1-1: USB disconnect, device number 2 [ 125.015183][ T4231] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.436441][ T4231] usb 6-1: Using ep0 maxpacket: 16 [ 125.556632][ T4231] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.583521][ T4231] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.620984][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 125.648553][ T4231] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.683062][ T4231] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 125.770175][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.948037][ T4231] usb 6-1: config 0 descriptor?? [ 126.489880][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.499678][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.523082][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.530438][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.536616][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.573217][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.600848][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.613725][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.620805][ T5459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.631519][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.660612][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.681087][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.700431][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.715324][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.730633][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.745541][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.764975][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.796250][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.826587][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.843895][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.853847][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.868355][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.875447][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.897073][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.914384][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.927587][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.943559][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.951556][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.963132][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.974221][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.981804][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 126.994917][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.009800][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.024801][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.044280][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.055546][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.067085][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.078999][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.097075][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.113430][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.127073][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.141152][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.156372][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.170049][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.189083][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.222876][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.245622][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.261952][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.277151][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.288579][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.299014][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.317066][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.331927][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.545867][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.559905][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.567220][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.574203][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.586848][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.593771][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.606426][ T4231] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 127.614125][ T4231] apple 0003:05AC:0247.0002: collection stack underflow [ 127.636466][ T4231] apple 0003:05AC:0247.0002: item 0 0 0 12 parsing failed [ 127.644026][ T4231] apple 0003:05AC:0247.0002: parse failed [ 127.650129][ T4231] apple: probe of 0003:05AC:0247.0002 failed with error -22 [ 127.686972][ T4231] usb 6-1: USB disconnect, device number 3 [ 129.469488][ T5505] 9pnet: Insufficient options for proto=fd [ 131.553079][ T5521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.830020][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836916][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948937][ T5542] loop4: detected capacity change from 0 to 8 [ 133.024725][ T5542] SQUASHFS error: zlib decompression failed, data probably corrupt [ 133.076842][ T5542] SQUASHFS error: Failed to read block 0x4de: -5 [ 133.114325][ T5542] SQUASHFS error: Failed to read block 0x4e2: -5 [ 133.144583][ T5542] SQUASHFS error: Failed to read block 0x9ca: -5 [ 133.177448][ T5542] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 133.213451][ T5542] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 133.250713][ T5542] SQUASHFS error: Failed to read block 0x535f2: -5 [ 133.264456][ T26] audit: type=1800 audit(1756495029.460:40): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.307" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 136.115462][ T5565] 9pnet: Insufficient options for proto=fd [ 136.555470][ T5572] Illegal XDP return value 4294967274, expect packet loss! [ 136.727906][ T5576] loop0: detected capacity change from 0 to 8 [ 136.882616][ T5576] SQUASHFS error: Failed to read block 0x63a: -5 [ 136.941073][ T5576] SQUASHFS error: Unable to read metadata cache entry [638] [ 136.944277][ T5580] 9pnet: Unknown protocol version 9 [ 136.982091][ T5576] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 137.191651][ T5583] loop5: detected capacity change from 0 to 128 [ 137.281640][ T5583] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 137.526723][ T5583] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.995438][ T5602] loop1: detected capacity change from 0 to 512 [ 138.788793][ T5592] loop5: detected capacity change from 0 to 256 [ 139.017140][ T5602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 139.026779][ T5602] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.322: Directory hole found for htree index block 0 [ 139.686267][ T5602] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 139.695349][ T5602] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.322: Directory hole found for htree index block 0 [ 139.713737][ T5602] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 139.722366][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noblock_validity,nolazytime,usrjquota=",,errors=continue. Quota mode: writeback. [ 139.822795][ T5596] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.322: Directory hole found for htree index block 0 [ 140.125363][ T5615] xt_socket: unknown flags 0x50 [ 141.032353][ T5626] loop0: detected capacity change from 0 to 256 [ 141.204168][ T5626] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.365354][ T5626] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 141.476522][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.238972][ T5626] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.797691][ T4232] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.822104][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.851128][ T4232] usb 5-1: Product: syz [ 142.855713][ T4232] usb 5-1: Manufacturer: syz [ 142.866727][ T4232] usb 5-1: SerialNumber: syz [ 143.179974][ T5644] loop5: detected capacity change from 0 to 764 [ 144.726588][ T4232] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 144.732729][ T4232] cdc_ncm 5-1:1.0: bind() failure [ 144.748413][ T4232] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 144.755226][ T4232] cdc_ncm 5-1:1.1: bind() failure [ 144.765522][ T4232] usb 5-1: USB disconnect, device number 4 [ 144.908180][ T5654] loop0: detected capacity change from 0 to 4096 [ 144.963612][ T5658] loop4: detected capacity change from 0 to 1024 [ 145.027100][ T5654] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.045957][ T5654] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 145.156244][ T5661] loop5: detected capacity change from 0 to 1024 [ 145.180682][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 145.317805][ T5661] EXT4-fs (loop5): Ignoring removed bh option [ 145.334459][ T5661] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.386082][ T5661] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 145.423713][ T5661] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 145.442175][ T5661] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 145.594788][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 145.699071][ T5670] xt_socket: unknown flags 0x50 [ 146.529276][ T5675] syz.5.341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.716492][ T1111] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 147.974323][ T5692] loop4: detected capacity change from 0 to 512 [ 148.046005][ T5692] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.076591][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.094623][ T1111] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 148.096171][ T5692] EXT4-fs (loop4): Can't change test_dummy_encryption on remount [ 148.113670][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.162154][ T1111] usb 1-1: config 0 descriptor?? [ 148.658544][ T1111] hid-generic 0003:057E:200E.0003: item fetching failed at offset 5/7 [ 148.689174][ T1111] hid-generic: probe of 0003:057E:200E.0003 failed with error -22 [ 148.945127][ T5706] usb usb8: usbfs: process 5706 (syz.4.354) did not claim interface 1 before use [ 149.847004][ T5706] loop4: detected capacity change from 0 to 512 [ 149.886131][ T5706] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.893490][ T5706] EXT4-fs error (device loop4): ext4_quota_enable:6417: comm syz.4.354: inode #218103808: comm syz.4.354: iget: illegal inode # [ 149.908237][ T5706] EXT4-fs error (device loop4): ext4_quota_enable:6420: comm syz.4.354: Bad quota inode: 218103808, type: 2 [ 149.921799][ T5706] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 149.938531][ T5706] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 149.945337][ T5706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.021930][ T4232] usb 1-1: USB disconnect, device number 3 [ 150.548237][ T5710] ipt_REJECT: TCP_RESET invalid for non-tcp [ 150.671576][ T5712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.776790][ T4192] Bluetooth: Wrong link type (-71) [ 150.794009][ T5716] loop2: detected capacity change from 0 to 1024 [ 151.166641][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.643233][ T5725] xt_socket: unknown flags 0x50 [ 153.376604][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.413882][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.481756][ T4232] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 153.502517][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.518969][ T4232] usb 1-1: config 0 descriptor?? [ 153.680688][ T5740] 9pnet: Unknown protocol version 9 [ 153.709340][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.368'. [ 154.240482][ T4232] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 154.256522][ T4232] hid-led 0003:1D34:0004.0004: item fetching failed at offset 3/5 [ 154.288704][ T4232] hid-led: probe of 0003:1D34:0004.0004 failed with error -22 [ 154.347508][ T4232] usb 1-1: USB disconnect, device number 4 [ 154.404717][ T5745] loop2: detected capacity change from 0 to 1024 [ 154.605011][ T5752] loop4: detected capacity change from 0 to 256 [ 154.696515][ T4316] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.745733][ T4470] hfsplus: b-tree write err: -5, ino 4 [ 154.996413][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 155.126594][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.229095][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.309356][ T5773] xt_socket: unknown flags 0x50 [ 156.044242][ T4316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.229786][ T4316] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.240040][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.282968][ T4316] usb 6-1: config 0 descriptor?? [ 156.859278][ T4173] usb 6-1: USB disconnect, device number 4 [ 157.673400][ T5799] loop5: detected capacity change from 0 to 256 [ 157.737556][ T5799] exfat: Bad value for 'uid' [ 158.433077][ T5814] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.927108][ T5813] loop2: detected capacity change from 0 to 1024 [ 159.041014][ T5820] loop0: detected capacity change from 0 to 512 [ 159.059175][ T5813] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 159.072526][ T5813] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.284107][ T5827] 9pnet: Unknown protocol version 9 [ 159.347841][ T5829] netlink: 64 bytes leftover after parsing attributes in process `syz.2.389'. [ 162.304547][ T5860] loop0: detected capacity change from 0 to 1024 [ 162.446165][ T5860] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 162.492126][ T5860] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.806221][ T5866] loop4: detected capacity change from 0 to 8 [ 162.842717][ T5870] loop0: detected capacity change from 0 to 512 [ 162.980264][ T5870] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 163.072225][ T5870] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.784535][ T5887] loop2: detected capacity change from 0 to 1024 [ 164.044616][ T5897] loop4: detected capacity change from 0 to 1024 [ 165.407112][ T5897] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 165.456509][ T5897] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.484049][ T5908] loop5: detected capacity change from 0 to 1024 [ 165.597380][ T5908] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 165.641418][ T5908] hfsplus: xattr search failed [ 165.656246][ T5908] attempt to access beyond end of device [ 165.656246][ T5908] loop5: rw=0, want=917506, limit=1024 [ 165.676648][ T5908] Buffer I/O error on dev loop5, logical block 458752, async page read [ 165.731497][ T5908] hfsplus: unable to mark blocks free: error -5 [ 165.768099][ T5908] hfsplus: can't free extent [ 166.919761][ T5928] loop4: detected capacity change from 0 to 164 [ 167.064455][ T5928] isofs_fill_super: get root inode failed [ 167.135930][ T5933] 9pnet: Unknown protocol version 9 [ 167.567375][ T5943] loop4: detected capacity change from 0 to 1024 [ 167.956983][ T5940] loop1: detected capacity change from 0 to 8192 [ 167.976987][ T5943] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 168.010649][ T5943] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.145875][ T5953] loop2: detected capacity change from 0 to 128 [ 168.220434][ T5953] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.278222][ T5953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.345129][ T26] audit: type=1804 audit(1756495064.540:41): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.431" name="/newroot/69/file0/bus" dev="loop2" ino=115 res=1 errno=0 [ 168.977284][ T5972] capability: warning: `syz.4.438' uses deprecated v2 capabilities in a way that may be insecure [ 169.058239][ T26] audit: type=1326 audit(1756495065.260:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ff648be9 code=0x0 [ 169.199356][ T5977] loop2: detected capacity change from 0 to 128 [ 169.199778][ T5979] loop0: detected capacity change from 0 to 2048 [ 170.352169][ T5977] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.403974][ T4359] loop0: p1 < > p4 [ 170.456662][ T5977] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.483623][ T4359] loop0: p4 size 8388608 extends beyond EOD, truncated [ 170.668896][ T5979] loop0: p1 < > p4 [ 170.690576][ T5979] loop0: p4 size 8388608 extends beyond EOD, truncated [ 170.912351][ T5999] xt_socket: unknown flags 0x50 [ 171.995437][ T6011] loop2: detected capacity change from 0 to 128 [ 172.092295][ T5373] udevd[5373]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.108772][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 172.167635][ T26] audit: type=1800 audit(1756495068.370:43): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 172.196549][ T4316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.207470][ T6011] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 172.234603][ T5373] udevd[5373]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.259059][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 172.263963][ T6011] FAT-fs (loop2): Filesystem has been set read-only [ 172.366971][ T6011] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 172.906660][ T6025] syz.5.452 (6025): /proc/6024/oom_adj is deprecated, please use /proc/6024/oom_score_adj instead. [ 173.035977][ T4173] kernel write not supported for file /225/net/ip6_tables_targets (pid: 4173 comm: kworker/1:3) [ 173.047672][ T4316] usb 1-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 173.080439][ T4316] usb 1-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config [ 173.089418][ T6029] loop5: detected capacity change from 0 to 1024 [ 173.101771][ T4316] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.116797][ T4316] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 173.126144][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.206772][ T5155] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.207547][ T4316] usb-storage 1-1:1.0: USB Mass Storage device detected [ 173.233299][ T6029] hfsplus: xattr searching failed [ 173.349569][ T6035] hfsplus: xattr searching failed [ 173.367159][ T4316] usb-storage 1-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 173.384701][ T26] audit: type=1800 audit(1756495069.580:44): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.454" name="bus" dev="loop5" ino=3 res=0 errno=0 [ 173.384894][ T6029] hfsplus: xattr searching failed [ 173.472314][ T6037] loop2: detected capacity change from 0 to 1024 [ 173.476024][ T4316] usb 1-1: USB disconnect, device number 5 [ 173.626919][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 173.692524][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.725046][ T5155] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 173.783231][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.795748][ T6029] hfsplus: bad catalog file entry [ 173.813010][ T5155] usb 2-1: config 0 descriptor?? [ 175.394789][ T9] hfsplus: b-tree write err: -5, ino 3 [ 175.789914][ T4316] usb 2-1: USB disconnect, device number 3 [ 177.252508][ T6081] loop2: detected capacity change from 0 to 128 [ 177.734036][ T6085] loop1: detected capacity change from 0 to 512 [ 177.773412][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.845258][ T6081] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.878151][ T6085] EXT4-fs (loop1): 1 truncate cleaned up [ 177.878166][ T6094] loop4: detected capacity change from 0 to 512 [ 177.891121][ T6085] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 177.895420][ T6096] loop0: detected capacity change from 0 to 128 [ 177.926676][ T6085] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.472: deleted inode referenced: 15 [ 177.968840][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 178.079060][ T6096] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000032b,nobarrier,,errors=continue. Quota mode: none. [ 178.123478][ T6094] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.474: casefold flag without casefold feature [ 178.145485][ T6107] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 178.151662][ T6103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.155130][ T6096] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.183919][ T6094] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.474: couldn't read orphan inode 15 (err -117) [ 178.305500][ T6094] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.471021][ T6117] loop2: detected capacity change from 0 to 1024 [ 178.533921][ T6120] loop1: detected capacity change from 0 to 164 [ 178.698817][ T6117] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 178.812826][ T6117] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.013610][ T6126] loop4: detected capacity change from 0 to 2048 [ 179.071351][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.075352][ T6132] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.340929][ T6139] loop0: detected capacity change from 0 to 1024 [ 179.358272][ T6142] loop1: detected capacity change from 0 to 128 [ 179.408625][ T6139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.787886][ T6148] loop2: detected capacity change from 0 to 2048 [ 179.850798][ T6153] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.928028][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.966982][ T6148] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.985647][ T6159] loop5: detected capacity change from 0 to 512 [ 180.025019][ T6162] loop4: detected capacity change from 0 to 1024 [ 180.048465][ T6148] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.491: bg 0: block 345: padding at end of block bitmap is not set [ 180.129122][ T6159] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000000d47,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 180.221887][ T6159] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.282795][ T6162] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 180.295730][ T6162] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.333444][ T6172] loop0: detected capacity change from 0 to 764 [ 180.986488][ T4173] Bluetooth: hci1: command 0x0406 tx timeout [ 180.986780][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 181.502247][ T6187] loop2: detected capacity change from 0 to 512 [ 181.553575][ T6187] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.584566][ T6187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.629776][ T6196] loop0: detected capacity change from 0 to 256 [ 181.653784][ T6187] EXT4-fs (loop2): 1 truncate cleaned up [ 181.681756][ T6196] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 181.701235][ T6187] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nodiscard,usrjquota=,nobarrier,min_batch_time=0x0000000000000004,test_dummy_encryption,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 181.762342][ T26] audit: type=1800 audit(1756495077.960:45): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 182.538550][ T6207] loop5: detected capacity change from 0 to 1024 [ 182.755357][ T6207] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 182.842481][ T6207] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.858296][ T26] audit: type=1326 audit(1756495079.060:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 182.914018][ T6221] loop2: detected capacity change from 0 to 256 [ 182.915728][ T26] audit: type=1326 audit(1756495079.060:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 182.976996][ T6221] exfat: Bad value for 'errors' [ 184.289706][ T26] audit: type=1326 audit(1756495079.060:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 184.430826][ T26] audit: type=1326 audit(1756495079.060:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 184.583508][ T26] audit: type=1326 audit(1756495079.060:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 184.606627][ T26] audit: type=1326 audit(1756495079.060:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 184.631639][ T26] audit: type=1326 audit(1756495079.060:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 185.436151][ T26] audit: type=1326 audit(1756495079.060:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 185.708163][ T26] audit: type=1326 audit(1756495079.070:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.0.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc5ff648be9 code=0x7ffc0000 [ 186.241370][ T6248] loop5: detected capacity change from 0 to 1024 [ 188.458036][ T6248] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 188.480593][ T6248] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.856123][ T6276] loop2: detected capacity change from 0 to 1024 [ 189.216900][ T6283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 190.262595][ T6294] loop0: detected capacity change from 0 to 256 [ 190.808821][ T6294] exfat: Bad value for 'errors' [ 193.681951][ T6317] loop2: detected capacity change from 0 to 512 [ 194.265330][ T6321] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.271457][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281976][ T6321] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.309137][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.335603][ T6317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 194.356122][ T6317] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.546: Directory hole found for htree index block 0 [ 194.372018][ T6317] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 194.381431][ T6317] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.546: Directory hole found for htree index block 0 [ 194.395002][ T6317] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 194.403257][ T6317] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noblock_validity,nolazytime,usrjquota=",,errors=continue. Quota mode: writeback. [ 194.458789][ T6316] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.546: Directory hole found for htree index block 0 [ 194.628470][ T6329] loop5: detected capacity change from 0 to 128 [ 194.702250][ T6329] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 194.716415][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 194.716431][ T26] audit: type=1800 audit(1756495090.890:69): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.551" name="file1" dev="loop5" ino=1048605 res=0 errno=0 [ 194.761055][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 194.801816][ T6329] FAT-fs (loop5): Filesystem has been set read-only [ 194.850244][ T6329] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 195.403482][ T6335] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 196.320007][ T6341] loop0: detected capacity change from 0 to 1024 [ 196.348342][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 196.431791][ T6341] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 196.455760][ T6341] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.536477][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.850986][ T6361] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.874494][ T6361] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.913775][ T6363] loop0: detected capacity change from 0 to 256 [ 196.940562][ T23] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.954322][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.984209][ T23] usb 3-1: config 0 descriptor?? [ 197.000065][ T6363] exfat: Unknown parameter 'sys_tz' [ 197.147774][ T6369] loop0: detected capacity change from 0 to 512 [ 197.176126][ T6369] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 197.223889][ T6369] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 197.257500][ T23] [drm] vendor descriptor length:6 data:06 5f 63 ed ab 6a 00 00 00 00 00 [ 197.276458][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 197.286595][ T6369] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.413377][ T6369] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.565: corrupted xattr block 19 [ 197.425831][ T6372] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.565: corrupted xattr block 19 [ 197.476494][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 197.505275][ T6369] EXT4-fs (loop0): Remounting filesystem read-only [ 197.508301][ T23] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 197.519525][ T6372] EXT4-fs (loop0): Remounting filesystem read-only [ 197.536412][ T23] [drm] Initialized udl on minor 2 [ 197.542668][ T26] audit: type=1800 audit(1756495093.740:70): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.565" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 197.586484][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.607166][ T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 197.650411][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.674267][ T23] usb 3-1: USB disconnect, device number 3 [ 197.700007][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 197.727180][ T4231] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 197.952298][ T6377] loop0: detected capacity change from 0 to 256 [ 197.997503][ T6380] loop4: detected capacity change from 0 to 1024 [ 198.092080][ T6377] exfat: Bad value for 'errors' [ 198.217181][ T6380] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 198.350345][ T6380] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.886506][ T6387] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 198.983779][ T6387] EXT4-fs (loop4): Remounting filesystem read-only [ 199.580258][ T6400] binder: 6399:6400 ioctl 4018620d 0 returned -22 [ 199.607927][ T6405] loop5: detected capacity change from 0 to 8 [ 199.702200][ T6405] squashfs image failed sanity check [ 200.178874][ T6418] loop5: detected capacity change from 0 to 1024 [ 201.811377][ T6421] loop4: detected capacity change from 0 to 1024 [ 201.841374][ T4467] hfsplus: b-tree write err: -5, ino 4 [ 202.923210][ T6430] loop5: detected capacity change from 0 to 1024 [ 203.061269][ T6430] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 203.073665][ T6430] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.384827][ T26] audit: type=1326 audit(1756495099.580:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 203.447138][ T26] audit: type=1326 audit(1756495099.610:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 203.550716][ T26] audit: type=1326 audit(1756495099.620:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 203.713617][ T6449] loop5: detected capacity change from 0 to 128 [ 203.737767][ T26] audit: type=1326 audit(1756495099.620:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53c319be9 code=0x7ffc0000 [ 203.891879][ T6449] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.920395][ T26] audit: type=1326 audit(1756495099.620:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53c319be9 code=0x7ffc0000 [ 203.943162][ T26] audit: type=1326 audit(1756495099.620:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 203.966638][ T26] audit: type=1326 audit(1756495099.620:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53c319be9 code=0x7ffc0000 [ 203.988873][ T26] audit: type=1326 audit(1756495099.620:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 204.012895][ T26] audit: type=1326 audit(1756495099.620:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53c319be9 code=0x7ffc0000 [ 204.037469][ T26] audit: type=1326 audit(1756495099.620:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb53c2b5de9 code=0x7ffc0000 [ 204.070832][ T6449] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.144243][ T6448] EXT4-fs (loop5): shut down requested (1) [ 205.172160][ T6457] loop0: detected capacity change from 0 to 256 [ 205.284793][ T6461] loop4: detected capacity change from 0 to 256 [ 205.323361][ T6461] exfat: Bad value for 'errors' [ 205.447634][ T6457] FAT-fs (loop0): Unrecognized mount option "utf8=1" or missing value [ 208.605346][ T6495] loop0: detected capacity change from 0 to 512 [ 208.655155][ T6495] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 208.778890][ T6495] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.604: inode #13: comm syz.0.604: iget: illegal inode # [ 208.813274][ T6495] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.604: couldn't read orphan inode 13 (err -117) [ 208.837445][ T6495] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,jqfmt=vfsv0,delalloc,nolazytime,,errors=continue. Quota mode: none. [ 210.775154][ T6515] loop5: detected capacity change from 0 to 256 [ 210.826946][ T6515] exfat: Bad value for 'errors' [ 211.955660][ T6518] loop2: detected capacity change from 0 to 1024 [ 212.124887][ T6520] ODEBUG: Out of memory. ODEBUG disabled [ 212.780072][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 212.796162][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 212.948799][ T6518] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 212.966514][ T6518] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.829665][ T4467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.729138][ T6552] loop5: detected capacity change from 0 to 512 [ 214.750862][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.776783][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.784965][ T6511] device bridge_slave_0 entered promiscuous mode [ 214.801150][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.857801][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 214.865302][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.933414][ T6511] device bridge_slave_1 entered promiscuous mode [ 215.543381][ T6552] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.620: invalid indirect mapped block 10 (level 1) [ 215.567359][ T6552] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.620: invalid indirect mapped block 8 (level 1) [ 215.584432][ T6562] loop2: detected capacity change from 0 to 256 [ 215.592152][ T4467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.619366][ T6562] exfat: Bad value for 'errors' [ 215.627205][ T6552] EXT4-fs (loop5): 1 truncate cleaned up [ 216.920444][ T6552] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.921897][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 217.228325][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.272462][ T6570] loop2: detected capacity change from 0 to 2048 [ 217.281046][ T4467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.343536][ T6573] loop4: detected capacity change from 0 to 2048 [ 217.343656][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.422803][ T6570] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.436561][ T6570] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.491453][ T6573] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 217.552659][ T4467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.296136][ T6587] loop2: detected capacity change from 0 to 1024 [ 218.374501][ T6511] team0: Port device team_slave_0 added [ 218.404197][ T6573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.447727][ T6511] team0: Port device team_slave_1 added [ 218.489965][ T6587] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.523501][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.567615][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.725271][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.808579][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.844649][ T6601] loop5: detected capacity change from 0 to 256 [ 218.857223][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.886631][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.978841][ T6601] exfat: Bad value for 'errors' [ 218.986668][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 222.028902][ T6511] device hsr_slave_0 entered promiscuous mode [ 222.053461][ T6625] loop2: detected capacity change from 0 to 1024 [ 222.139481][ T6511] device hsr_slave_1 entered promiscuous mode [ 223.895824][ T6662] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.934880][ T6662] loop5: detected capacity change from 0 to 512 [ 223.985628][ T6662] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 223.998212][ T6662] EXT4-fs (loop5): inline encryption not supported [ 224.030338][ T6662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 224.070161][ T6662] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 224.077411][ T6511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.095327][ T6662] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 224.152587][ T6511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.198133][ T6511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.205565][ T6662] EXT4-fs (loop5): 1 truncate cleaned up [ 224.211381][ T6662] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 224.280766][ T6511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.287663][ T6676] loop2: detected capacity change from 0 to 256 [ 224.432758][ T6686] loop4: detected capacity change from 0 to 128 [ 224.509956][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.558142][ T6686] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.347940][ T6686] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 226.921229][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.974339][ T26] kauditd_printk_skb: 185 callbacks suppressed [ 226.974354][ T26] audit: type=1326 audit(1756495123.180:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x0 [ 227.049346][ T6511] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.069399][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.097084][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.271805][ T4467] device hsr_slave_0 left promiscuous mode [ 228.298947][ T4467] device hsr_slave_1 left promiscuous mode [ 228.311918][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.338443][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.366687][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.374510][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.449344][ T4467] device bridge_slave_1 left promiscuous mode [ 228.455589][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.476893][ T6729] loop2: detected capacity change from 0 to 2048 [ 228.522617][ T6729] UDF-fs: bad mount option "uid=äýÈ{Ïhçú¨a²õØϯú”¶n5øaÙ–¸Ù@€\Ú$0ÑÛ@!ÿZðOŒeÎˈ ‘ôc"Z݆W‡±YÊZ¨HÙ'€Œl©ë>ɪq±ÑºÎ…Þ“l­³%‹îoÔ±A’óSë¡Hˆàj–ó“în!̧ø°­­·—óᦎÿíÁú)WM`~_ t s" or missing value [ 228.592818][ T4467] device bridge_slave_0 left promiscuous mode [ 228.606468][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.667753][ T4467] device veth1_macvtap left promiscuous mode [ 228.673804][ T4467] device veth0_macvtap left promiscuous mode [ 228.700641][ T4467] device veth1_vlan left promiscuous mode [ 228.721275][ T4467] device veth0_vlan left promiscuous mode [ 231.671711][ T6774] loop2: detected capacity change from 0 to 1024 [ 231.705804][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 231.723450][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 231.767015][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.811629][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.871718][ T5087] hfsplus: b-tree write err: -5, ino 4 [ 231.920991][ T4467] bond0 (unregistering): Released all slaves [ 232.020452][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.042915][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.063663][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.070944][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.086936][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.101880][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.113811][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.130880][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.138065][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.203953][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.864729][ T6790] loop5: detected capacity change from 0 to 164 [ 232.886496][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.932477][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.945763][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.000406][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.143351][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.223270][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.251166][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.302786][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.344530][ T6511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.425486][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.433770][ T6798] loop2: detected capacity change from 0 to 256 [ 233.441659][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.472432][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.651286][ T6798] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 233.826907][ T6808] loop5: detected capacity change from 0 to 512 [ 234.034394][ T6808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 234.362148][ T6808] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.681: Directory hole found for htree index block 0 [ 234.375967][ T6808] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 234.384323][ T6808] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.681: Directory hole found for htree index block 0 [ 234.398428][ T6808] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 234.406730][ T6808] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noblock_validity,nolazytime,usrjquota=",,errors=continue. Quota mode: writeback. [ 234.444033][ T6806] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.681: Directory hole found for htree index block 0 [ 235.501427][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.517236][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.551024][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.334122][ T6866] loop5: detected capacity change from 0 to 256 [ 238.132146][ T6866] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 238.187024][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.196670][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.246997][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.953776][ T6511] device veth0_vlan entered promiscuous mode [ 238.987068][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.025786][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.081528][ T6511] device veth1_vlan entered promiscuous mode [ 239.095889][ T6884] loop4: detected capacity change from 0 to 128 [ 239.102331][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 239.145850][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.164071][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.176932][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.217769][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.276376][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.290188][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.306213][ T6511] device veth0_macvtap entered promiscuous mode [ 239.442257][ T6511] device veth1_macvtap entered promiscuous mode [ 239.562054][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.579898][ T6884] EXT4-fs (loop4): Ignoring removed nobh option [ 239.648388][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.688577][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.709590][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.740125][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.796513][ T7] usb 3-1: unable to read config index 0 descriptor/all [ 239.796785][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.803739][ T7] usb 3-1: can't read configurations, error -71 [ 239.871782][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.903118][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.955128][ T6884] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 239.974504][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.056181][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.075443][ T6884] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.115312][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.266054][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.375271][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.478683][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.572942][ T6911] loop5: detected capacity change from 0 to 1024 [ 240.596969][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.636361][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.666710][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.696468][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.736417][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.772064][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.793347][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.823984][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.885472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.923466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.689378][ T6511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.731508][ T6511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.798905][ T6511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.821059][ T6511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.976023][ T6926] loop4: detected capacity change from 0 to 1024 [ 241.992538][ T6929] loop5: detected capacity change from 0 to 128 [ 242.141438][ T6929] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.169278][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.182898][ T6926] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 242.195857][ T6926] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.239576][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.273470][ T6929] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.374670][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.376492][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.417456][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.458802][ T749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.524525][ T6940] loop2: detected capacity change from 0 to 164 [ 242.526348][ T6942] loop4: detected capacity change from 0 to 256 [ 242.611060][ T6942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 242.918140][ T6938] loop5: detected capacity change from 0 to 4096 [ 243.112901][ T6938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.559421][ T6938] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.708: Invalid inode table block 0 in block_group 0 [ 244.596591][ T6938] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 244.655615][ T6938] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #15: comm syz.5.708: mark_inode_dirty error [ 244.772844][ T6938] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.708: Invalid inode table block 0 in block_group 0 [ 244.834037][ T6954] loop2: detected capacity change from 0 to 512 [ 244.866214][ T6938] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 244.940422][ T6975] loop4: detected capacity change from 0 to 1024 [ 244.986901][ T6938] EXT4-fs error (device loop5): ext4_write_end:1347: inode #15: comm syz.5.708: mark_inode_dirty error [ 245.127126][ T6954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 245.154126][ T6954] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.712: Directory hole found for htree index block 0 [ 245.169497][ T6954] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 245.177895][ T6954] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.712: Directory hole found for htree index block 0 [ 245.193746][ T6954] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 245.202072][ T6954] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noblock_validity,nolazytime,usrjquota=",,errors=continue. Quota mode: writeback. [ 245.255794][ T6954] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.712: Directory hole found for htree index block 0 [ 245.271871][ T144] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 245.302051][ T6975] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 245.346447][ T6975] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.386458][ T6978] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 245.444632][ T4365] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 245.530666][ T4365] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 245.593711][ T4365] EXT4-fs error (device loop5): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 245.800976][ T6987] loop6: detected capacity change from 0 to 1024 [ 247.419047][ T7009] loop2: detected capacity change from 0 to 164 [ 247.436342][ T7011] loop6: detected capacity change from 0 to 16 [ 247.490300][ T7011] erofs: (device loop6): mounted with root inode @ nid 36. [ 247.542004][ T7011] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 247.602520][ T7011] attempt to access beyond end of device [ 247.602520][ T7011] loop6: rw=524288, want=524304, limit=16 [ 247.761221][ T4195] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 248.076483][ T7011] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 248.105316][ T26] audit: type=1800 audit(1756495144.300:267): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.723" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 248.532568][ T7020] loop2: detected capacity change from 0 to 2048 [ 248.837789][ T7020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 248.865269][ T7027] loop5: detected capacity change from 0 to 1024 [ 248.887554][ T7020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.029368][ T7032] loop6: detected capacity change from 0 to 128 [ 249.067909][ T7027] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 249.111664][ T7027] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.728: iget: special inode unallocated [ 249.149064][ T7032] EXT4-fs (loop6): Test dummy encryption mode enabled [ 249.473609][ T7027] EXT4-fs (loop5): no journal found [ 249.604610][ T7032] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 249.684533][ T7027] EXT4-fs (loop5): can't get journal size [ 249.744882][ T7032] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.768361][ T7027] EXT4-fs (loop5): filesystem is read-only [ 249.822332][ T7027] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 249.960725][ T7039] loop2: detected capacity change from 0 to 1024 [ 250.076663][ T7027] EXT4-fs (loop5): shut down requested (2) [ 250.139316][ T7039] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 250.532418][ T7039] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none. [ 250.710029][ T7039] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 250.756756][ T7039] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 250.856967][ T7039] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.856967][ T7039] [ 250.967661][ T7039] EXT4-fs (loop2): Total free blocks count 0 [ 251.055607][ T7039] EXT4-fs (loop2): Free/Dirty block details [ 251.143861][ T7039] EXT4-fs (loop2): free_blocks=68451041280 [ 251.215440][ T7039] EXT4-fs (loop2): dirty_blocks=16 [ 251.320830][ T7039] EXT4-fs (loop2): Block reservation details [ 251.350721][ T7039] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 253.091627][ T7069] loop6: detected capacity change from 0 to 2048 [ 253.184335][ T7069] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 253.230684][ T7069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.576128][ T26] audit: type=1326 audit(1756495149.770:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 253.856632][ T26] audit: type=1326 audit(1756495149.770:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 253.895871][ T26] audit: type=1326 audit(1756495149.770:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 254.066369][ T26] audit: type=1326 audit(1756495149.770:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 254.179362][ T26] audit: type=1326 audit(1756495149.770:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 254.302874][ T7089] loop2: detected capacity change from 0 to 512 [ 254.597333][ T7089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 254.613044][ T7089] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.742: Directory hole found for htree index block 0 [ 254.630699][ T7089] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 254.639374][ T7089] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.742: Directory hole found for htree index block 0 [ 254.656319][ T7089] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 254.664615][ T7089] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noblock_validity,nolazytime,usrjquota=",,errors=continue. Quota mode: writeback. [ 254.771190][ T7089] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.742: Directory hole found for htree index block 0 [ 254.821474][ T26] audit: type=1326 audit(1756495151.020:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 254.966376][ T26] audit: type=1326 audit(1756495151.040:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 255.037315][ T26] audit: type=1326 audit(1756495151.050:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 255.061188][ T26] audit: type=1326 audit(1756495151.050:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 255.116058][ T26] audit: type=1326 audit(1756495151.050:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 255.330232][ T7098] loop6: detected capacity change from 0 to 1024 [ 255.644015][ T7105] loop5: detected capacity change from 0 to 512 [ 255.712421][ T7105] EXT4-fs (loop5): Ignoring removed orlov option [ 255.720302][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726749][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903538][ T7105] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,nolazytime,orlov,i_version,lazytime,nodiscard,dioread_lock,i_version,errors=remount-ro,. Quota mode: writeback. [ 256.414232][ T7105] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.575016][ T7115] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.746: corrupted inode contents [ 256.595501][ T7115] EXT4-fs (loop5): Remounting filesystem read-only [ 256.602191][ T7115] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.746: mark_inode_dirty error [ 256.614233][ T7115] EXT4-fs (loop5): Remounting filesystem read-only [ 256.621040][ T7115] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.746: corrupted inode contents [ 256.658939][ T7118] loop2: detected capacity change from 0 to 164 [ 256.901857][ T7115] EXT4-fs (loop5): Remounting filesystem read-only [ 256.908921][ T7115] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.746: mark_inode_dirty error [ 256.924358][ T7115] EXT4-fs (loop5): Remounting filesystem read-only [ 257.390031][ T7126] loop6: detected capacity change from 0 to 2048 [ 257.856694][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 257.890911][ T7134] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.899106][ T7134] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.978324][ T7126] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 258.800035][ T7150] loop2: detected capacity change from 0 to 764 [ 258.920450][ T7157] device batadv_slave_1 entered promiscuous mode [ 258.947721][ T7156] device batadv_slave_1 left promiscuous mode [ 259.119678][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 259.155124][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 263.021028][ T7197] xt_socket: unknown flags 0x50 [ 263.050085][ T7196] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.061095][ T7196] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.951036][ T7206] loop2: detected capacity change from 0 to 2048 [ 265.145961][ T7225] loop6: detected capacity change from 0 to 164 [ 267.163998][ T7238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.172422][ T7238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.080760][ T7246] 9pnet: Insufficient options for proto=fd [ 268.481646][ T7257] loop6: detected capacity change from 0 to 1024 [ 268.490116][ T7253] loop4: detected capacity change from 0 to 1024 [ 268.602515][ T7265] loop5: detected capacity change from 0 to 512 [ 268.686961][ T7265] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 268.885150][ T7265] EXT4-fs (loop5): inline encryption not supported [ 269.155111][ T7265] EXT4-fs (loop5): Test dummy encryption mode enabled [ 269.280641][ T7265] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 269.306531][ T7265] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.397479][ T7265] EXT4-fs (loop5): 1 truncate cleaned up [ 269.403247][ T7265] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 269.476730][ T7281] loop2: detected capacity change from 0 to 164 [ 270.254910][ T7297] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.263277][ T7297] rtc_cmos 00:00: Alarms can be up to one day in the future [ 271.463058][ T7301] sched: RT throttling activated [ 271.675779][ T7311] netlink: 56 bytes leftover after parsing attributes in process `syz.6.797'. [ 271.757284][ T7308] 9pnet: Insufficient options for proto=fd [ 272.894440][ T7337] loop2: detected capacity change from 0 to 512 [ 272.973811][ T7339] loop4: detected capacity change from 0 to 512 [ 273.154554][ T7339] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 273.247314][ T7349] xt_socket: unknown flags 0x50 [ 273.254680][ T7339] EXT4-fs (loop4): inline encryption not supported [ 273.310601][ T7339] EXT4-fs (loop4): Test dummy encryption mode enabled [ 273.571304][ T7339] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 273.618705][ T7337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.804: inode #1: comm syz.2.804: iget: illegal inode # [ 273.760522][ T7339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.774486][ T7337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.804: error while reading EA inode 1 err=-117 [ 273.873901][ T7337] EXT4-fs (loop2): 1 orphan inode deleted [ 273.876481][ T7339] EXT4-fs (loop4): 1 truncate cleaned up [ 273.898385][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.916540][ T7339] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 273.938865][ T7357] 9pnet: Insufficient options for proto=fd [ 273.943607][ T7337] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.804: unexpected EA_INODE flag [ 274.189892][ T7369] netlink: 'syz.6.813': attribute type 34 has an invalid length. [ 276.236121][ T7392] loop2: detected capacity change from 0 to 164 [ 276.560331][ T5155] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.816418][ T5155] usb 6-1: Using ep0 maxpacket: 8 [ 276.966976][ T5155] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.154029][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.278851][ T5155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.293420][ T5155] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 278.303122][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.323923][ T5155] usb 6-1: config 0 descriptor?? [ 278.730269][ T7419] loop2: detected capacity change from 0 to 512 [ 278.789561][ T7419] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 278.795213][ T4264] usb 6-1: USB disconnect, device number 5 [ 278.820536][ T7419] EXT4-fs (loop2): inline encryption not supported [ 278.842709][ T7419] EXT4-fs (loop2): Test dummy encryption mode enabled [ 279.147683][ T7419] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 279.377805][ T7419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.586698][ T7419] EXT4-fs (loop2): 1 truncate cleaned up [ 279.592386][ T7419] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 283.887239][ T7459] loop5: detected capacity change from 0 to 8192 [ 284.045120][ T7471] loop4: detected capacity change from 0 to 256 [ 284.182109][ T7471] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 284.507835][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 284.507852][ T26] audit: type=1326 audit(1756495180.470:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 284.753091][ T26] audit: type=1326 audit(1756495180.470:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 284.786572][ T26] audit: type=1326 audit(1756495180.470:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 284.914289][ T26] audit: type=1326 audit(1756495180.490:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 285.123387][ T26] audit: type=1326 audit(1756495180.490:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 285.886746][ T26] audit: type=1326 audit(1756495180.500:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 285.939616][ T26] audit: type=1326 audit(1756495180.510:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 285.984409][ T7494] loop5: detected capacity change from 0 to 1024 [ 286.072298][ T26] audit: type=1326 audit(1756495180.510:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea1917be9 code=0x7ffc0000 [ 286.139056][ T7494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.253848][ T26] audit: type=1800 audit(1756495182.450:295): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.844" name="file1" dev="loop5" ino=839 res=0 errno=0 [ 288.578333][ T7515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.847'. [ 290.051036][ T7527] xt_socket: unknown flags 0x50 [ 290.662240][ T7537] bridge: RTM_NEWNEIGH with invalid ether address [ 291.300498][ T7563] loop4: detected capacity change from 0 to 256 [ 291.372354][ T7568] loop6: detected capacity change from 0 to 512 [ 291.409754][ T7568] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 291.424025][ T7568] EXT4-fs (loop6): Unsupported encryption level 249 [ 291.463932][ T7563] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 291.807216][ T7576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.860'. [ 292.417865][ T7586] loop5: detected capacity change from 0 to 1024 [ 292.627143][ T7586] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 292.647812][ T7600] loop4: detected capacity change from 0 to 1024 [ 292.665150][ T7586] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.679911][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 292.764126][ T7600] EXT4-fs (loop4): Ignoring removed oldalloc option [ 292.796896][ T7600] EXT4-fs (loop4): Ignoring removed orlov option [ 293.226039][ T7600] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 293.596421][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 293.717498][ T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.986665][ T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.986697][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.986716][ T23] usb 7-1: Product: syz [ 293.986730][ T23] usb 7-1: Manufacturer: syz [ 293.986744][ T23] usb 7-1: SerialNumber: syz [ 294.027845][ T23] cdc_ether 7-1:1.0: skipping garbage [ 294.027870][ T23] usb 7-1: bad CDC descriptors [ 294.319041][ T26] audit: type=1326 audit(1756495190.520:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 294.319069][ T26] audit: type=1326 audit(1756495190.520:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.6.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd842733be9 code=0x7ffc0000 [ 294.824503][ T13] usb 7-1: USB disconnect, device number 2 [ 296.004716][ T7706] loop5: detected capacity change from 0 to 1024 [ 296.142873][ T7712] loop4: detected capacity change from 0 to 256 [ 296.318658][ T7714] rtc_cmos 00:00: Alarms can be up to one day in the future [ 296.327328][ T7714] rtc_cmos 00:00: Alarms can be up to one day in the future [ 296.472186][ T7712] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 296.810834][ T7706] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.171549][ T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 297.383067][ T7706] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2755: inode #2: comm syz.5.882: corrupted in-inode xattr [ 297.405237][ T7706] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 297.555387][ T7737] loop4: detected capacity change from 0 to 1024 [ 297.605518][ T7737] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 297.662051][ T7] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.692151][ T7] usb 7-1: config 1 has no interface number 1 [ 297.700476][ T7737] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.751123][ T7] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 298.106372][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.106441][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.106497][ T7] usb 7-1: Product: syz [ 298.106530][ T7] usb 7-1: Manufacturer: syz [ 298.106579][ T7] usb 7-1: SerialNumber: syz [ 298.575929][ T7758] loop5: detected capacity change from 0 to 8 [ 299.896642][ T7] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 299.914362][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.892'. [ 299.956617][ T7] usb 7-1: failed to enable PITCH for EP 0x82 [ 300.204947][ T7] usb 7-1: USB disconnect, device number 3 [ 302.265636][ T5374] udevd[5374]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.656277][ T7803] Device name cannot be null; rc = [-22] [ 303.920912][ T7818] loop5: detected capacity change from 0 to 256 [ 305.456027][ T7846] loop4: detected capacity change from 0 to 256 [ 306.581385][ T7859] netlink: 136 bytes leftover after parsing attributes in process `syz.1.919'. [ 306.593789][ T7846] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 307.448469][ T7883] loop4: detected capacity change from 0 to 512 [ 307.490680][ T7883] EXT4-fs (loop4): Test dummy encryption mode enabled [ 308.256397][ T7883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.505564][ T7883] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.925: bad orphan inode 131083 [ 308.535949][ T7883] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 309.386854][ T7883] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 313.721465][ T7943] loop6: detected capacity change from 0 to 256 [ 313.813256][ T7943] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 316.870346][ T7988] loop5: detected capacity change from 0 to 256 [ 317.627821][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.634244][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.760877][ T7988] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 319.136565][ T8011] loop4: detected capacity change from 0 to 1024 [ 319.169700][ T8011] EXT4-fs (loop4): Ignoring removed orlov option [ 319.176338][ T8011] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 319.183919][ T8011] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000004" or missing value [ 319.732690][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.075438][ T8043] loop6: detected capacity change from 0 to 512 [ 321.212811][ T8039] loop5: detected capacity change from 0 to 1024 [ 321.280092][ T8043] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.388915][ T8050] loop4: detected capacity change from 0 to 256 [ 321.396813][ T8043] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.434452][ T8050] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 321.655077][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 321.665612][ T4192] CPU: 1 PID: 4192 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 321.673177][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.683324][ T4192] Workqueue: hci2 hci_rx_work [ 321.688024][ T4192] Call Trace: [ 321.691293][ T4192] [ 321.694223][ T4192] dump_stack_lvl+0x168/0x230 [ 321.698894][ T4192] ? show_regs_print_info+0x20/0x20 [ 321.704079][ T4192] ? load_image+0x3b0/0x3b0 [ 321.708576][ T4192] sysfs_create_dir_ns+0x252/0x280 [ 321.713675][ T4192] ? __lock_acquire+0x7c60/0x7c60 [ 321.718721][ T4192] ? sysfs_warn_dup+0xa0/0xa0 [ 321.723475][ T4192] ? le_conn_complete_evt+0xcbc/0x1590 [ 321.729167][ T4192] ? hci_event_packet+0xe05/0x12f0 [ 321.734282][ T4192] ? process_one_work+0x863/0x1000 [ 321.739485][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 321.744675][ T4192] kobject_add_internal+0x662/0xd00 [ 321.750012][ T4192] kobject_add+0x152/0x210 [ 321.754633][ T4192] ? kobject_init+0x1d0/0x1d0 [ 321.759331][ T4192] ? klist_children_get+0x50/0x50 [ 321.764377][ T4192] ? get_device_parent+0x121/0x3f0 [ 321.769506][ T4192] device_add+0x483/0xfb0 [ 321.773961][ T4192] hci_conn_add_sysfs+0xd1/0x1e0 [ 321.778909][ T4192] le_conn_complete_evt+0xcbc/0x1590 [ 321.784202][ T4192] ? cs_le_create_conn+0x5e0/0x5e0 [ 321.789303][ T4192] ? __mutex_trylock_common+0x14f/0x250 [ 321.794838][ T4192] hci_le_meta_evt+0x289/0x3b80 [ 321.799688][ T4192] ? hci_event_packet+0x36d/0x12f0 [ 321.804783][ T4192] ? hci_event_packet+0x2e2/0x12f0 [ 321.809885][ T4192] ? __lock_acquire+0x7c60/0x7c60 [ 321.814913][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 321.820974][ T4192] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 321.827033][ T4192] ? mark_lock+0x94/0x320 [ 321.831352][ T4192] ? mutex_unlock+0x10/0x10 [ 321.835848][ T4192] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 321.841827][ T4192] ? lock_chain_count+0x20/0x20 [ 321.846678][ T4192] ? __rwlock_init+0x140/0x140 [ 321.851442][ T4192] hci_event_packet+0xe05/0x12f0 [ 321.856368][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 321.861575][ T4192] ? rcu_lock_release+0x20/0x20 [ 321.866813][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 321.872123][ T4192] hci_rx_work+0x255/0xa10 [ 321.876549][ T4192] process_one_work+0x863/0x1000 [ 321.881506][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 321.887145][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 321.892440][ T4192] ? _raw_spin_lock_irq+0xab/0xe0 [ 321.897456][ T4192] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 321.903068][ T4192] ? wq_worker_running+0x97/0x170 [ 321.908268][ T4192] worker_thread+0xaa8/0x12a0 [ 321.912954][ T4192] kthread+0x436/0x520 [ 321.917129][ T4192] ? rcu_lock_release+0x20/0x20 [ 321.922086][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 321.926684][ T4192] ret_from_fork+0x1f/0x30 [ 321.931103][ T4192] [ 321.944775][ T4192] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 321.958718][ T4192] Bluetooth: hci2: failed to register connection device [ 325.439412][ T8084] loop4: detected capacity change from 0 to 1024 [ 326.304226][ T8099] loop6: detected capacity change from 0 to 256 [ 326.392872][ T8099] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.467394][ T8099] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 326.530035][ T8105] loop4: detected capacity change from 0 to 4096 [ 326.534916][ T8099] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 326.572953][ T8105] EXT4-fs (loop4): Test dummy encryption mode enabled [ 326.638454][ T8105] EXT4-fs (loop4): unsupported descriptor size 255 [ 328.183623][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 329.553338][ T8132] loop5: detected capacity change from 0 to 1024 [ 329.581955][ T8133] loop4: detected capacity change from 0 to 164 [ 329.630932][ T8141] Device name cannot be null; rc = [-22] [ 329.644787][ T8132] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 329.686517][ T8132] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.105510][ T8146] loop6: detected capacity change from 0 to 1024 [ 330.756021][ T8150] loop4: detected capacity change from 0 to 512 [ 330.963627][ T8146] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 331.020489][ T8150] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 331.033753][ T8150] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.518787][ T8168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.527596][ T8168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 333.321120][ T8177] Device name cannot be null; rc = [-22] [ 334.637391][ T4173] Bluetooth: hci1: command 0x0406 tx timeout [ 334.796818][ T8207] loop4: detected capacity change from 0 to 1024 [ 334.910714][ T8207] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 334.944480][ T8207] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.115242][ T8213] loop5: detected capacity change from 0 to 128 [ 335.180058][ T8213] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 335.202648][ T8211] xt_socket: unknown flags 0x50 [ 335.207940][ T8213] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.224990][ T8227] loop5: detected capacity change from 0 to 256 [ 336.247123][ T8227] exfat: Deprecated parameter 'utf8' [ 336.252448][ T8227] exfat: Unknown parameter 'keep_last_dots' [ 336.798763][ T8234] loop6: detected capacity change from 0 to 128 [ 338.476952][ T8251] rtc_cmos 00:00: Alarms can be up to one day in the future [ 338.485414][ T8251] rtc_cmos 00:00: Alarms can be up to one day in the future [ 339.134149][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 341.452009][ T8273] loop4: detected capacity change from 0 to 512 [ 341.496186][ T8273] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 341.608889][ T8275] fuse: Bad value for 'fd' [ 342.127867][ T8273] EXT4-fs (loop4): inline encryption not supported [ 342.134459][ T8273] EXT4-fs (loop4): Test dummy encryption mode enabled [ 342.162514][ T8273] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 342.184568][ T8273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 342.267211][ T8273] EXT4-fs (loop4): 1 truncate cleaned up [ 342.272950][ T8273] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 342.334528][ T8286] loop5: detected capacity change from 0 to 1024 [ 342.514952][ T8286] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 342.582440][ T8286] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.682848][ T8290] loop4: detected capacity change from 0 to 2048 [ 342.829252][ T8290] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 342.893665][ T8290] UDF-fs: Scanning with blocksize 512 failed [ 342.945984][ T8295] loop5: detected capacity change from 0 to 256 [ 342.986273][ T8290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.008975][ T8295] exfat: Bad value for 'errors' [ 343.794246][ T8306] loop6: detected capacity change from 0 to 512 [ 344.128343][ T8306] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 344.136822][ T8306] System zones: 0-2, 18-18, 34-35 [ 344.217826][ T8306] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue. Quota mode: writeback. [ 344.233101][ T8306] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.788665][ T8329] loop4: detected capacity change from 0 to 1024 [ 346.983139][ T8332] loop6: detected capacity change from 0 to 1024 [ 347.096897][ T8329] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 347.131683][ T8345] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.140522][ T8345] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.177514][ T8332] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 347.219570][ T8329] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.236436][ T8332] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.610997][ T8349] xt_CONNSECMARK: invalid mode: 0 [ 348.165645][ T8360] xt_socket: unknown flags 0x50 [ 349.970574][ T8372] loop6: detected capacity change from 0 to 256 [ 350.033773][ T8372] exfat: Bad value for 'errors' [ 350.631856][ T8393] loop5: detected capacity change from 0 to 1024 [ 351.471006][ T8393] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 351.686440][ T8393] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.055801][ T8402] xt_socket: unknown flags 0x50 [ 352.840643][ T8410] loop6: detected capacity change from 0 to 16 [ 353.582211][ T8415] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 353.883592][ T8410] erofs: (device loop6): mounted with root inode @ nid 36. [ 354.481701][ T8433] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.490099][ T8433] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.740089][ T8438] loop4: detected capacity change from 0 to 1024 [ 354.865812][ T8438] xt_CONNSECMARK: invalid mode: 0 [ 355.322542][ T7148] hfsplus: b-tree write err: -5, ino 4 [ 355.393258][ T8436] loop6: detected capacity change from 0 to 512 [ 355.425584][ T8441] loop4: detected capacity change from 0 to 1024 [ 355.492287][ T8436] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 355.517814][ T8436] EXT4-fs (loop6): inline encryption not supported [ 355.524842][ T8436] EXT4-fs (loop6): Test dummy encryption mode enabled [ 355.537260][ T8441] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 355.557164][ T8436] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 355.564343][ T8436] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 355.594916][ T8441] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.683597][ T8436] EXT4-fs (loop6): 1 truncate cleaned up [ 355.703829][ T8436] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 356.135797][ T8455] xt_socket: unknown flags 0x50 [ 356.922708][ T8462] loop4: detected capacity change from 0 to 512 [ 356.980486][ T8462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 357.171962][ T8462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 357.192016][ T8462] System zones: 1-12 [ 357.235237][ T8462] EXT4-fs (loop4): 1 truncate cleaned up [ 357.259843][ T8462] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./file0,bsdgroups,debug,noload,,errors=continue. Quota mode: none. [ 357.605548][ T26] audit: type=1800 audit(1756495253.800:298): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1108" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 357.932171][ T8480] raw_sendmsg: syz.6.1112 forgot to set AF_INET. Fix it! [ 358.058502][ T8481] xt_CONNSECMARK: invalid mode: 0 [ 359.032494][ T8501] xt_socket: unknown flags 0x50 [ 360.084011][ T4316] Bluetooth: hci1: command 0x0405 tx timeout [ 360.305932][ T8511] Device name cannot be null; rc = [-22] [ 362.400419][ T8521] loop6: detected capacity change from 0 to 1024 [ 362.486728][ T8521] xt_CONNSECMARK: invalid mode: 0 [ 363.051639][ T4468] hfsplus: b-tree write err: -5, ino 4 [ 364.150464][ T8543] xt_socket: unknown flags 0x50 [ 364.202380][ T8542] netlink: 'syz.6.1130': attribute type 4 has an invalid length. [ 366.016713][ T8558] Device name cannot be null; rc = [-22] [ 366.743453][ T4316] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 369.506324][ T4316] usb 6-1: device descriptor read/all, error -71 [ 371.216017][ T8576] xt_socket: unknown flags 0x50 [ 372.031049][ T8596] Device name cannot be null; rc = [-22] [ 372.709681][ T8608] loop4: detected capacity change from 0 to 164 [ 372.737319][ T8609] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1152'. [ 373.306790][ T4231] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 373.684814][ T8616] capability: warning: `syz.5.1154' uses 32-bit capabilities (legacy support in use) [ 373.996807][ T4231] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 374.097881][ T4231] usb 7-1: config 0 has no interface number 0 [ 374.104356][ T4231] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 374.366577][ T4231] usb 7-1: New USB device found, idVendor=0499, idProduct=6bbf, bcdDevice=68.2f [ 374.396973][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.543200][ T4231] usb 7-1: Product: syz [ 374.547519][ T4231] usb 7-1: Manufacturer: syz [ 374.552370][ T4231] usb 7-1: SerialNumber: syz [ 374.562981][ T4231] usb 7-1: config 0 descriptor?? [ 374.614711][ T8633] loop5: detected capacity change from 0 to 4096 [ 374.715303][ T8633] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 375.004174][ T4231] usb 7-1: USB disconnect, device number 4 [ 375.061365][ T8643] udevd[8643]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.432562][ T8645] Device name cannot be null; rc = [-22] [ 376.183114][ T8654] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1164'. [ 377.116441][ T8655] xt_socket: unknown flags 0x50 [ 377.905026][ T8661] loop6: detected capacity change from 0 to 164 [ 378.258912][ T8667] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 378.307256][ T8667] loop5: detected capacity change from 0 to 512 [ 378.637213][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650762][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.469171][ T8667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 379.953422][ T8667] EXT4-fs (loop5): 1 orphan inode deleted [ 379.959411][ T8667] EXT4-fs (loop5): 1 truncate cleaned up [ 379.965194][ T8667] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache,. Quota mode: none. [ 380.026797][ T8667] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 380.054725][ T8667] EXT4-fs (loop5): Remounting filesystem read-only [ 381.396860][ T8688] Device name cannot be null; rc = [-22] [ 381.920750][ T8692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 383.000809][ T8697] loop6: detected capacity change from 0 to 512 [ 383.070582][ T8697] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 383.084879][ T8697] EXT4-fs (loop6): inline encryption not supported [ 383.102154][ T8697] EXT4-fs (loop6): Test dummy encryption mode enabled [ 383.119327][ T8697] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 383.134518][ T8697] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 383.180088][ T8697] EXT4-fs (loop6): 1 truncate cleaned up [ 383.196069][ T8697] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 383.695545][ T8707] loop4: detected capacity change from 0 to 256 [ 383.884035][ T8707] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 385.518536][ T8711] loop6: detected capacity change from 0 to 256 [ 386.494846][ T8711] exfat: Unknown parameter 'fsmagic' [ 387.255884][ T8711] loop6: detected capacity change from 0 to 2048 [ 387.615146][ T8711] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.354570][ T26] audit: type=1326 audit(1756495284.550:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 388.495316][ T8723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1182'. [ 388.504977][ T26] audit: type=1326 audit(1756495284.620:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 388.676368][ T26] audit: type=1326 audit(1756495284.620:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 388.736134][ T8731] loop4: detected capacity change from 0 to 512 [ 389.292312][ T26] audit: type=1326 audit(1756495284.620:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 389.309120][ T8731] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=" or missing value [ 390.012532][ T8734] Device name cannot be null; rc = [-22] [ 390.186331][ T26] audit: type=1326 audit(1756495284.620:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 390.256665][ T26] audit: type=1326 audit(1756495284.620:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 390.281618][ T26] audit: type=1326 audit(1756495284.620:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 390.310378][ T8742] loop6: detected capacity change from 0 to 512 [ 390.326496][ T26] audit: type=1326 audit(1756495284.620:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 390.369878][ T8742] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 391.005090][ T8742] EXT4-fs (loop6): inline encryption not supported [ 391.019894][ T8748] loop5: detected capacity change from 0 to 1024 [ 391.056981][ T26] audit: type=1326 audit(1756495284.620:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 391.060553][ T8742] EXT4-fs (loop6): Test dummy encryption mode enabled [ 391.080537][ T26] audit: type=1326 audit(1756495284.620:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc43200be9 code=0x7ffc0000 [ 391.173876][ T8742] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 391.181945][ T8742] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 391.200976][ T8742] EXT4-fs (loop6): 1 truncate cleaned up [ 391.227747][ T8742] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 392.809450][ T8757] loop5: detected capacity change from 0 to 2048 [ 395.281558][ C0] ------------[ cut here ]------------ [ 395.287478][ C0] WARNING: CPU: 0 PID: 4467 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 395.296935][ C0] Modules linked in: [ 395.300831][ C0] CPU: 0 PID: 4467 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 395.308410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.318520][ C0] Workqueue: bat_events batadv_nc_worker [ 395.324508][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 395.330707][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 395.350563][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 395.356670][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88802bc30000 [ 395.364645][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.372678][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005786001 [ 395.380700][ C0] R10: ffffed1005786001 R11: 1ffff11005786000 R12: ffff88802bc31788 [ 395.388737][ C0] R13: 00007ffffffff000 R14: ffffc90000007a88 R15: 0000000000000000 [ 395.396748][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 395.405696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.412428][ C0] CR2: 0000001b32518ff8 CR3: 000000002a47c000 CR4: 00000000003506f0 [ 395.420485][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.428531][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.436838][ C0] Call Trace: [ 395.440128][ C0] [ 395.442995][ C0] bpf_probe_read_compat+0xdd/0x170 [ 395.448270][ C0] ? bpf_trace_run3+0x17e/0x320 [ 395.453133][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 395.458036][ C0] ? kasan_quarantine_put+0x39/0x220 [ 395.463506][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.469288][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 395.474581][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 395.479843][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.485607][ C0] ? __bpf_trace_kmem_cache_free+0x99/0xc0 [ 395.491498][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.497267][ C0] ? kmem_cache_free+0x1e7/0x210 [ 395.502226][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.508124][ C0] ? __iterate_interfaces+0x243/0x500 [ 395.513512][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 395.519819][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 395.526081][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 395.533498][ C0] ? mac80211_hwsim_beacon+0x9b/0x180 [ 395.538930][ C0] ? __hrtimer_run_queues+0x53d/0xc40 [ 395.544317][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 395.550349][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 395.556456][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 395.561160][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 395.566329][ C0] ? hrtimer_run_softirq+0x176/0x240 [ 395.571625][ C0] ? handle_softirqs+0x328/0x820 [ 395.576614][ C0] ? do_softirq+0x13b/0x200 [ 395.581145][ C0] ? do_softirq+0x200/0x200 [ 395.585693][ C0] ? do_softirq+0x13b/0x200 [ 395.590243][ C0] [ 395.593184][ C0] [ 395.596117][ C0] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 395.601532][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 395.607566][ C0] ? __local_bh_enable_ip+0xcb/0x1b0 [ 395.612862][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 395.618192][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 395.623669][ C0] ? __local_bh_enable_ip+0x174/0x1b0 [ 395.629263][ C0] ? _local_bh_enable+0xa0/0xa0 [ 395.634130][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 395.639376][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 395.644847][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 395.651419][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 395.656968][ C0] ? batadv_nc_worker+0x327/0x5c0 [ 395.662020][ C0] ? process_one_work+0x863/0x1000 [ 395.667492][ C0] ? worker_detach_from_pool+0x240/0x240 [ 395.673133][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 395.678484][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 395.683521][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 395.689055][ C0] ? wq_worker_running+0x97/0x170 [ 395.694087][ C0] ? worker_thread+0xaa8/0x12a0 [ 395.699122][ C0] ? kthread+0x436/0x520 [ 395.703377][ C0] ? rcu_lock_release+0x20/0x20 [ 395.708321][ C0] ? kthread_blkcg+0xd0/0xd0 [ 395.712943][ C0] ? ret_from_fork+0x1f/0x30 [ 395.717594][ C0] [ 395.720630][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.727992][ C0] CPU: 0 PID: 4467 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 395.735720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.745787][ C0] Workqueue: bat_events batadv_nc_worker [ 395.751434][ C0] Call Trace: [ 395.754718][ C0] [ 395.757568][ C0] dump_stack_lvl+0x168/0x230 [ 395.762258][ C0] ? show_regs_print_info+0x20/0x20 [ 395.767464][ C0] ? load_image+0x3b0/0x3b0 [ 395.771990][ C0] panic+0x2c9/0x7f0 [ 395.775899][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 395.780432][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 395.786006][ C0] __warn+0x248/0x2b0 [ 395.790002][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 395.795578][ C0] report_bug+0x1b7/0x2e0 [ 395.799929][ C0] handle_bug+0x3a/0x70 [ 395.804163][ C0] exc_invalid_op+0x16/0x40 [ 395.808676][ C0] asm_exc_invalid_op+0x16/0x20 [ 395.813548][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 395.819715][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 395.839647][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 395.845730][ C0] RAX: ffffffff819ed740 RBX: 0000000000000008 RCX: ffff88802bc30000 [ 395.853799][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.861876][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005786001 [ 395.869969][ C0] R10: ffffed1005786001 R11: 1ffff11005786000 R12: ffff88802bc31788 [ 395.877959][ C0] R13: 00007ffffffff000 R14: ffffc90000007a88 R15: 0000000000000000 [ 395.885955][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 395.891530][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 395.897101][ C0] bpf_probe_read_compat+0xdd/0x170 [ 395.902314][ C0] ? bpf_trace_run3+0x17e/0x320 [ 395.907157][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 395.912087][ C0] ? kasan_quarantine_put+0x39/0x220 [ 395.917361][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.923092][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 395.928383][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 395.933569][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.939281][ C0] ? __bpf_trace_kmem_cache_free+0x99/0xc0 [ 395.945113][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.950817][ C0] ? kmem_cache_free+0x1e7/0x210 [ 395.955766][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 395.961486][ C0] ? __iterate_interfaces+0x243/0x500 [ 395.967001][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 395.973254][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 395.979492][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 395.986719][ C0] ? mac80211_hwsim_beacon+0x9b/0x180 [ 395.992110][ C0] ? __hrtimer_run_queues+0x53d/0xc40 [ 395.997509][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 396.003490][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 396.009462][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 396.014135][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 396.019324][ C0] ? hrtimer_run_softirq+0x176/0x240 [ 396.024640][ C0] ? handle_softirqs+0x328/0x820 [ 396.029560][ C0] ? do_softirq+0x13b/0x200 [ 396.034045][ C0] ? do_softirq+0x200/0x200 [ 396.038535][ C0] ? do_softirq+0x13b/0x200 [ 396.043013][ C0] [ 396.045925][ C0] [ 396.049094][ C0] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 396.054451][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 396.060533][ C0] ? __local_bh_enable_ip+0xcb/0x1b0 [ 396.065799][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 396.071068][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 396.076513][ C0] ? __local_bh_enable_ip+0x174/0x1b0 [ 396.081981][ C0] ? _local_bh_enable+0xa0/0xa0 [ 396.086812][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 396.091988][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 396.097687][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 396.104172][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 396.109626][ C0] ? batadv_nc_worker+0x327/0x5c0 [ 396.114636][ C0] ? process_one_work+0x863/0x1000 [ 396.119832][ C0] ? worker_detach_from_pool+0x240/0x240 [ 396.125448][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 396.130805][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 396.135816][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 396.141175][ C0] ? wq_worker_running+0x97/0x170 [ 396.146253][ C0] ? worker_thread+0xaa8/0x12a0 [ 396.151103][ C0] ? kthread+0x436/0x520 [ 396.155324][ C0] ? rcu_lock_release+0x20/0x20 [ 396.160153][ C0] ? kthread_blkcg+0xd0/0xd0 [ 396.164811][ C0] ? ret_from_fork+0x1f/0x30 [ 396.169392][ C0] [ 396.172579][ C0] Kernel Offset: disabled [ 396.176894][ C0] Rebooting in 86400 seconds..