last executing test programs: 3m40.490587649s ago: executing program 4 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 3m39.138930168s ago: executing program 4 (id=219): write$apparmor_current(0xffffffffffffffff, &(0x7f0000000d80)=@hat={'changehat ', 0x1}, 0x1d) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3m33.810293227s ago: executing program 4 (id=231): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000800", @ANYBLOB="0102000000000000000019"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() fcntl$lock(r2, 0x25, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x9700, 0x2, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x0, 0x1f, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x9]}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x824c6d, 0x0) 3m30.110284457s ago: executing program 4 (id=234): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@orlov}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080), &(0x7f0000000a40)="0f1955a3072b2e577ea198cf58cf2cdad6d57baf90cea780eb02b6e85b0bdfed37dd8931326143d9b1ceaa10b5f0ce27037d00afbe556190e52a112195415f6e98332fe79f71c1f01237a94ef313f9e17082fb7eac1b5cfe7a25b34a5139c16ea365858f76123e66e6ac03ba5bb654b779f7a96c71a06bda3946fc2997362b1ac9544531840d0fdb39424ab655b8e2c5d9b806ce9686bb48244804a6cb068955c5784141f263656240bf4a7ce9ad04ac6fec7d80000000d9c98108f95cffc836714d98eb78", 0xc5, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0, r0}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/107) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000000c0)='./file2\x00', 0x8810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f0000001fc0)="$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") gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x14, 0xfffff001}}, @IFA_FLAGS={0x8, 0x8, 0x690}]}, 0x48}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x46842, 0x0) sendfile(r8, r8, 0x0, 0x7a680000) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) 3m26.888795893s ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000300), 0xd, 0x5e9, &(0x7f0000001340)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x2202, 0x0) sendfile(r5, r5, 0x0, 0x1) sendfile(r2, r1, 0x0, 0x2c62) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) 3m23.439839122s ago: executing program 4 (id=247): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c040000000000100000"], 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xded6de49ba727f8f, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000000d}) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 3m8.112445123s ago: executing program 32 (id=247): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c040000000000100000"], 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xded6de49ba727f8f, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000000d}) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 2m48.22164103s ago: executing program 5 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000300), 0xd, 0x5e9, &(0x7f0000001340)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCRKSwsYYkyErSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWPu9N7Sae/0u72V+/slQ889Zy7nTKfPnDNnzrkTQGX1p//UIvZHxGQS0ZvMzpe1R1bYP3e/B399fDa9JVGvv/5HEkmWl98/yX72ZCd3RcRPPyaxr21pvVMz1y6OTkyMX82OB6cvTQ5OzVw7fOHS6Pnx8+OXh18YPnH82PETQ0dW8zC6F2dcL7jT6ZvvfdD76chb3379dzL03a8jSZyMV7I7Lnwcm6U/+hu/k2RpUc+Jza6sJG3Z38nCpzhpL7FBrEn+/HVExBPRG23x8MnrjU9eLbVxwJaqJxF1oKIS8Q8VlY8D8vf2i98H10oZlQDb4f6puQmApfHfPjc3GF2NuYHdD5JYOK2TRMSqZuZWsCci7t4ZuXnuzsjN2KJ5OKDY7I2IeLIo/pNG/PdFV/Q14r/WFP/puOBM9jPNf22d9S+eKhb/sH3m4r9r2fiPFvH/9oL4f2ed9fc/TL7b3RT/Sz7SAwAAAAAAAFZw+1REPF/0+X9tfv1PFKz/6YmIk5tQf/+i46Wf/9fubUI1QIH7pyJeKlz/W8tX//a1Zan/NdYDdCTnLkyMH4mI/0fEoejYlR4PLVPH4c/2fdWqrD9b/5ff0vrvZmsBs3bca9/VfM7Y6PToRh83EHH/RsRThet/k/n+Pyno/9PXg8lV1rHv2VtnWpWtHP/AVql/E3GwsP9/eNWKZPnrcww2xgOD+ahgqac/+vz7VvWvN/5dYgI2Lu3/dy8f/33Jwuv1TK29jqMz7fVWZesd/3cmbzQuOdOZ5X04Oj19dSiiMzndluY25Q+vvc3wKMrjIY+XNP4PPbP8/F/R+L87ImYX/d/Jn817inOP/9PzW6v2GP9DedL4H1tT/7/2xPCtvh9a1b+6/v9Yo68/lOWY/4M5X+Zh2tmcXxCO7UVF291eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgU1CJiTyS1gfl0rTYwENETEY/F7trElanp585def/yWFrW+P7/Wv5Nv71zx0n+/f99C46HFx0fjYi9EfFFW3fjeODslYmxsh88AAAAAAAAAAAAAAAAAAAA7BA9Lfb/p35vK7t1wJZrL7sBQGkK4v/nMtoBbD/9P1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCRsvfA7V+SiJh9sbtxS3VmZR2ltgzYarWyGwCUxiV+oLos/YHq8h4fSFYo72p50kpnLmfy7AZOBgAAAAAAAAAAAIDKObjf/n+oKvv/obrs/4fqyvf/Hyi5HcD2W+N7/PpGdvsCO9dysV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6OiKacN3dIw7YxUa/Xr6d/BTulPf/xRL4Ufqe0Z1Ei3+u3urPKe00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa/RsAAP//EH0kSg==") r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x2202, 0x0) sendfile(r5, r5, 0x0, 0x1) sendfile(r2, r1, 0x0, 0x2c62) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) 2m45.31961917s ago: executing program 5 (id=304): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000200)="ea36dc61268b61ba8c4c11f2afc34086227470889d900f03ade2", 0x1a}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @rand_addr=0x64010100}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2m42.883803083s ago: executing program 5 (id=308): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x602, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r5, 0x0, 0x0) 2m40.620886787s ago: executing program 5 (id=311): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 2m40.103321963s ago: executing program 5 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030303030372c666d61736b3d30303030303030303030303030303030303030303030322c696f636861727365743d69736f383835392d31332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303337313630373234312c696f636861727365743d63703933322c6572726f72733d72656d6f756e742d726f2c666d61736b3d30303030303030303030303030303030303030303030352c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703836362c00ce0a5a71797b7256e90d2c78b433e66c4b4bc11d1f2c4d0cc1067826fa1a2c7e4d91d9b0179d604e463f435112f83befe3fe654c7636195294441b3602771ab07c8432acef3d5d173bdcde62c060457d460e95674bf5088b838b15ca8513626878d244b25d4f64d3c7eeeeeb484c2ffa3f8b4ad3ae9cb028b2b4d6e1aa1ec5406b99aa5b65ee0d12a169116f65688cbd61df820a0edfc5c40da44e70327aafebaa4a7c8bb964a37c5d89a99fb4fd0b149070fb825786654ff7ddcf75358ded9cd800000000a0c3328e6a138baad4bd205d6fb08d"], 0x1, 0x1508, &(0x7f0000007200)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x11) 2m37.150616368s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x74, 0x0, 0x0, 0xfffffff0}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x16, 0x0, 0x0, 0x0, @binary="4322594b04da53e219128bad1c4378c7c208"}]}]}, 0x38}}, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2m17.863376266s ago: executing program 33 (id=317): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x74, 0x0, 0x0, 0xfffffff0}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x16, 0x0, 0x0, 0x0, @binary="4322594b04da53e219128bad1c4378c7c208"}]}]}, 0x38}}, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m22.463592612s ago: executing program 1 (id=472): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000000008000"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount(0x0, 0x0, 0x0, 0x2049012, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) 1m20.164782305s ago: executing program 6 (id=479): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_emit_ethernet(0x72, &(0x7f00000006c0)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @private1, [@hopopts={0x33}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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") socket(0x2c, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) 1m19.098752256s ago: executing program 1 (id=481): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000001040)={0x18, 0x0, {0x1, @dev, 'wg2\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) 1m18.455335379s ago: executing program 1 (id=482): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 1m18.390190774s ago: executing program 1 (id=483): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs, 0x6e) 1m16.752599207s ago: executing program 1 (id=486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_io_uring_setup(0x27f2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x481) 1m14.411667777s ago: executing program 6 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x3f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 1m13.167957144s ago: executing program 2 (id=496): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000018, &(0x7f0000000680)=ANY=[], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) 1m12.123457799s ago: executing program 6 (id=500): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000000008000"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(r1, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount(0x0, 0x0, 0x0, 0x2049012, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) 1m11.845793517s ago: executing program 2 (id=501): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x4004) 1m10.967654576s ago: executing program 2 (id=504): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00') getdents(r0, &(0x7f0000000080)=""/28, 0x1c) 1m10.270318834s ago: executing program 2 (id=505): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 1m10.068976731s ago: executing program 2 (id=506): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003380)=""/4096, 0x1000}], 0x1}, 0x0) 1m10.055864511s ago: executing program 6 (id=508): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 1m9.210463888s ago: executing program 6 (id=512): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r3 = syz_io_uring_setup(0x237, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) 1m8.380650269s ago: executing program 2 (id=515): syz_open_dev$usbmon(0x0, 0x7, 0x0) r0 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 1m7.81935409s ago: executing program 6 (id=518): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 23.454873372s ago: executing program 1 (id=486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_io_uring_setup(0x27f2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x481) 8.180306589s ago: executing program 0 (id=643): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 8.083612121s ago: executing program 7 (id=644): fcntl$getownex(0xffffffffffffffff, 0x10, 0xfffffffffffffffd) 7.933270527s ago: executing program 7 (id=645): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") futimesat(r0, 0x0, &(0x7f0000000380)) 7.814723143s ago: executing program 0 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)=',', 0x1) ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 7.351469424s ago: executing program 7 (id=647): syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x0) r0 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.284931071s ago: executing program 0 (id=648): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000cd40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x64942, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x34}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="00a3d9feb86e02e3b0bd5e574a822aa033060829d9f570706daaf7e64385f4c757c8c1509cbd06003c6d03000000ffdde116534a3e539068b679d93c646500b71c53966a788a93af70a9e8378a4dff15e4a14b5a4b6c14d2feff8ec15164ffffba586557115ae1b2470a06d956cae4ea3b76e646ef7b00f8bcbad4030fa2f87bae1c91858fdee78fd19866212b8aedf818fea039932b8d5f454cf4fa9f9c1c0bd1c3f8c02f1bc702d7359eb8be446f88b77ce92c3d943828ece9eef54e10c2b4d66fb887ed9e56e2fbf982ea3443c9c30d40c4dd067682187e224173e49a3d0700efeb8fc6570ce5feb7d4c9ab5c4cc09ba9ae6276845ff55c7fdaab25776edddef50000000064dadb122182564d38cae5597ef4d5a2bf63415fdfe0867dee339da4a49e99fcf977e3be588fb6a8e4ee0d5395982f374f3802e1cf12c5849a07af1ad1e9f1f52725eab00af283cbfbd18fdc8e1951ba26508eb3781117b3a5263e3671d0b9e5aedd4e9261654e7cd5213600a77f55f0ab706a787ac204fff298dc72be1e80389d8f55f42c3b92acaee0df6b6bea8459d98d7bdc8e99b33022a2474d5527b68ba085ce52bf894f86c0f0f2f76c1ffe1e7ecbf2f1d7f8de553ebd38a1ad1f67e43da56f853f594b16be3822b97389b248dd3079e41ce185206267e9f174fd6ba01f9cc52c465608000048d0ad524a70f1688d1f30ca729963f14d140bf06f606065187fef9b44e884699a5bda981b07000000000000009a74a84388dc82ed1ba29aba106b9f6e11ea249e4870494ede40f7bc48dc2a14669c1b94b32209f16b423a9274740b8f4e641d46a6f14f44e26c4b7d5422322a2f8d967532b133014da9c571ffc2664e0838391e0242bcacaa0c00358bdefaf2bc51dcf4a7673703b89cf213c3325c64493f3ed9866c4994c119363dec364813d2a1f3732323d6fde44b8178d35f936200a96118889bc34d1800779c82b877ba24d7aadec4abe72a3b5e9280cc12d3f3b60fa0163fc3ccdce18ced9a8ccf33122055f8870f804fb91d9f91ba8db505d020c01f532c9307117f34693dd535e1df52ccc94ba178aaf524117c214fa858d6da2f91c14ab5ea3080500366075694cf317cdad3e61d17bfa4490124e3616a0d581cf05cf2cecc0a9b83fe000000000000000000000000ed9111e3396fea123d15ff825b66e25945cb3fd6d31773af0634a155fe85159a643b064fba1135ff23d713431f3cf8587d8778f7eb1a02d155fb6185d105d26844d111c85fd6321fc4a9a368c04cd3f29a8badfb8a0152e7bb8b10a8e680292eb9ab00d3efd86111ca430dcfbf1910b235e636e99b615163989a3779e520b59d2e7db309a3710d5b11ae9c21ad7e4c7d000000000000000000000024aafb0479e8ea1ab8bfd97c2186a3a784ce996d63c42c31e3a211c284f7c0187429d7f01748d6f04519921b9d81a510de2ff2f21e7423328036d45adf7df57a0572a6dfba1e0e7dbed9aeebb7cd806f3685459be46dc69d314fd3ea633b1539f466c8d32a2e9392d1620656958900ffbf0c3f5139c03580f83516f02c1adbb6e16040f273456e982741fe40b3f6a3e9c8237f9da13572c209968b40dd6bf4fbb056d303698c74cdbd4c38c54e945e8e93ff946aa2a1fc940646fc7dbcb3455221cf6192c986eb7a087af45e68868f8495"], 0x1, 0x1cf, &(0x7f0000000780)="$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") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0eb010018000000000000000c0000000c000000020000000000000000000000000000000000faf9f11e452c3f0f215a85a41a3d4fd93e0f7f3b87b52571fa444f1f4887e15db8caf7d0898954c7c208d24467ed3cdd152f72eec259d7123af01a0abf82e587140cbe3082656339df09f5d00d348e963d8b67eaa91f429bf946aced7e32278aab325bdcc44223a8c89e544d52109460f3ceec2b6d2f79f52e6779218c9a0df61e8ca23d89f13313e31ca2344aba06eb4dc03b843532ed4cfff687555000"/209], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sg0, 0x0, &(0x7f00000001c0)='./file2\x00') r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x2}, 0x1}, 0x18) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000a00)=""/187, 0xbb, 0x0, 0x0, 0x2}}, 0x48) 6.284610227s ago: executing program 7 (id=649): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 6.095901522s ago: executing program 3 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x28, 0x0, 0x483, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 5.046417261s ago: executing program 3 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)=',', 0x1) 4.756588765s ago: executing program 7 (id=652): madvise(&(0x7f0000569000/0x4000)=nil, 0x4000, 0xc) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000000540)=""/102400, 0x19000) socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) 4.533550843s ago: executing program 0 (id=653): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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") socket(0x2c, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) 3.882635472s ago: executing program 3 (id=654): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000000008000"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount(0x0, 0x0, 0x0, 0x2049012, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) 2.994839129s ago: executing program 7 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1508, &(0x7f0000007200)="$eJzs3Au8TtXWMPAx5pyLTdKT5JY55lg8yWWSJLkk5JIkSZLklpAkSRKSW25JSELuSe4hucVO7vf7PUmOJElCQpL5/VTn9Z6393z1ved8n3O+Pf6/32KOvZ4xnrGesfd+1lq/vfc37QdVrlulQm1mhn8I/vpfNwBIAYC+AHANAEQAUDxL8SyX9mfQ2O0fexLxz/XQ1CvdgbiSZP5pm8w/bZP5p20y/7RN5p+2yfzTNpl/2ibzFyIt2zIt57Wypd3tz9//d//73XL//9+QvP//f+tPfaXJ/NM2mX/aJvNP22T+aZvMP22T+adtMv+0TeYvRFp2pe8//xtsf32prnQff7BF/6O8K/vZJ4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAirTgXLjMA8Nf1le5LCCGEEEIIIYQQ/zwh/ZXuQAghhBBCCCGEEP/3IYDRYCCCdJAeUiADZISrIBNcDZnhGkjAtZAFroOscD1kg+yQA3JCLrgBcoMFAgcMMeSBvJCEGyEf3AT5oQAUhELgoTAUgZuhKNwCxeBWKA6zFwLcDiWhFJSGMnAHlIU7oRyUhwpwF1SESlAZqsDdUBXugWpwL1SH+6AG3A814QGoBQ9CbXgI6sDDUBcegXrwKNSHBtAQGkHj/1H+i9AZXoIu0BW6QXfoAS9DT+gFvaEP9IVXoB+8Cv3hNRgAA2EQvA6D4Q0YAm/CUBgGw+EtGAEjYRSMhjEwFsbB2zAe3oEJ8C5MhEkwGabAVJgG0+E9mAEzYRa8D7PhA5gDc2EezIcF8CEshEWQCh/BYvgYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEXbC7/B74BPbCp7APPoP98Pn/Yf5Z+Nv8DggIqFChQYPpMB2mYApmxIyYCTNhZsyMCUxgFsyCWTErZsNsmANzYC7MhbkxNxISMjLmwTyYxCTmw3yYH/NjQSyIHj0WwSJYFG/BYlgMi2NxLIElsCSWwlJYBstgWSyL5bAcVrh9LgBWxMpYGe/Gu/EerIbVsDpWxxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHhtgQG2NjbIJNsCk2xebYHFtgC2yJLbEVtsLW2BrbYBtsi22xHbbD9tgeO2BH7Igv4ov4Er6EXbGi6o49sAf2xJ7YG/tgH3wF++Gr+Cq+hgNwIA7C1/F1fAOH4BkcisNwOA7HsmokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxPdxNn6AH+BcnIvzcQEuwIW4CFMxFRfjWVyCS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fibtyNn+An+Cl+igNwP+7HA3gAD+JBPISH8DAexiN4ZOtVAHgMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/VVnd0F1g4AdYlRRqVT6VSKSlEZVUaVSWVSmVVmlVAJlUVlUVlVVpVNZVM5VA6VS+VSuVVuRYoUq1jlUXlUUiVVPpVP5Vf5VUFVUHnlVRFVRBVVRVUxVUwVV7epEup2VVKVUs18GVVGlVXNfTlVXlVQFVRFVUlVVlVUFVVVVVXVVDVVXVVXNVQNVVM9oGqp7tgbH1KXJlNXDcR6ahDWVw1UQ9VIvYGPqSZqCDZVzVRz9YQahkOxpWriW6mnVWs1CtuoZ9VofE61U2OxvXpBdVAdVSf1ouqsmvouqquaiN1VDzUFe6peqrfqo2ZgJXVpYpXVa2qAGqgGqdfVfHxDDVFvqqFqmBqu3lIj1Eg1So1WY9RYNU69rcard9QE9a6aqCapyWqKmqqmqenqPTVDzVSz1PtqtvpAzVFz1Tw1Xy1QH6qFapFKVR+pxepjtUQtVcvUcrVCrVSr1Gq1Rq1V69R6tUFtVJvUZrVFbVXb1Ha1Q+1Uu9RutUd9ovaqT9U+9Znarz5XB9Rf1EH1hTqkvlSH1VfqiPpaHVXfqGPqW3VcdVUn1El1Sn2vTqsf1Bl1Vp1TP6rz6id1Qf2sLqqgQKNWWmujI51Op9cpOoPOqK/SmfTVOrO+Rif0tTqLvk5n1dfrbDq7zqFz6lz6Bp1bW03aadaxzqPz6qS+UefTN+n8uoAuqAtprwvrIvpmXVTfoovpW3VxfZsuoW/XJXUpXVqX0XfosvpOXU6X1xX0XbqirqQr6yr6bl1V36Or6Xt1dX2frqHv1zX1A7qWflDX1g/pOvphXVc/ouvpR3V93UA31I10Y/2YbqIf1011M91cP6Fb6Cd1S/2UbqWf1q31M7qNfla31c/pdvp53V6/oDvojrqT/llf1EF30V11N91d99Av6566l+6t++i++hXdT7+q++vX9AA9UA/Sr+vB+g09RL+ph+pherh+S4/QI/UoPVqP0WP1OP22Hq/f0RP0u3qinqQn6yl6qp6me/9WadafyH/nv8nv/8uzb9Zb9Fa9TW/XO/ROvUvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0Sf2j/l6f1j/oM/qsPqt/1Of1eX3ht9cADBpltDEmMulMepNiMpiM5iqTyVxtMptrTMJca7KY60xWc73JZrKbHCanyWVuMLmNNWScYRObPCavSZobTT5zk8lvCpiCppDxprApYm7+h/P/Tn/LJ/968mIam8amiWlimpqmprlpblqYFqalaWlamVamtWlt2pg2pq1pa9qZdqa9aW86mA6mk+lkOpvOpguC6Wa6mR7mZdPT9DK9TR/T17xi+pl+pr/pbwaYAWaQGWQGm8FmiBlihpqhxgDACDPCjDKjzBgzxowz48x4M95MMBPMRDPRTDaTzVQz1Uw3080MM8PMMrPMbDPbzDFzzDwzzywwC8xCs9CkmlSz2Cw2S8xSs9QsN8vNSrPSrDarzVqz1qw3681Gs9EsMVvMFrPNbDM7zA6zy+wye8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J8wJc8qcMqfNaXPGnDHnzDlz3pw3F8wFc9FcvHTaF6lIRSYyUbooXZQSpUQZo4xRpihTlDnKHCWiRJQlyhJlja6PskXZoxxRzihXdEOUO7IRRS7iKI7yRHmjZHRjlC+6KcofFYgKRoUiHxWOikQ3R0WjW6Ji0a1R8ei2qER0e1QyKhWVjspEd0RlozujclH5qEJ0V1QxqhRVjqpEd0dVo3uiatG9UfXovqhGdH9UM3ogqhU9GNWOHorqRA9HdaNHonrRo1H9qEHUMGoUNf6n1g/hTPbHfRfb1aaH7raHfdn2tL1sb9vH9rWv2H72VdvfvmYH2IF2kH3dDrZv2CH2TTvUDrPD7Vt2hB1pR9nRdowda8fZt+14+46dYN+1E+0kO9lOsVPtNDvdvmdn2Jl2ln3fzrYf2Dl2rp1n59sF9kO70C6yqfYju9h+bJfYpXaZXW5X2JV2lV1t19i1dp1dbzfYjXaT3Wy32K12m91ud9iddpfdbffYT+xe+6ndZz+z++3n9oBN+e38/kt72H5lj9iv7VH7jT1mv7XH7Xf2hD1pT9nv7Wn7gz1jz9pz9kd73v5kL9if7UUbLp3cX3p7J0OG0lE6SqEUykgZKRNlosyUmRKUoCyUhbJSVspG2SgH5aBclItyU266hIkpD+WhJCUpH+Wj/JSfClJB8uSpCBWholSUilExKk7FqQSVoJJUkkpTabqD7qA76U4qT+XpLrqLKlElqkJVqCpVpWpUjapTdapBNagm1aRaVItqU22qQ3WoLtWlelSP6lN9akgNqTE1pibUhJpSU2pOzakFtaCW1JJaUStqTa2pDbWhttSW2lE7ak/tqQN1oE7UiTpTZ+pCXagbdaMe1IN6Uk/qTb2pL/WlftSP+lN/GkADaBANosE0mIbQEBpKw2g4vUUjaCSNotE0hsbSOBpH42k8TaAJNJEm0mSaTFNpKk2n6TSDZtAsmkWzaTbNoTk0j+bRAlpAC2khpVIqLabFtISW0DJaRitoBa2iVbSG1tA6WkcbaANtok20hbbQNtpGO2gH7aJdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kQKluAwuo7vKZXJXu8zuGvdf4xwup8vlbnC5nXXZXPa/ick5l98VcAVdIeddYVfE3fy7uKQr5Uq7Mu4OV9bd6cr9Lq66ZsevP4ju7nNV3N2uqrvHVXP3uuruPlfD3e9qukdcLfeoq+0auDqukavrHnH13KOuvmvgGrpGroV70rV0T7lW7mnX2j3zu3ihW+TWuLVunVvv9rpP3Tn3ozvqvnHn3U+ui+vq+rpXXD/3quvvXnMD3MDfxcPdW26EG+lGudFujBv7u3iym+KmumluunvPzXAzfxcvcB+62S7VzXFz3Tw3/5f4Uk+p7iO32H3slrilbplb7la4lW6VW/0fvS53G90mt9ntcZ+4bW672+F2ul1u9y/xpePY5z5z+93n7oj72h10X7hD7pg77L76Jb50fMfct+64+86dcCfdKfe9O+1+cGfc2V+O/9Kxf+9+dhddcMDIijUbjjgdp+cUzsAZ+SrOxFdzZr6GE3wtZ+HrOCtfz9k4O+fgnJyLb+DcbJnYMXPMeTgvJ/lGzsc3cX4uwAW5EHsuzEX4Zi7Kt3AxvpWL821cgm/nklyKS3MZvoPL8p1cjstzBb6LK3IlrsxV+G6uyvdwNb6Xq/N9XIPv55r8ANfiB7k2P8R1+GGuy49wPX6U63MDbsiNuDE/xk34cW7Kzbg5P8Et+EluyU9xK36aW/Mz3Iaf5bb8HLfj57k9v8AduCN34he5M7/EXbgrd+Pu3INf5p7ci3tzH+7Lr3A/fpX782s8gAfyIH6dB/MbPITf5KE8jIfzWzyCR/IoHs1jeCyP47d5PL/DE/hdnsiTeDJP4ak8jafzezyDZ/Isfp9n8wc8h+fyPJ7PC/hDXsiLOJU/4sX8MS/hpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI23M/JO3sW7eQ9/wnv5U97Hn/F+/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kiB4YYYxXr2MRRnC5OH6fEGeKM8VVxpvjqOHN8TZyIr42zxNfFWePr42xx9jhHnDPOFd8Q545tTLGLOY7jPHHeOBnfGOeLb4rzxwXignGh2MeF4yLxzXHR+Ja4WHxrXDy+LS4R3x6XjEvFj9xXJr4jLhvfGZeLy8cV4rviinGluHJcJb47rhrfE1eL742rx/fFxeL745rxA3Gt+MG4dvxQXCd+OK4bPxLXix+N68cN4oZxo7hx/FjcJH48bho3i5vHT8Qt4ifjlvFTcav46bh1/Mwf7u8Wd497xC/HL8ch3KvnJecnFyQ/TC5MLkqmJj9KLk5+nFySXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNycDKFKevDoldfe+Min8+l9is/gM/qrfCZ/tc/sr/EJf63P4q/zWf31PpvP7nP4nD6Xv8Hn9taTd5597PP4vD7pb/T5/E0+vy/gC/pC3vvCvohv5Bv7xr6Jf9w39c18c/+Ef8I/6Z/0T/mn/NO+tX/Gt/HP+rb+Od/OP++f9y/4Dr6j7+Rf9J39S76L7+q7+W6+h+/he/qevrfv7fv6vr6f7+f7+/5+gB/gB/lBfrAf7If4IX6oH+qH++F+hB/hR/lRfowf48f5cX68H+8n+Al+op/oJ/vJfqqf6qf76X6Gn+Fn+Vl+dv7Zfo6f4+f5eX6BX+AX+oU+1af6xX6xX+KX+GV+mV/hV/hVfpVf49f4dX6d3+A3+E1+k9/it/htfpvf4Xf4XX6X3+P3+L1+r9/n9/n9fr8/4A+cC/6gP+S/9If9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiVSEx8lFic+TixJLE0sSyxPrEisTIRww7Y45Al5QzLcGPKFm0L+UCAUDIWCD4VDkXBzKBpuCcXCraF4uC2UCLeHkqFUKB0eDfVDg9AwNAqNw2OhSXg8NA3NQvPwRGgRngwtw1OhVXg6tA7PhDbh2dA2PBfahedD+/BC6BA6hk7hxdA5vBS6BB26he6hR3g59Ay9Qu/QJ/QNr4R+4dXQP7wWBoSBYVB4PQwOb4Qh4c0wNAwLw8NbYUQYGUaF0WFMGBvGhbfD+PBOmBDeDRPDpDA5TAlTw7QwPbwXZoSZYVZ4P8wOH4Q5YW6YF+aHBeHDsDAsCqnho7A4fByWhKVhWVgeIGVlWBVWhzVhbVgX1ocNYWPYFDaHLWFr2Ba2hx1hZ9gVdoc94ZOwN3wa9oXPwv7weTgQ/hIOhi/CofBlOBy+CkfC1+Fo+CYcC9+G4+G7cCKcDKfC9+F0+CGcCWfDufBjOB9+ChfCz+Gi/M6aEEIIIcSfov9gf/e/idR//Kt++0gPALh6e87D/7Xmhmy/rnupXC0SAPB01/YP/XWrWLFbt26/PXaJhijvXABIXM5PB5fjpdAcnoRW0AyK/rf99VIdz/Mf1E/eBpDxP+WkwOX4cv1b/k79kbP/sP5cgPx5L+dkgMvx5frFflc7+qV+9iZ/UD/DF+MAmv6nvExwOb5cvwg8Ds9Aq795pBBCCCGEEEII8ateqnTbP7q+vXR9nstczkkPl+M/uj4XQgghhBBCCCHElfdcx05PPdaqVbO2f2dR/u/vkkVaWaT712jj334B8C/Rxp9bXOnvTEIIIYQQQoh/tssn/Ve6EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu36f/HnxK70MQohhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBX2v8KAAD//6WkMbQ=") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 322.709205ms ago: executing program 0 (id=656): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) 299.539178ms ago: executing program 3 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 62.789574ms ago: executing program 3 (id=658): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe) connect$bt_l2cap(r1, 0x0, 0x0) 62.197922ms ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000000008000"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) futimesat(r1, 0x0, &(0x7f0000000380)) 0s ago: executing program 3 (id=660): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev}}, {{@in=@remote}, 0x0, @in=@dev}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="070000000000000000000516000018"], 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004041) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): hange from 0 to 8 [ 215.251656][ T6908] loop2: detected capacity change from 0 to 256 [ 215.377536][ T5966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.388738][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 215.423244][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 215.480699][ T6908] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 215.827324][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 216.159600][ T6925] can0: slcan on ttyS3. [ 216.796665][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 216.808603][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.821837][ T5966] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.832160][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.840235][ T5966] usb 4-1: Product: syz [ 216.844817][ T5966] usb 4-1: Manufacturer: syz [ 216.849434][ T5966] usb 4-1: SerialNumber: syz [ 218.062860][ T6907] can0 (unregistered): slcan off ttyS3. [ 219.123911][ T5966] usb 4-1: config 0 descriptor?? [ 219.130195][ T5966] usb 4-1: can't set config #0, error -71 [ 219.864471][ T6939] fuse: Bad value for 'fd' [ 220.323032][ T6940] pim6reg1: entered promiscuous mode [ 220.328475][ T6940] pim6reg1: entered allmulticast mode [ 220.460141][ T5966] usb 4-1: USB disconnect, device number 2 [ 220.526089][ T29] audit: type=1326 audit(1731894131.413:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.3.229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8de097e719 code=0x0 [ 221.028463][ T6953] loop2: detected capacity change from 0 to 8 [ 222.905917][ T6960] loop4: detected capacity change from 0 to 512 [ 222.920086][ T6960] EXT4-fs: Ignoring removed orlov option [ 223.144474][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.198288][ T6960] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.280611][ T6968] loop3: detected capacity change from 0 to 1024 [ 224.052301][ T6968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.525972][ T29] audit: type=1804 audit(1731894136.203:23): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.235" name="/newroot/36/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 225.755036][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.798847][ T29] audit: type=1800 audit(1731894136.683:24): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.234" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 226.009432][ T6986] loop5: detected capacity change from 0 to 512 [ 226.107480][ T6986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.112832][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.133875][ T6986] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.207670][ T6993] loop0: detected capacity change from 0 to 256 [ 226.273051][ T6993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 226.443149][ T7000] loop4: detected capacity change from 0 to 512 [ 226.454015][ T7000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.252055][ T7006] can0: slcan on ttyS3. [ 228.072436][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 228.104427][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 228.153813][ T7000] EXT4-fs (loop4): 1 truncate cleaned up [ 228.182674][ T7000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.232270][ T6991] can0 (unregistered): slcan off ttyS3. [ 228.443736][ T7015] loop5: detected capacity change from 0 to 1024 [ 228.870866][ T29] audit: type=1804 audit(1731894139.753:25): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.241" name="/newroot/49/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 229.284169][ T7015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.817040][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.183545][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.190852][ T7035] loop2: detected capacity change from 0 to 1024 [ 231.703820][ T7035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.776568][ T29] audit: type=1804 audit(1731894142.663:26): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.250" name="/newroot/44/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 232.110936][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.114472][ T7047] loop5: detected capacity change from 0 to 512 [ 232.277041][ T7051] loop3: detected capacity change from 0 to 1024 [ 233.267819][ T7051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.298075][ T29] audit: type=1804 audit(1731894144.183:27): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.251" name="/newroot/40/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 233.359634][ T7047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.452173][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.467329][ T7047] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.632005][ T7063] pim6reg1: entered promiscuous mode [ 234.637665][ T7063] pim6reg1: entered allmulticast mode [ 236.790073][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.887689][ T7076] loop3: detected capacity change from 0 to 512 [ 237.003130][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 237.061397][ T7076] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.254666][ T7083] loop1: detected capacity change from 0 to 512 [ 239.082693][ T7083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.170927][ T7083] EXT4-fs (loop1): 1 truncate cleaned up [ 239.177550][ T7083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.295419][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 239.509572][ T964] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 239.701367][ T964] usb 1-1: Using ep0 maxpacket: 16 [ 239.800720][ T29] audit: type=1804 audit(1731894150.643:28): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.259" name="/newroot/36/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 239.943357][ T964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.025106][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.087223][ T964] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.125050][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.232308][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 240.243210][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.271439][ T964] usb 1-1: Product: syz [ 240.291409][ T964] usb 1-1: Manufacturer: syz [ 240.480688][ T964] usb 1-1: SerialNumber: syz [ 240.513363][ T964] usb 1-1: config 0 descriptor?? [ 240.525934][ T964] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.535755][ T964] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 242.291635][ T964] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 242.539690][ T964] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 242.553175][ T964] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 242.560307][ T964] em28xx 1-1:0.0: No AC97 audio processor [ 242.712794][ T7115] loop2: detected capacity change from 0 to 8 [ 243.684054][ T964] usb 1-1: USB disconnect, device number 3 [ 243.690622][ T964] em28xx 1-1:0.0: Disconnecting em28xx [ 243.700066][ T964] em28xx 1-1:0.0: Freeing device [ 243.780756][ T7119] loop1: detected capacity change from 0 to 512 [ 243.795778][ T7119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.821407][ T5956] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.917758][ T7119] EXT4-fs (loop1): 1 truncate cleaned up [ 243.934522][ T7119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.067224][ T7133] loop0: detected capacity change from 0 to 1024 [ 244.957297][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 244.992425][ T5956] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.232790][ T5956] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.262367][ T5956] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.275478][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.293266][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.299842][ T29] audit: type=1804 audit(1731894155.943:29): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.268" name="/newroot/38/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 245.312300][ T5956] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.342702][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.355876][ T5956] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.374683][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.496276][ T5956] usb 6-1: config 0 descriptor?? [ 245.689494][ T29] audit: type=1804 audit(1731894156.553:30): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.269" name="/newroot/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 245.750111][ T29] audit: type=1804 audit(1731894156.553:31): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.269" name="/newroot/41/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 245.783799][ T5956] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.833267][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.141285][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.151061][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.371569][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.383749][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.676493][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.690846][ T5146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 246.700597][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.508728][ T25] usb 6-1: USB disconnect, device number 4 [ 249.419137][ T5146] Bluetooth: hci6: command tx timeout [ 250.195121][ T7166] loop3: detected capacity change from 0 to 1024 [ 250.274175][ T7166] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 251.455351][ T7179] loop0: detected capacity change from 0 to 1024 [ 251.502485][ T5146] Bluetooth: hci6: command tx timeout [ 252.612756][ T25] usblp0: removed [ 252.871383][ T964] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 252.989589][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 253.041400][ T964] usb 3-1: Using ep0 maxpacket: 16 [ 253.053733][ T964] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 253.077144][ T964] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 253.098482][ T964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.140158][ T964] usb 3-1: Product: syz [ 253.151687][ T964] usb 3-1: Manufacturer: syz [ 253.171306][ T964] usb 3-1: SerialNumber: syz [ 253.272135][ T964] usb 3-1: config 0 descriptor?? [ 253.324913][ T964] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 253.365488][ T7179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.469691][ T7191] loop5: detected capacity change from 0 to 8 [ 254.170035][ T5146] Bluetooth: hci6: command tx timeout [ 254.170557][ T964] usb 3-1: Detected FT232R [ 254.255641][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.289442][ T964] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 254.417290][ T964] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 254.475134][ T964] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 254.536653][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.582108][ T964] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 254.603506][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.624264][ T964] usb 3-1: USB disconnect, device number 7 [ 254.631612][ T7146] bridge_slave_0: entered allmulticast mode [ 254.660053][ T964] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.660151][ T7146] bridge_slave_0: entered promiscuous mode [ 254.703710][ T7197] loop5: detected capacity change from 0 to 128 [ 254.751953][ T964] ftdi_sio 3-1:0.0: device disconnected [ 254.757092][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.780907][ T7197] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.814352][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.825118][ T7146] bridge_slave_1: entered allmulticast mode [ 254.866288][ T7197] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.933672][ T7146] bridge_slave_1: entered promiscuous mode [ 255.069383][ T7202] loop0: detected capacity change from 0 to 1024 [ 255.220126][ T964] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.254715][ T7202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.349809][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.356552][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.380895][ T29] audit: type=1804 audit(1731894166.193:32): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.285" name="/newroot/45/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 255.960866][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.974209][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.004514][ T29] audit: type=1804 audit(1731894166.203:33): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.285" name="/newroot/45/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 256.538811][ T5146] Bluetooth: hci6: command tx timeout [ 256.542291][ T964] usb 3-1: Using ep0 maxpacket: 16 [ 256.588567][ T964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 256.687683][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.698479][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.712800][ T7146] team0: Port device team_slave_0 added [ 256.756386][ T5855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.777942][ T7146] team0: Port device team_slave_1 added [ 256.840670][ T964] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.850027][ T964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.878170][ T964] usb 3-1: Product: syz [ 256.911302][ T964] usb 3-1: Manufacturer: syz [ 256.928994][ T964] usb 3-1: SerialNumber: syz [ 256.956473][ T964] usb 3-1: config 0 descriptor?? [ 257.008327][ T964] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.038313][ T964] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 257.065088][ T7220] loop5: detected capacity change from 0 to 512 [ 257.118384][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.139239][ T7220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.197206][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.311520][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.313397][ T7220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.325106][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.466964][ T7226] fuse: Bad value for 'fd' [ 257.586729][ T7220] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.196520][ T964] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 258.219828][ T964] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 258.238144][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.272837][ T964] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 258.333060][ T7220] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 258.474196][ T964] em28xx 3-1:0.0: No AC97 audio processor [ 258.722825][ T7220] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 259.298424][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.279473][ T7220] EXT4-fs (loop5): This should not happen!! Data will be lost [ 260.279473][ T7220] [ 260.307329][ T7220] EXT4-fs (loop5): Total free blocks count 0 [ 260.461549][ T7220] EXT4-fs (loop5): Free/Dirty block details [ 260.495685][ T7220] EXT4-fs (loop5): free_blocks=39626 [ 260.518509][ T7220] EXT4-fs (loop5): dirty_blocks=1 [ 260.541569][ T7220] EXT4-fs (loop5): Block reservation details [ 260.569125][ T964] usb 3-1: USB disconnect, device number 8 [ 260.576952][ T7220] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 260.602706][ T964] em28xx 3-1:0.0: Disconnecting em28xx [ 260.648679][ T964] em28xx 3-1:0.0: Freeing device [ 260.904904][ T7246] loop2: detected capacity change from 0 to 512 [ 260.987000][ T7146] hsr_slave_0: entered promiscuous mode [ 261.006152][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.021613][ T5956] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 261.041960][ T7146] hsr_slave_1: entered promiscuous mode [ 261.174982][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.192148][ T7146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.197278][ T7246] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.199735][ T7146] Cannot create hsr debugfs directory [ 261.311400][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 261.318524][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.330596][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.344598][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.354115][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.362547][ T5956] usb 4-1: Product: syz [ 261.366753][ T5956] usb 4-1: Manufacturer: syz [ 261.372534][ T5956] usb 4-1: SerialNumber: syz [ 261.379878][ T5956] usb 4-1: config 0 descriptor?? [ 261.502490][ T5956] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.550553][ T5956] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 264.157553][ T5956] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 264.165012][ T5956] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 264.173404][ T5956] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 264.180381][ T5956] em28xx 4-1:0.0: No AC97 audio processor [ 264.469127][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 265.191499][ T7267] loop1: detected capacity change from 0 to 8 [ 266.078764][ T7146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.294546][ T7271] loop5: detected capacity change from 0 to 512 [ 266.330659][ T7146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.414106][ T7271] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 266.498980][ T7146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.553954][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 266.603439][ T7146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.702159][ T7280] loop1: detected capacity change from 0 to 512 [ 266.775666][ T7280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.791080][ T25] usb 4-1: USB disconnect, device number 3 [ 266.798643][ T25] em28xx 4-1:0.0: Disconnecting em28xx [ 266.853495][ T25] em28xx 4-1:0.0: Freeing device [ 266.892107][ T7271] EXT4-fs (loop5): 1 truncate cleaned up [ 266.935981][ T7271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.988399][ T7280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.077576][ T7280] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.804915][ T7273] loop2: detected capacity change from 0 to 40427 [ 267.860305][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.878767][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.915221][ T7146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.927488][ T7146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.970782][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.978012][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.988026][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.995346][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.293414][ T7273] F2FS-fs (loop2): invalid crc value [ 268.347952][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.380809][ T7273] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.690650][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.698690][ T7273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 268.714076][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.994313][ T7306] loop3: detected capacity change from 0 to 512 [ 270.116345][ T7306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.201838][ T5845] syz-executor: attempt to access beyond end of device [ 270.201838][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.250018][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 270.712779][ T7320] pim6reg1: entered promiscuous mode [ 270.718217][ T7320] pim6reg1: entered allmulticast mode [ 272.017392][ T7306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.081462][ T7306] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.288168][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.663342][ T7331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.856034][ T7022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.900117][ T7339] loop5: detected capacity change from 0 to 256 [ 273.093860][ T7339] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 273.134009][ T7022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.161566][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 274.401568][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 274.413370][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.536207][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.586683][ T7355] loop3: detected capacity change from 0 to 8 [ 275.642894][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.682691][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.827428][ T5905] usb 2-1: Product: syz [ 275.833488][ T5905] usb 2-1: Manufacturer: syz [ 275.838749][ T5905] usb 2-1: SerialNumber: syz [ 275.858269][ T5905] usb 2-1: config 0 descriptor?? [ 275.944434][ T5905] usb 2-1: can't set config #0, error -71 [ 276.011784][ T5905] usb 2-1: USB disconnect, device number 2 [ 276.122974][ T7022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.460528][ T7022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.542160][ T7372] loop0: detected capacity change from 0 to 8 [ 277.677809][ T7146] veth0_vlan: entered promiscuous mode [ 277.683134][ T7146] veth1_vlan: entered promiscuous mode [ 277.697163][ T7146] veth0_macvtap: entered promiscuous mode [ 277.699885][ T7146] veth1_macvtap: entered promiscuous mode [ 277.726836][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.726876][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.726893][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.726911][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.726925][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.726943][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.726958][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.726976][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.726990][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.727008][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.727023][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.727041][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.728406][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.730709][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730733][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730748][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730767][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730781][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730799][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730813][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730831][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730845][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730871][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.730885][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.730903][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.732343][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.735171][ T7146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.735254][ T7146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.735291][ T7146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.735328][ T7146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.822871][ T7377] loop3: detected capacity change from 0 to 512 [ 277.841554][ T7377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.888820][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.888919][ T7377] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.032195][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 278.107490][ T7377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 278.107736][ T7377] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 278.107769][ T7377] EXT4-fs (loop3): This should not happen!! Data will be lost [ 278.107769][ T7377] [ 278.107790][ T7377] EXT4-fs (loop3): Total free blocks count 0 [ 278.107810][ T7377] EXT4-fs (loop3): Free/Dirty block details [ 278.107829][ T7377] EXT4-fs (loop3): free_blocks=39626 [ 278.107859][ T7377] EXT4-fs (loop3): dirty_blocks=1 [ 278.107877][ T7377] EXT4-fs (loop3): Block reservation details [ 278.107895][ T7377] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 278.132421][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.190626][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 278.540108][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.670635][ T7383] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 279.161908][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 279.161941][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.188994][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.189026][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.189046][ T8] usb 3-1: Product: syz [ 279.189060][ T8] usb 3-1: Manufacturer: syz [ 279.189075][ T8] usb 3-1: SerialNumber: syz [ 279.192687][ T8] usb 3-1: config 0 descriptor?? [ 279.203937][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.203983][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 280.710569][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 280.710909][ T8] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 280.711898][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 280.711916][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 280.889098][ T7390] loop3: detected capacity change from 0 to 256 [ 280.937927][ T7390] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 282.168690][ T29] audit: type=1326 audit(1731894193.053:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6bc97e719 code=0x0 [ 282.197923][ T5903] usb 3-1: USB disconnect, device number 9 [ 282.200476][ T5903] em28xx 3-1:0.0: Disconnecting em28xx [ 282.209437][ T5903] em28xx 3-1:0.0: Freeing device [ 282.588234][ T7022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.599745][ T7022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.603332][ T7022] bond0 (unregistering): Released all slaves [ 282.623673][ T7398] can0: slcan on ttyS3. [ 282.692277][ T7398] can0 (unregistered): slcan off ttyS3. [ 282.889174][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.889203][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.331331][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.202921][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 284.445400][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 284.450152][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.450193][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.453324][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.453360][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.453387][ T5906] usb 4-1: Product: syz [ 284.453408][ T5906] usb 4-1: Manufacturer: syz [ 284.453428][ T5906] usb 4-1: SerialNumber: syz [ 284.456014][ T5906] usb 4-1: config 0 descriptor?? [ 284.459709][ T5906] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.459747][ T5906] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 284.521320][ T5956] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 284.671297][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 284.674198][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.674238][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.676198][ T5956] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.676234][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.676261][ T5956] usb 1-1: Product: syz [ 284.676282][ T5956] usb 1-1: Manufacturer: syz [ 284.676302][ T5956] usb 1-1: SerialNumber: syz [ 284.699142][ T5956] usb 1-1: config 0 descriptor?? [ 284.702637][ T5956] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.702678][ T5956] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 285.013971][ T7430] loop6: detected capacity change from 0 to 8 [ 285.217251][ T5906] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 285.221558][ T5906] em28xx 4-1:0.0: Config register raw data: 0x56 [ 285.567320][ T5906] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 285.567441][ T5906] em28xx 4-1:0.0: No AC97 audio processor [ 285.598885][ T5906] usb 4-1: USB disconnect, device number 4 [ 285.621116][ T5906] em28xx 4-1:0.0: Disconnecting em28xx [ 285.651571][ T5906] em28xx 4-1:0.0: Freeing device [ 285.755355][ T5956] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 285.755959][ T5956] em28xx 1-1:0.0: Config register raw data: 0x56 [ 285.973632][ T5956] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 285.973663][ T5956] em28xx 1-1:0.0: No AC97 audio processor [ 285.978423][ T5956] usb 1-1: USB disconnect, device number 4 [ 285.979277][ T5956] em28xx 1-1:0.0: Disconnecting em28xx [ 285.984639][ T5956] em28xx 1-1:0.0: Freeing device [ 286.058422][ T7436] loop2: detected capacity change from 0 to 512 [ 286.087996][ T7436] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.095111][ T7022] hsr_slave_0: left promiscuous mode [ 286.096046][ T7022] hsr_slave_1: left promiscuous mode [ 286.097330][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.097418][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.105002][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.105373][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.155513][ T7436] EXT4-fs (loop2): 1 truncate cleaned up [ 286.156318][ T7436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.221989][ T5906] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.306042][ T7022] veth1_macvtap: left promiscuous mode [ 286.306321][ T7022] veth0_macvtap: left promiscuous mode [ 286.306523][ T7022] veth1_vlan: left promiscuous mode [ 286.306772][ T7022] veth0_vlan: left promiscuous mode [ 286.373456][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 286.431927][ T5906] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 286.432078][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.432181][ T5906] usb 7-1: Product: syz [ 286.432277][ T5906] usb 7-1: Manufacturer: syz [ 286.432372][ T5906] usb 7-1: SerialNumber: syz [ 286.524939][ T5906] usb 7-1: config 0 descriptor?? [ 287.798623][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.965001][ T7456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.120654][ T7460] loop0: detected capacity change from 0 to 256 [ 288.153614][ T7460] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 289.522920][ T7468] loop6: detected capacity change from 0 to 8 [ 290.428590][ T7471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.039558][ T7470] slcan: can't register candev [ 292.043916][ T7470] Falling back ldisc for ttyS3. [ 292.557142][ T7487] loop6: detected capacity change from 0 to 1024 [ 295.818705][ T7487] EXT4-fs: error -4 creating inode table initialization thread [ 295.819069][ T7487] EXT4-fs (loop6): mount failed [ 297.506792][ T29] audit: type=1326 audit(1731894208.393:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f3b97e719 code=0x0 [ 297.659343][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.661565][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.664882][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.667630][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.669149][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.669471][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.949925][ T7581] syz.6.355 uses obsolete (PF_INET,SOCK_PACKET) [ 298.256177][ T7022] team0 (unregistering): Port device team_slave_1 removed [ 298.340426][ T7022] team0 (unregistering): Port device team_slave_0 removed [ 298.890309][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 298.909089][ T5906] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 298.918420][ T5906] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 298.929756][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'. [ 300.387408][ T5859] Bluetooth: hci0: command tx timeout [ 301.562649][ T29] audit: type=1326 audit(1731894212.453:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bd377e719 code=0x0 [ 301.611972][ T5906] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 301.728261][ T5906] usb 7-1: USB disconnect, device number 2 [ 302.461482][ T5859] Bluetooth: hci0: command tx timeout [ 303.345466][ T7615] loop3: detected capacity change from 0 to 8 [ 304.199260][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 305.175802][ T5859] Bluetooth: hci0: command tx timeout [ 307.266548][ T5859] Bluetooth: hci0: command tx timeout [ 307.544978][ T7717] fuse: Bad value for 'fd' [ 308.156284][ T29] audit: type=1326 audit(1731894219.033:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.2.374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f3b97e719 code=0x0 [ 308.184658][ T7722] loop1: detected capacity change from 0 to 512 [ 308.349039][ T7722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 308.386834][ T7022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.389632][ T7722] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.591425][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.615818][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.655503][ T7575] bridge_slave_0: entered allmulticast mode [ 308.700266][ T7575] bridge_slave_0: entered promiscuous mode [ 308.708842][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.716678][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.724060][ T7575] bridge_slave_1: entered allmulticast mode [ 308.731307][ T7575] bridge_slave_1: entered promiscuous mode [ 308.765531][ T7733] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 309.673522][ T7022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.884800][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 309.925520][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.288617][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.600173][ T7022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.957665][ T7830] loop3: detected capacity change from 0 to 512 [ 313.014284][ T7830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.019375][ T7831] [U]  [ 313.152974][ T7838] loop2: detected capacity change from 0 to 512 [ 313.192509][ T7830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.219965][ T7830] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.231438][ T7838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.247015][ T7022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.865390][ T7575] team0: Port device team_slave_0 added [ 313.873670][ T7575] team0: Port device team_slave_1 added [ 313.909159][ T7838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.909265][ T7838] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.121978][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.122002][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.122031][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.548164][ T7849] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 314.555532][ T7849] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 314.555694][ T7849] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.555694][ T7849] [ 314.556057][ T7849] EXT4-fs (loop3): Total free blocks count 0 [ 314.556857][ T7849] EXT4-fs (loop3): Free/Dirty block details [ 314.556959][ T7849] EXT4-fs (loop3): free_blocks=39626 [ 314.557098][ T7849] EXT4-fs (loop3): dirty_blocks=15 [ 314.557194][ T7849] EXT4-fs (loop3): Block reservation details [ 314.557404][ T7849] EXT4-fs (loop3): i_reserved_data_blocks=15 [ 314.697040][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.697067][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.697099][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.140537][ T7850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 315.145555][ T7850] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 315.145621][ T7850] EXT4-fs (loop2): This should not happen!! Data will be lost [ 315.145621][ T7850] [ 315.145854][ T7850] EXT4-fs (loop2): Total free blocks count 0 [ 315.145905][ T7850] EXT4-fs (loop2): Free/Dirty block details [ 315.146057][ T7850] EXT4-fs (loop2): free_blocks=39626 [ 315.146107][ T7850] EXT4-fs (loop2): dirty_blocks=15 [ 315.146156][ T7850] EXT4-fs (loop2): Block reservation details [ 315.146202][ T7850] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 315.353451][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.472107][ T7857] netlink: 'syz.6.391': attribute type 10 has an invalid length. [ 315.674201][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.681627][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.715928][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.944024][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.951280][ T7857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.958769][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.965973][ T7857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.026676][ T7862] loop0: detected capacity change from 0 to 512 [ 316.030998][ T7857] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 316.329453][ T7862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 316.375108][ T7862] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.623918][ T7575] hsr_slave_0: entered promiscuous mode [ 316.737725][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.757404][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.007164][ T7575] hsr_slave_1: entered promiscuous mode [ 317.293843][ T7022] bridge_slave_1: left allmulticast mode [ 317.295938][ T7879] loop2: detected capacity change from 0 to 512 [ 317.311697][ T7022] bridge_slave_1: left promiscuous mode [ 317.323731][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.635405][ T7022] bridge_slave_0: left allmulticast mode [ 317.906627][ T7022] bridge_slave_0: left promiscuous mode [ 317.920645][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 317.980933][ T7889] loop6: detected capacity change from 0 to 512 [ 317.991472][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.041826][ T7879] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.106302][ T7889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.181371][ T7889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.212842][ T7889] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.263076][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 318.383565][ T7889] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 318.435518][ T7889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 318.447937][ T7889] EXT4-fs (loop6): This should not happen!! Data will be lost [ 318.447937][ T7889] [ 318.459627][ T7889] EXT4-fs (loop6): Total free blocks count 0 [ 318.481292][ T7889] EXT4-fs (loop6): Free/Dirty block details [ 318.534120][ T7889] EXT4-fs (loop6): free_blocks=39626 [ 319.315317][ T7889] EXT4-fs (loop6): dirty_blocks=1 [ 319.348479][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 319.409070][ T7889] EXT4-fs (loop6): Block reservation details [ 319.444846][ T7903] loop3: detected capacity change from 0 to 40427 [ 319.482121][ T7889] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 319.535735][ T7903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.586589][ T7903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 319.873435][ T7912] loop0: detected capacity change from 0 to 40427 [ 319.905034][ T7889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 320.111526][ T7912] F2FS-fs (loop0): Found nat_bits in checkpoint [ 320.223517][ T7912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 323.007407][ T5851] syz-executor: attempt to access beyond end of device [ 323.007407][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.107277][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.234749][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 323.331424][ T5853] syz-executor: attempt to access beyond end of device [ 323.331424][ T5853] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.349007][ T5853] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 323.751467][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 324.033571][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 324.046591][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.097273][ T5902] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.108629][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.126203][ T5902] usb 2-1: Product: syz [ 324.130621][ T5902] usb 2-1: Manufacturer: syz [ 324.143485][ T5902] usb 2-1: SerialNumber: syz [ 324.150876][ T5902] usb 2-1: config 0 descriptor?? [ 324.193978][ T5902] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.226731][ T7947] loop3: detected capacity change from 0 to 512 [ 324.229037][ T5902] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 324.235525][ T7947] EXT4-fs: Ignoring removed orlov option [ 324.317529][ T7022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.327430][ T7947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.340767][ T7947] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.355848][ T7022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.369926][ T7022] bond0 (unregistering): Released all slaves [ 324.552636][ T7945] net_ratelimit: 595 callbacks suppressed [ 324.552662][ T7945] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.628982][ T29] audit: type=1800 audit(1731894235.513:38): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.409" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 324.869405][ T5902] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 324.877812][ T5902] em28xx 2-1:0.0: Config register raw data: 0x56 [ 325.241887][ T5902] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 325.248916][ T5902] em28xx 2-1:0.0: No AC97 audio processor [ 325.261899][ T5902] usb 2-1: USB disconnect, device number 3 [ 325.269536][ T5902] em28xx 2-1:0.0: Disconnecting em28xx [ 325.285161][ T5902] em28xx 2-1:0.0: Freeing device [ 326.053650][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.538828][ T7965] loop3: detected capacity change from 0 to 40427 [ 326.610196][ T7965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 326.653993][ T7022] hsr_slave_0: left promiscuous mode [ 326.665858][ T7965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.846420][ T7022] hsr_slave_1: left promiscuous mode [ 326.877883][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.911745][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.958352][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.990682][ T7022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.130729][ T7022] veth1_macvtap: left promiscuous mode [ 328.143231][ T7022] veth0_macvtap: left promiscuous mode [ 328.189917][ T7022] veth1_vlan: left promiscuous mode [ 328.217744][ T7022] veth0_vlan: left promiscuous mode [ 328.662263][ T5853] syz-executor: attempt to access beyond end of device [ 328.662263][ T5853] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 328.684959][ T5853] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 329.027315][ T7967] loop0: detected capacity change from 0 to 40427 [ 329.164709][ T7967] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.296967][ T7967] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 329.741485][ T7022] team0 (unregistering): Port device team_slave_1 removed [ 329.854892][ T7022] team0 (unregistering): Port device team_slave_0 removed [ 330.533564][ T8001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.452182][ T7977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.417'. [ 331.498805][ T7977] tipc: Enabling of bearer rejected, failed to enable media [ 331.832525][ T8008] loop6: detected capacity change from 0 to 512 [ 331.839612][ T8008] EXT4-fs: Ignoring removed orlov option [ 331.916134][ T8008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.954179][ T8008] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.158875][ T7987] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 333.149459][ T29] audit: type=1800 audit(1731894244.033:39): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.425" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 333.169821][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.563829][ T7575] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.571075][ T7146] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.706496][ T7575] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.881441][ T7575] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.950860][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.244625][ T8041] loop6: detected capacity change from 0 to 8 [ 334.623926][ T7575] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.141237][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 335.153780][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 335.171237][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.245849][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 335.260750][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.284109][ T8] usb 3-1: Product: syz [ 335.288423][ T8] usb 3-1: Manufacturer: syz [ 335.321653][ T8] usb 3-1: SerialNumber: syz [ 336.117521][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.166346][ T8] usb 3-1: config 0 descriptor?? [ 336.218683][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.239838][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 336.354112][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.360816][ T8058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 336.389822][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.397018][ T7549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.464374][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.471614][ T7549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.684486][ T7575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.717689][ T7575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.802702][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 336.816763][ T8] em28xx 3-1:0.0: Config register raw data: 0x56 [ 337.011293][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 337.018144][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 337.037004][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 337.072230][ T8] usb 3-1: USB disconnect, device number 10 [ 337.091437][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 337.112520][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 337.142143][ T8] em28xx 3-1:0.0: Freeing device [ 337.211352][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 337.257871][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.390409][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.906121][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 338.013091][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.166542][ T25] usb 1-1: config 0 descriptor?? [ 338.182124][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 338.189074][ T5907] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 338.198525][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.216275][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.219412][ T5907] usb 2-1: config 0 descriptor?? [ 339.101508][ T8096] vlan2: entered promiscuous mode [ 339.212100][ T8096] vlan2: entered allmulticast mode [ 339.478683][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 339.479814][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 339.496962][ T25] usb 1-1: USB disconnect, device number 5 [ 339.967542][ T8100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.974668][ T8100] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 340.514577][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 340.514789][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 340.517035][ T5907] asix 2-1:0.0: probe with driver asix failed with error -71 [ 340.564856][ T5907] usb 2-1: USB disconnect, device number 4 [ 341.616784][ T8125] loop0: detected capacity change from 0 to 40427 [ 341.633378][ T8118] loop3: detected capacity change from 0 to 512 [ 341.698574][ T8118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.706100][ T8125] F2FS-fs (loop0): Found nat_bits in checkpoint [ 341.752358][ T8125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 341.926403][ T7575] veth0_vlan: entered promiscuous mode [ 341.932252][ T8118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.932376][ T8118] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.943124][ T7575] veth1_vlan: entered promiscuous mode [ 342.023010][ T8118] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 342.023193][ T8118] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 342.023228][ T8118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 342.023228][ T8118] [ 342.023250][ T8118] EXT4-fs (loop3): Total free blocks count 0 [ 342.023270][ T8118] EXT4-fs (loop3): Free/Dirty block details [ 342.023290][ T8118] EXT4-fs (loop3): free_blocks=39626 [ 342.023312][ T8118] EXT4-fs (loop3): dirty_blocks=1 [ 342.023331][ T8118] EXT4-fs (loop3): Block reservation details [ 342.023349][ T8118] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 342.050637][ T7575] veth0_macvtap: entered promiscuous mode [ 342.195717][ T7575] veth1_macvtap: entered promiscuous mode [ 343.106845][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.106878][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.106894][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.106914][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.106935][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.106954][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.106970][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.106989][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.107011][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.107029][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.108422][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.110803][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110831][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.110846][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110866][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.110881][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110900][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.110915][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110941][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.110961][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110980][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.642602][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.645155][ T7575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.645196][ T7575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.645224][ T7575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.645251][ T7575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.761224][ T8140] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 343.938758][ T5851] syz-executor: attempt to access beyond end of device [ 343.938758][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.940670][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 345.455331][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.455357][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.462345][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.471753][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.548776][ T8166] loop1: detected capacity change from 0 to 8 [ 348.025506][ T8179] fuse: Bad value for 'fd' [ 348.985262][ T29] audit: type=1326 audit(1731894259.873:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.0.463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6bc97e719 code=0x0 [ 349.159376][ T8187] loop3: detected capacity change from 0 to 8 [ 350.223656][ T8193] vlan3: entered promiscuous mode [ 350.228877][ T8193] vlan3: entered allmulticast mode [ 351.411713][ T8195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.469'. [ 351.794461][ T8209] loop1: detected capacity change from 0 to 512 [ 351.976224][ T29] audit: type=1400 audit(1731894262.823:41): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8205 comm="syz.3.473" [ 352.332558][ T8209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.546729][ T8209] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.895230][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 354.193988][ T8237] loop2: detected capacity change from 0 to 40427 [ 354.268860][ T8234] loop6: detected capacity change from 0 to 512 [ 354.295706][ T8237] F2FS-fs (loop2): Found nat_bits in checkpoint [ 354.382064][ T8237] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 354.382557][ T8234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.406070][ T8235] binder: 8225:8235 ioctl c0306201 20000200 returned -14 [ 354.527936][ T8248] siw: device registration error -23 [ 354.619601][ T8234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.643645][ T8234] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.335544][ T29] audit: type=1326 audit(1731894267.223:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6bc97e719 code=0x0 [ 356.418454][ T5845] syz-executor: attempt to access beyond end of device [ 356.418454][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.438383][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 356.805231][ T4472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.865047][ T8254] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 356.891983][ T8254] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 356.897302][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.931378][ T8254] EXT4-fs (loop6): This should not happen!! Data will be lost [ 356.931378][ T8254] [ 356.965083][ T8254] EXT4-fs (loop6): Total free blocks count 0 [ 356.984389][ T8273] loop3: detected capacity change from 0 to 512 [ 357.042934][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.052731][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.063467][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.073039][ T8254] EXT4-fs (loop6): Free/Dirty block details [ 357.080505][ T8254] EXT4-fs (loop6): free_blocks=39626 [ 357.098942][ T8254] EXT4-fs (loop6): dirty_blocks=15 [ 357.109582][ T8254] EXT4-fs (loop6): Block reservation details [ 357.117189][ T8254] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 357.133591][ T4472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.183626][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.191463][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.462763][ T8273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 357.484680][ T8273] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.693383][ T7146] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.710118][ T4472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.732988][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 358.954064][ T4472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.284743][ T5146] Bluetooth: hci1: command tx timeout [ 359.924012][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 360.997156][ T29] audit: type=1400 audit(1731894271.883:43): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8322 comm="syz.0.498" [ 361.289021][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.324406][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.343101][ T5146] Bluetooth: hci1: command tx timeout [ 361.386077][ T8276] bridge_slave_0: entered allmulticast mode [ 361.711445][ T8332] loop6: detected capacity change from 0 to 512 [ 361.734040][ T8276] bridge_slave_0: entered promiscuous mode [ 361.736767][ T8330] loop3: detected capacity change from 0 to 40427 [ 361.774370][ T8330] F2FS-fs (loop3): Found nat_bits in checkpoint [ 361.827593][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.846717][ T8332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.872953][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.880288][ T8276] bridge_slave_1: entered allmulticast mode [ 361.918335][ T8330] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 361.939916][ T8332] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.967375][ T8276] bridge_slave_1: entered promiscuous mode [ 362.022315][ T29] audit: type=1326 audit(1731894272.903:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.7.502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e0417e719 code=0x0 [ 363.122818][ T5853] syz-executor: attempt to access beyond end of device [ 363.122818][ T5853] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.167780][ T5853] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 363.305351][ T7146] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 363.427878][ T5146] Bluetooth: hci1: command tx timeout [ 363.696013][ T8376] siw: device registration error -23 [ 364.435681][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.461847][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.485447][ T4472] bond0 (unregistering): Released all slaves [ 364.512847][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.661546][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.727421][ T8379] loop7: detected capacity change from 0 to 40427 [ 364.742634][ T8379] F2FS-fs (loop7): invalid crc value [ 364.790317][ T8379] F2FS-fs (loop7): Found nat_bits in checkpoint [ 364.996996][ T8379] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 365.014972][ T8276] team0: Port device team_slave_0 added [ 365.066442][ T8276] team0: Port device team_slave_1 added [ 365.590182][ T5146] Bluetooth: hci1: command tx timeout [ 366.203154][ T7575] syz-executor: attempt to access beyond end of device [ 366.203154][ T7575] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 366.407347][ T7575] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 366.551612][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.801293][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.031179][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.073037][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.080142][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.120733][ T8413] loop3: detected capacity change from 0 to 512 [ 367.202802][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.253594][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.264537][ T8413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 367.267423][ T8424] loop0: detected capacity change from 0 to 128 [ 367.284391][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.295330][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.304067][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.310789][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.321690][ T8413] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.330242][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.343337][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.351378][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 367.360105][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.442195][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.451988][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.460706][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.562442][ T8424] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.595884][ T4472] hsr_slave_0: left promiscuous mode [ 367.595988][ T8424] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.633760][ T4472] hsr_slave_1: left promiscuous mode [ 368.111415][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.135913][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.529947][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 368.682262][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.732285][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.785359][ T4472] veth1_macvtap: left promiscuous mode [ 368.812523][ T4472] veth0_macvtap: left promiscuous mode [ 368.837871][ T4472] veth1_vlan: left promiscuous mode [ 368.892034][ T4472] veth0_vlan: left promiscuous mode [ 369.406982][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.433476][ T5850] Bluetooth: hci5: command tx timeout [ 369.592693][ T5850] Bluetooth: hci2: command tx timeout [ 369.915168][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 370.020236][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.520'. [ 370.040255][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.520'. [ 370.087022][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.520'. [ 371.281028][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 371.327935][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 371.507145][ T5850] Bluetooth: hci5: command tx timeout [ 371.663686][ T5146] Bluetooth: hci2: command tx timeout [ 372.158791][ T8478] loop7: detected capacity change from 0 to 512 [ 372.160856][ T8276] hsr_slave_0: entered promiscuous mode [ 372.180022][ T8478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.213163][ T8276] hsr_slave_1: entered promiscuous mode [ 372.227308][ T8478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.240215][ T8478] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.250731][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.250825][ T8276] Cannot create hsr debugfs directory [ 372.310869][ T8485] loop0: detected capacity change from 0 to 128 [ 372.328657][ T8478] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 372.344881][ T8478] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 372.359308][ T8478] EXT4-fs (loop7): This should not happen!! Data will be lost [ 372.359308][ T8478] [ 372.369780][ T8478] EXT4-fs (loop7): Total free blocks count 0 [ 372.377002][ T8478] EXT4-fs (loop7): Free/Dirty block details [ 372.453323][ T8485] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.494364][ T8485] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.531309][ T8478] EXT4-fs (loop7): free_blocks=39626 [ 372.536662][ T8478] EXT4-fs (loop7): dirty_blocks=1 [ 372.585993][ T8478] EXT4-fs (loop7): Block reservation details [ 372.623889][ T8478] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 373.197427][ T8478] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 373.620288][ T5850] Bluetooth: hci5: command tx timeout [ 373.745182][ T5850] Bluetooth: hci2: command tx timeout [ 373.919741][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.985087][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 375.507141][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.552213][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.559532][ T8418] bridge_slave_0: entered allmulticast mode [ 375.602846][ T8418] bridge_slave_0: entered promiscuous mode [ 375.642366][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.661880][ T5850] Bluetooth: hci5: command tx timeout [ 375.668835][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.688963][ T8418] bridge_slave_1: entered allmulticast mode [ 375.741339][ T8418] bridge_slave_1: entered promiscuous mode [ 375.822160][ T5850] Bluetooth: hci2: command tx timeout [ 375.944782][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 376.043583][ T4472] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.140235][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.223992][ T4472] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.346659][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.779483][ T964] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 376.847054][ T8418] team0: Port device team_slave_0 added [ 376.908191][ T4472] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.963844][ T964] usb 1-1: Using ep0 maxpacket: 8 [ 376.984418][ T29] audit: type=1326 audit(1731894287.873:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.3.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8de097e719 code=0x0 [ 377.009548][ T964] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 377.025740][ T8418] team0: Port device team_slave_1 added [ 377.049055][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.080222][ T964] usb 1-1: config 0 descriptor?? [ 377.104596][ T4472] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.277995][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.297887][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.363666][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.613367][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.620871][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.638245][ T8422] bridge_slave_0: entered allmulticast mode [ 377.660183][ T8422] bridge_slave_0: entered promiscuous mode [ 377.680669][ T8569] loop7: detected capacity change from 0 to 512 [ 377.692624][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.700582][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.747089][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.778140][ T8569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 377.805665][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.831668][ T8569] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.846648][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.893024][ T8422] bridge_slave_1: entered allmulticast mode [ 377.925228][ T8422] bridge_slave_1: entered promiscuous mode [ 378.104790][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.122654][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.963826][ T8276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.042740][ T8276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.200645][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.216084][ T7575] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 379.367334][ T8276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.398362][ T964] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 379.400309][ T8583] loop7: detected capacity change from 0 to 128 [ 379.408940][ T964] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 379.438765][ T8276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.467792][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 379.483642][ T964] asix 1-1:0.0: probe with driver asix failed with error -71 [ 379.494769][ T8583] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.512511][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.541676][ T964] usb 1-1: USB disconnect, device number 6 [ 379.614078][ T8583] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.646100][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.662784][ T8418] hsr_slave_0: entered promiscuous mode [ 379.742463][ T8418] hsr_slave_1: entered promiscuous mode [ 379.750332][ T8418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.760767][ T8418] Cannot create hsr debugfs directory [ 379.897485][ T8422] team0: Port device team_slave_0 added [ 380.304260][ T8591] loop3: detected capacity change from 0 to 512 [ 380.342307][ T8591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.458594][ T4472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.502562][ T8591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.561478][ T8591] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.602321][ T8422] team0: Port device team_slave_1 added [ 380.629216][ T7575] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.705645][ T8591] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 380.741498][ T8591] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 380.772142][ T8591] EXT4-fs (loop3): This should not happen!! Data will be lost [ 380.772142][ T8591] [ 380.834261][ T8591] EXT4-fs (loop3): Total free blocks count 0 [ 380.840368][ T8591] EXT4-fs (loop3): Free/Dirty block details [ 380.852927][ T4472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.866256][ T8591] EXT4-fs (loop3): free_blocks=39626 [ 380.876545][ T8591] EXT4-fs (loop3): dirty_blocks=1 [ 380.881938][ T8591] EXT4-fs (loop3): Block reservation details [ 380.888319][ T8591] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 381.101622][ T5902] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 381.281650][ T5902] usb 8-1: Using ep0 maxpacket: 16 [ 381.304305][ T5902] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.408577][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.411760][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.465910][ T8591] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 381.527457][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.586518][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.606769][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.621384][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.652862][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.661260][ T5902] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.708776][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.719977][ T5902] usb 8-1: Product: syz [ 381.742435][ T5902] usb 8-1: Manufacturer: syz [ 381.748982][ T5902] usb 8-1: SerialNumber: syz [ 381.755928][ T5902] usb 8-1: config 0 descriptor?? [ 381.773009][ T5902] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.792862][ T5902] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 381.898808][ T4472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.115303][ T4472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.138891][ T8422] hsr_slave_0: entered promiscuous mode [ 382.146311][ T8422] hsr_slave_1: entered promiscuous mode [ 382.157286][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.169542][ T8422] Cannot create hsr debugfs directory [ 382.509044][ T5902] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 382.637548][ T5902] em28xx 8-1:0.0: Config register raw data: 0x56 [ 382.848017][ T5902] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 383.059729][ T5902] em28xx 8-1:0.0: No AC97 audio processor [ 383.125804][ T5902] usb 8-1: USB disconnect, device number 2 [ 383.197468][ T5902] em28xx 8-1:0.0: Disconnecting em28xx [ 383.251373][ T5902] em28xx 8-1:0.0: Freeing device [ 383.385725][ T29] audit: type=1326 audit(1731894294.273:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.3.562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8de097e719 code=0x0 [ 383.456188][ T4472] bridge_slave_1: left allmulticast mode [ 383.463896][ T4472] bridge_slave_1: left promiscuous mode [ 383.472053][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.577544][ T4472] bridge_slave_0: left allmulticast mode [ 383.593583][ T4472] bridge_slave_0: left promiscuous mode [ 383.599607][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.052532][ T5903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 384.241632][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 384.261893][ T5903] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.270318][ T5903] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.307211][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.318072][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.348468][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.379035][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 384.395805][ T5903] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.417545][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.431918][ T8632] loop7: detected capacity change from 0 to 40427 [ 384.435892][ T5903] usb 1-1: config 0 descriptor?? [ 384.481009][ T8632] F2FS-fs (loop7): invalid crc value [ 384.508668][ T8632] F2FS-fs (loop7): Found nat_bits in checkpoint [ 384.631426][ T8643] loop3: detected capacity change from 0 to 128 [ 384.639349][ T4472] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 384.639916][ T8632] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 384.675851][ T8643] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.692350][ T8643] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.093810][ T5853] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.460718][ T7575] syz-executor: attempt to access beyond end of device [ 386.460718][ T7575] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.488377][ T7575] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 386.558961][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.585882][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.624747][ T4472] bond0 (unregistering): Released all slaves [ 386.819026][ T8656] loop3: detected capacity change from 0 to 40427 [ 386.859442][ T8656] F2FS-fs (loop3): Found nat_bits in checkpoint [ 386.915780][ T8656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 387.212942][ T964] usb 1-1: USB disconnect, device number 7 [ 388.635895][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.671945][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.697353][ T4472] bond0 (unregistering): Released all slaves [ 388.893698][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.001828][ T5853] syz-executor: attempt to access beyond end of device [ 389.001828][ T5853] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 389.045608][ T5853] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 389.370064][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.673556][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.680748][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.775210][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.782521][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.196188][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.628420][ T29] audit: type=1326 audit(1731894301.513:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.3.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8de097e719 code=0x0 [ 390.938383][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.027568][ T4472] hsr_slave_0: left promiscuous mode [ 391.038638][ T4472] hsr_slave_1: left promiscuous mode [ 391.054044][ T8707] loop7: detected capacity change from 0 to 128 [ 391.063821][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.082718][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.100161][ T8707] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.132989][ T8707] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.172755][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.186490][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.188219][ T8713] loop0: detected capacity change from 0 to 512 [ 391.222213][ T4472] hsr_slave_0: left promiscuous mode [ 391.384075][ T8713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.403239][ T4472] hsr_slave_1: left promiscuous mode [ 391.442950][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.460900][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.477337][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.488239][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.512511][ T8713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.601640][ T8713] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.816119][ T4472] veth1_macvtap: left promiscuous mode [ 391.898441][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 391.908265][ T4472] veth0_macvtap: left promiscuous mode [ 391.928103][ T4472] veth1_vlan: left promiscuous mode [ 391.944509][ T8713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 391.969975][ T4472] veth0_vlan: left promiscuous mode [ 391.993380][ T4472] veth1_macvtap: left promiscuous mode [ 392.019445][ T4472] veth0_macvtap: left promiscuous mode [ 392.033146][ T8713] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 392.056076][ T4472] veth1_vlan: left promiscuous mode [ 392.075282][ T4472] veth0_vlan: left promiscuous mode [ 392.123760][ T8713] EXT4-fs (loop0): This should not happen!! Data will be lost [ 392.123760][ T8713] [ 392.199405][ T8713] EXT4-fs (loop0): Total free blocks count 0 [ 392.205593][ T8713] EXT4-fs (loop0): Free/Dirty block details [ 392.212524][ T8713] EXT4-fs (loop0): free_blocks=39626 [ 392.216814][ T7575] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.217890][ T8713] EXT4-fs (loop0): dirty_blocks=1 [ 392.233164][ T8713] EXT4-fs (loop0): Block reservation details [ 392.241726][ T8713] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 392.300206][ T8713] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 393.814636][ T8744] loop0: detected capacity change from 0 to 512 [ 393.863059][ T8744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.952201][ T8744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.985390][ T8744] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.085585][ T8744] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 394.123404][ T8744] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 394.167858][ T8744] EXT4-fs (loop0): This should not happen!! Data will be lost [ 394.167858][ T8744] [ 394.209476][ T8744] EXT4-fs (loop0): Total free blocks count 0 [ 394.229135][ T8744] EXT4-fs (loop0): Free/Dirty block details [ 394.248773][ T8744] EXT4-fs (loop0): free_blocks=39626 [ 394.264721][ T8744] EXT4-fs (loop0): dirty_blocks=1 [ 394.270059][ T8744] EXT4-fs (loop0): Block reservation details [ 394.282765][ T8744] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 394.349096][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 394.445637][ T8748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 394.963191][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 395.247229][ T8750] loop0: detected capacity change from 0 to 512 [ 395.330603][ T8750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.560324][ T8750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.576577][ T8750] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.635180][ T8750] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 395.650141][ T8750] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 395.663168][ T8750] EXT4-fs (loop0): This should not happen!! Data will be lost [ 395.663168][ T8750] [ 395.678448][ T8750] EXT4-fs (loop0): Total free blocks count 0 [ 395.705368][ T8750] EXT4-fs (loop0): Free/Dirty block details [ 395.714931][ T8750] EXT4-fs (loop0): free_blocks=39626 [ 395.732837][ T8750] EXT4-fs (loop0): dirty_blocks=1 [ 395.737992][ T8750] EXT4-fs (loop0): Block reservation details [ 395.744703][ T8750] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 395.826763][ T8750] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 396.850751][ T29] audit: type=1400 audit(1731894307.673:48): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8756 comm="syz.7.590" [ 397.379490][ T8761] loop0: detected capacity change from 0 to 1024 [ 397.432644][ T8761] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 399.270558][ T8768] loop0: detected capacity change from 0 to 40427 [ 399.324576][ T8768] F2FS-fs (loop0): invalid crc value [ 399.356904][ T8768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 399.487438][ T8768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 399.528085][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 399.829555][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 401.524232][ T5851] syz-executor: attempt to access beyond end of device [ 401.524232][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 401.538822][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 402.213584][ T8418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.323558][ T8785] loop0: detected capacity change from 0 to 40427 [ 402.360318][ T8418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.443420][ T8418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.466934][ T8785] F2FS-fs (loop0): Found nat_bits in checkpoint [ 402.536507][ T8785] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 402.555807][ T8418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.995120][ T8276] veth0_vlan: entered promiscuous mode [ 404.007646][ T8276] veth1_vlan: entered promiscuous mode [ 404.133813][ T8809] loop3: detected capacity change from 0 to 256 [ 404.181486][ T8811] loop7: detected capacity change from 0 to 512 [ 404.239662][ T8811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.339076][ T8811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.470571][ T8811] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.586333][ T5851] syz-executor: attempt to access beyond end of device [ 404.586333][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.611412][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 404.701873][ T8817] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 404.712748][ T8817] FAT-fs (loop3): Filesystem has been set read-only [ 404.719893][ T8817] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 404.730841][ T8817] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 404.773084][ T29] audit: type=1800 audit(1731894315.633:49): pid=8817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.602" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 405.052028][ T8276] veth0_macvtap: entered promiscuous mode [ 405.089120][ T8811] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 405.297919][ T8276] veth1_macvtap: entered promiscuous mode [ 405.376121][ T8811] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 405.416614][ T8811] EXT4-fs (loop7): This should not happen!! Data will be lost [ 405.416614][ T8811] [ 405.427572][ T8811] EXT4-fs (loop7): Total free blocks count 0 [ 405.435135][ T8811] EXT4-fs (loop7): Free/Dirty block details [ 405.450719][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.482266][ T8811] EXT4-fs (loop7): free_blocks=39626 [ 405.487642][ T8811] EXT4-fs (loop7): dirty_blocks=1 [ 405.506511][ T8811] EXT4-fs (loop7): Block reservation details [ 405.581060][ T8821] loop3: detected capacity change from 0 to 512 [ 405.600425][ T8811] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 405.611394][ T8422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.647369][ T8821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.732893][ T8818] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 405.848685][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.013464][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.025783][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.028694][ T8821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.037106][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.037138][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.139612][ T8821] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.191585][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.332416][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.349587][ T8422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.428799][ T8422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.450405][ T8821] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 406.493922][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.506947][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.521485][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.541399][ T8821] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 406.554798][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.568591][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.580411][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.628185][ T8821] EXT4-fs (loop3): This should not happen!! Data will be lost [ 406.628185][ T8821] [ 406.632276][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.673446][ T8422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.680949][ T8821] EXT4-fs (loop3): Total free blocks count 0 [ 406.713823][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.723551][ T8276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.735429][ T8821] EXT4-fs (loop3): Free/Dirty block details [ 406.742245][ T8276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.751284][ T8821] EXT4-fs (loop3): free_blocks=39626 [ 406.756731][ T8821] EXT4-fs (loop3): dirty_blocks=1 [ 406.769594][ T8276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.785602][ T8821] EXT4-fs (loop3): Block reservation details [ 406.792071][ T8276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.816215][ T8821] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 406.829359][ T8833] loop0: detected capacity change from 0 to 512 [ 406.848884][ T8827] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 406.915421][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.922587][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.936851][ T8833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 406.980869][ T8833] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.990091][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.007842][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.966862][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 408.206430][ T7549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.222331][ T7549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.330241][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.381787][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.472097][ T8853] loop3: detected capacity change from 0 to 512 [ 408.504558][ T8853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.562570][ T8853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.584519][ T8853] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.632591][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.663552][ T8853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 408.664205][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.745380][ T8853] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 408.845393][ T8853] EXT4-fs (loop3): This should not happen!! Data will be lost [ 408.845393][ T8853] [ 408.857727][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.912705][ T8853] EXT4-fs (loop3): Total free blocks count 0 [ 408.941198][ T8853] EXT4-fs (loop3): Free/Dirty block details [ 408.971215][ T8853] EXT4-fs (loop3): free_blocks=39626 [ 408.976574][ T8853] EXT4-fs (loop3): dirty_blocks=7 [ 409.016871][ T8853] EXT4-fs (loop3): Block reservation details [ 409.065954][ T8853] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 409.101019][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.108236][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.118858][ T8865] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 409.160046][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.167286][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.377209][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.618'. [ 409.385854][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.387526][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.618'. [ 409.406177][ T8884] netlink: 44 bytes leftover after parsing attributes in process `syz.7.618'. [ 409.574579][ T8422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.585400][ T8422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.938725][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.953133][ T8904] loop7: detected capacity change from 0 to 256 [ 410.020440][ T8904] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 410.348195][ T8909] loop0: detected capacity change from 0 to 8 [ 413.743250][ T8418] veth0_vlan: entered promiscuous mode [ 413.755715][ T8418] veth1_vlan: entered promiscuous mode [ 413.781210][ T8418] veth0_macvtap: entered promiscuous mode [ 413.798938][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.808943][ T8418] veth1_macvtap: entered promiscuous mode [ 413.816804][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.830104][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.841462][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.852972][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.860532][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.991040][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.158766][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.192553][ T5905] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 414.267192][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.299735][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.333612][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.351461][ T5905] usb 8-1: device descriptor read/64, error -71 [ 414.581400][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.572676][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.599423][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.731722][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.751466][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.781332][ T5905] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 415.786054][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.013112][ T5850] Bluetooth: hci1: command tx timeout [ 416.029061][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.051429][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.062103][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.072809][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.083352][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.094327][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.106933][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.118061][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.137603][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.801294][ T5905] usb 8-1: device descriptor read/64, error -71 [ 416.935320][ T5905] usb usb8-port1: attempt power cycle [ 416.990093][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.095607][ T8418] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.131467][ T8418] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.144803][ T8418] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.163459][ T8418] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.560264][ T8422] veth0_vlan: entered promiscuous mode [ 417.640442][ T8422] veth1_vlan: entered promiscuous mode [ 418.756272][ T8956] loop7: detected capacity change from 0 to 8 [ 419.163142][ T5850] Bluetooth: hci1: command tx timeout [ 420.448369][ T8959] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 420.665986][ T8422] veth0_macvtap: entered promiscuous mode [ 420.815298][ T8971] loop0: detected capacity change from 0 to 128 [ 420.858432][ T62] bridge_slave_1: left allmulticast mode [ 420.887566][ T62] bridge_slave_1: left promiscuous mode [ 420.901631][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.930656][ T8971] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.957684][ T8971] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 421.002176][ T62] bridge_slave_0: left allmulticast mode [ 421.007981][ T62] bridge_slave_0: left promiscuous mode [ 421.194399][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.262505][ T5844] Bluetooth: hci1: command tx timeout [ 421.268368][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 421.922316][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.048680][ T8981] loop0: detected capacity change from 0 to 256 [ 422.128608][ T8981] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 422.458970][ T8989] loop3: detected capacity change from 0 to 512 [ 422.487898][ T8989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.930356][ T8989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.147589][ T8989] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.245095][ T8989] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 423.278525][ T8989] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 423.303383][ T8989] EXT4-fs (loop3): This should not happen!! Data will be lost [ 423.303383][ T8989] [ 423.321458][ T8989] EXT4-fs (loop3): Total free blocks count 0 [ 423.327617][ T8989] EXT4-fs (loop3): Free/Dirty block details [ 423.334024][ T8989] EXT4-fs (loop3): free_blocks=39626 [ 423.339440][ T8989] EXT4-fs (loop3): dirty_blocks=7 [ 423.346617][ T5850] Bluetooth: hci1: command tx timeout [ 423.354245][ T8989] EXT4-fs (loop3): Block reservation details [ 423.360306][ T8989] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 423.369058][ T8993] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 423.675659][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.700148][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.719602][ T62] bond0 (unregistering): Released all slaves [ 423.783313][ T7527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.828384][ T7527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.474441][ T8999] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 424.770509][ T8422] veth1_macvtap: entered promiscuous mode [ 424.935837][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.945857][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.950028][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.971864][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.982330][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.993527][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.019916][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.061860][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.072280][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.087739][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.098048][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.109723][ T9019] loop7: detected capacity change from 0 to 512 [ 425.110396][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.128973][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.246937][ T9009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 425.293954][ T9019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 425.374104][ T9019] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.560022][ T7575] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 426.487596][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 426.508376][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 426.529203][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.687295][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 426.696933][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.749883][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 426.758170][ T5859] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 426.774753][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 426.784383][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.803789][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.821963][ T5146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 426.833244][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 427.051887][ T9049] loop0: detected capacity change from 0 to 8 [ 428.223371][ T62] hsr_slave_0: left promiscuous mode [ 428.579032][ T62] hsr_slave_1: left promiscuous mode [ 428.702633][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.902251][ T5146] Bluetooth: hci7: command tx timeout [ 428.919628][ T9061] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 428.962458][ T5146] Bluetooth: hci6: command tx timeout [ 429.006239][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.329885][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.393025][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.643235][ T9072] loop0: detected capacity change from 0 to 512 [ 429.798676][ T9072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 429.827028][ T9074] loop3: detected capacity change from 0 to 512 [ 429.849391][ T9072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.871049][ T62] veth1_macvtap: left promiscuous mode [ 429.876692][ T62] veth0_macvtap: left promiscuous mode [ 429.941613][ T62] veth1_vlan: left promiscuous mode [ 429.950443][ T9072] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.992300][ T9074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 430.014492][ T62] veth0_vlan: left promiscuous mode [ 430.066183][ T9088] loop7: detected capacity change from 0 to 256 [ 430.077391][ T9074] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.100649][ T9088] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 430.425736][ T9074] overlayfs: failed to resolve './file1': -2 [ 430.766213][ T9089] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 430.784019][ T9089] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 430.983691][ T5146] Bluetooth: hci7: command tx timeout [ 430.987908][ T9089] EXT4-fs (loop0): This should not happen!! Data will be lost [ 430.987908][ T9089] [ 431.001540][ T9089] EXT4-fs (loop0): Total free blocks count 0 [ 431.022636][ T5146] Bluetooth: hci6: command tx timeout [ 431.030891][ T9089] EXT4-fs (loop0): Free/Dirty block details [ 431.059031][ T9089] EXT4-fs (loop0): free_blocks=39626 [ 431.066475][ T9089] EXT4-fs (loop0): dirty_blocks=15 [ 431.073926][ T9089] EXT4-fs (loop0): Block reservation details [ 431.082293][ T9089] EXT4-fs (loop0): i_reserved_data_blocks=15 [ 432.632102][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.666642][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 432.996500][ T9100] loop0: detected capacity change from 0 to 512 [ 433.021442][ T5146] Bluetooth: hci7: command tx timeout [ 433.049691][ T9100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 433.065112][ T9100] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.186866][ T5146] Bluetooth: hci6: command tx timeout [ 433.319836][ T7575] ------------[ cut here ]------------ [ 433.325331][ T7575] DEBUG_LOCKS_WARN_ON(1) [ 433.325414][ T7575] WARNING: CPU: 0 PID: 7575 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 [ 433.339378][ T7575] Modules linked in: [ 433.343266][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 433.354099][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 433.364236][ T7575] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 433.369794][ T7575] Code: 00 00 83 3d f5 dc ac 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 0f 7d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 433.389399][ T7575] RSP: 0018:ffffc9001b1175f0 EFLAGS: 00010046 [ 433.395465][ T7575] RAX: 1d1ecf4f15143100 RBX: 0000000000000d68 RCX: ffff88802b938000 [ 433.403428][ T7575] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.411388][ T7575] RBP: 0000000000000014 R08: ffffffff8155e312 R09: 1ffff110170c519a [ 433.419380][ T7575] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802b938000 [ 433.427366][ T7575] R13: 0000000000000d68 R14: 1ffff11005727174 R15: ffff88802b938ba0 [ 433.435334][ T7575] FS: 0000555584422500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 433.444275][ T7575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.450937][ T7575] CR2: 00007fe6badd5d58 CR3: 0000000029c3a000 CR4: 0000000000350ef0 [ 433.458996][ T7575] Call Trace: [ 433.462263][ T7575] [ 433.465181][ T7575] ? __warn+0x168/0x4e0 [ 433.469334][ T7575] ? __lock_acquire+0x58c/0x2050 [ 433.474280][ T7575] ? report_bug+0x2b3/0x500 [ 433.479329][ T7575] ? __lock_acquire+0x58c/0x2050 [ 433.484277][ T7575] ? handle_bug+0x60/0x90 [ 433.488606][ T7575] ? exc_invalid_op+0x1a/0x50 [ 433.493310][ T7575] ? asm_exc_invalid_op+0x1a/0x20 [ 433.498354][ T7575] ? __warn_printk+0x292/0x360 [ 433.503117][ T7575] ? __lock_acquire+0x58c/0x2050 [ 433.508068][ T7575] lock_acquire+0x1ed/0x550 [ 433.512577][ T7575] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 433.518149][ T7575] ? __pfx_lock_acquire+0x10/0x10 [ 433.523186][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.528905][ T7575] ? queued_spin_lock_slowpath+0x42/0x50 [ 433.534570][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.540226][ T7575] ? do_raw_spin_lock+0x272/0x370 [ 433.545251][ T7575] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 433.550617][ T7575] ? plist_check_list+0x470/0x4d0 [ 433.555672][ T7575] ? __pfx_lock_release+0x10/0x10 [ 433.560724][ T7575] _raw_spin_lock_nested+0x31/0x40 [ 433.565862][ T7575] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 433.571425][ T7575] raw_spin_rq_lock_nested+0x2a/0x140 [ 433.576840][ T7575] find_lock_lowest_rq+0x1e1/0x670 [ 433.581978][ T7575] push_rt_task+0x13f/0x7e0 [ 433.586668][ T7575] task_woken_rt+0x14c/0x220 [ 433.591351][ T7575] ttwu_do_activate+0x30c/0x760 [ 433.596209][ T7575] try_to_wake_up+0x8d6/0x14b0 [ 433.600977][ T7575] ? __pfx_try_to_wake_up+0x10/0x10 [ 433.606175][ T7575] signal_wake_up_state+0xb4/0x120 [ 433.611280][ T7575] complete_signal+0xb36/0xcf0 [ 433.616041][ T7575] ? __pfx_complete_signal+0x10/0x10 [ 433.621325][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.626979][ T7575] __send_signal_locked+0xb1b/0xdc0 [ 433.632209][ T7575] group_send_sig_info+0x292/0x310 [ 433.637322][ T7575] ? __pfx_group_send_sig_info+0x10/0x10 [ 433.642987][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.648620][ T7575] ? radix_tree_lookup+0x238/0x290 [ 433.653815][ T7575] __se_sys_kill+0x431/0x5d0 [ 433.658413][ T7575] ? __pfx___se_sys_kill+0x10/0x10 [ 433.663546][ T7575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.669556][ T7575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.675891][ T7575] ? do_syscall_64+0x100/0x230 [ 433.680660][ T7575] ? do_syscall_64+0xb6/0x230 [ 433.685337][ T7575] do_syscall_64+0xf3/0x230 [ 433.689841][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.695481][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.701369][ T7575] RIP: 0033:0x7f0e0411a2a7 [ 433.705775][ T7575] Code: 48 83 c4 08 c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff 64 89 02 b8 ff ff ff ff eb e4 0f 1f 80 00 00 00 00 b8 3e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.725460][ T7575] RSP: 002b:00007fffec23b918 EFLAGS: 00000293 ORIG_RAX: 000000000000003e [ 433.733870][ T7575] RAX: ffffffffffffffda RBX: 00000000000000a8 RCX: 00007f0e0411a2a7 [ 433.741835][ T7575] RDX: 00000000000003eb RSI: 0000000000000009 RDI: 00000000ffffff58 [ 433.749796][ T7575] RBP: 00007fffec23b94c R08: 0000000011cd70b1 R09: 7fffffffffffffff [ 433.757759][ T7575] R10: 00007f0e04f610b8 R11: 0000000000000293 R12: 0000000000000064 [ 433.765749][ T7575] R13: 00000000000698a7 R14: 0000000000068fd0 R15: 00007fffec23b9a0 [ 433.773721][ T7575] [ 433.776740][ T7575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.784009][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 433.794842][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 433.805005][ T7575] Call Trace: [ 433.808277][ T7575] [ 433.811200][ T7575] dump_stack_lvl+0x241/0x360 [ 433.815916][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.821116][ T7575] ? __pfx__printk+0x10/0x10 [ 433.825881][ T7575] ? _printk+0xd5/0x120 [ 433.830057][ T7575] ? __init_begin+0x41000/0x41000 [ 433.835072][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.840723][ T7575] ? vscnprintf+0x5d/0x90 [ 433.845065][ T7575] panic+0x349/0x880 [ 433.848964][ T7575] ? __warn+0x177/0x4e0 [ 433.853131][ T7575] ? __pfx_panic+0x10/0x10 [ 433.857558][ T7575] ? show_trace_log_lvl+0x3b2/0x410 [ 433.862844][ T7575] __warn+0x34b/0x4e0 [ 433.866819][ T7575] ? __lock_acquire+0x58c/0x2050 [ 433.871792][ T7575] report_bug+0x2b3/0x500 [ 433.876119][ T7575] ? __lock_acquire+0x58c/0x2050 [ 433.881064][ T7575] handle_bug+0x60/0x90 [ 433.885218][ T7575] exc_invalid_op+0x1a/0x50 [ 433.889721][ T7575] asm_exc_invalid_op+0x1a/0x20 [ 433.894599][ T7575] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 433.900148][ T7575] Code: 00 00 83 3d f5 dc ac 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 0f 7d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 433.919756][ T7575] RSP: 0018:ffffc9001b1175f0 EFLAGS: 00010046 [ 433.925821][ T7575] RAX: 1d1ecf4f15143100 RBX: 0000000000000d68 RCX: ffff88802b938000 [ 433.933874][ T7575] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.941842][ T7575] RBP: 0000000000000014 R08: ffffffff8155e312 R09: 1ffff110170c519a [ 433.949831][ T7575] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802b938000 [ 433.957813][ T7575] R13: 0000000000000d68 R14: 1ffff11005727174 R15: ffff88802b938ba0 [ 433.965794][ T7575] ? __warn_printk+0x292/0x360 [ 433.970878][ T7575] lock_acquire+0x1ed/0x550 [ 433.975398][ T7575] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 433.980952][ T7575] ? __pfx_lock_acquire+0x10/0x10 [ 433.985982][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.991618][ T7575] ? queued_spin_lock_slowpath+0x42/0x50 [ 433.997282][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.002917][ T7575] ? do_raw_spin_lock+0x272/0x370 [ 434.007942][ T7575] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.013308][ T7575] ? plist_check_list+0x470/0x4d0 [ 434.018334][ T7575] ? __pfx_lock_release+0x10/0x10 [ 434.023364][ T7575] _raw_spin_lock_nested+0x31/0x40 [ 434.028476][ T7575] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 434.034025][ T7575] raw_spin_rq_lock_nested+0x2a/0x140 [ 434.039506][ T7575] find_lock_lowest_rq+0x1e1/0x670 [ 434.044626][ T7575] push_rt_task+0x13f/0x7e0 [ 434.049130][ T7575] task_woken_rt+0x14c/0x220 [ 434.053754][ T7575] ttwu_do_activate+0x30c/0x760 [ 434.058611][ T7575] try_to_wake_up+0x8d6/0x14b0 [ 434.063369][ T7575] ? __pfx_try_to_wake_up+0x10/0x10 [ 434.068581][ T7575] signal_wake_up_state+0xb4/0x120 [ 434.073687][ T7575] complete_signal+0xb36/0xcf0 [ 434.078456][ T7575] ? __pfx_complete_signal+0x10/0x10 [ 434.083742][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.089377][ T7575] __send_signal_locked+0xb1b/0xdc0 [ 434.094570][ T7575] group_send_sig_info+0x292/0x310 [ 434.099673][ T7575] ? __pfx_group_send_sig_info+0x10/0x10 [ 434.105297][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.110929][ T7575] ? radix_tree_lookup+0x238/0x290 [ 434.116035][ T7575] __se_sys_kill+0x431/0x5d0 [ 434.120624][ T7575] ? __pfx___se_sys_kill+0x10/0x10 [ 434.125734][ T7575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.131716][ T7575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.138051][ T7575] ? do_syscall_64+0x100/0x230 [ 434.142814][ T7575] ? do_syscall_64+0xb6/0x230 [ 434.147507][ T7575] do_syscall_64+0xf3/0x230 [ 434.152112][ T7575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.157760][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.163653][ T7575] RIP: 0033:0x7f0e0411a2a7 [ 434.168057][ T7575] Code: 48 83 c4 08 c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff 64 89 02 b8 ff ff ff ff eb e4 0f 1f 80 00 00 00 00 b8 3e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.187652][ T7575] RSP: 002b:00007fffec23b918 EFLAGS: 00000293 ORIG_RAX: 000000000000003e [ 434.196084][ T7575] RAX: ffffffffffffffda RBX: 00000000000000a8 RCX: 00007f0e0411a2a7 [ 434.204048][ T7575] RDX: 00000000000003eb RSI: 0000000000000009 RDI: 00000000ffffff58 [ 434.212027][ T7575] RBP: 00007fffec23b94c R08: 0000000011cd70b1 R09: 7fffffffffffffff [ 434.220006][ T7575] R10: 00007f0e04f610b8 R11: 0000000000000293 R12: 0000000000000064 [ 434.227966][ T7575] R13: 00000000000698a7 R14: 0000000000068fd0 R15: 00007fffec23b9a0 [ 434.236284][ T7575] [ 435.359404][ T7575] Shutting down cpus with NMI [ 435.364482][ T7575] Kernel Offset: disabled [ 435.368813][ T7575] Rebooting in 86400 seconds..