last executing test programs: 3m29.777466835s ago: executing program 4 (id=247): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xd9, 0x91, 0x91, 0x40, 0x112a, 0x1, 0x3c71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1e, 0x58, 0x8}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x810000, &(0x7f0000000980)='norecovery') r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) syz_usb_connect(0x2, 0x995, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x83, 0x3a, 0x18, 0x20, 0x12d1, 0xdba3, 0x4b7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x983, 0x2, 0x6, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0xa2, 0x8, 0x5, 0xff, 0x1, 0x12, 0x7, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xb3, 0x2}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x44, 0x10, 0x4, [@generic={0xf9, 0xe, "7984358c2836a5dc4efcce38b82983870282ecedd4ff59f9de3873cb61370737d3fcc5cf642acc5087310ab0928483090a32d32eebe00417cedd603499db7e7e8da41ed79b60e8234e1094b588f48c60ddd46726b8664deda51f73609fbc6717e6a767d7c0f7a0331c7d896172a4ecf6352943c746376a734e8fecb3f2ed3e97f1483cf72fb595e0ce417b3ecc6bde7749bd5d4840098835196340d1e6200919b0d245aea740399af439944a613096cc5a97c225bd3f8a7b6407011e6a5a2fd0c66cc08c1811d4a634bf11f7e32a56ac4977b95e3c6efa4c380e7665c61c2bd86a73747973748dfebcba001dab617397b8608c640a8b2c"}, @generic={0x8c, 0xc, "f6443e2103b38d90c49075796a992fdee87a5d9f40c6b80109a1d1f4d51e9ffef8180cab7451c93d4d411b274003fd8b82d0f5e8efda213fc009e0b080319241f696622898b54530c618a42ee116e4989b8b3de516757a882ddfb412f49864720ad9e1b376352eaeb08b00c1daa8535462cae8bef3ca3d93c73b6e506916933d03c3de6bc942df7a4306"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7, 0x3, 0x8, [@generic={0xc4, 0xb, "b5cd4e33e1d06034a8f1f955eb45402dc442919ed52479f48f7be7011b566ab55a22ab37f2544ff63caabc22c38e06a9d9bd269baf2112f3beb5cfd155c45a7149daaacf1d4e42006da490497baa0c433dc47bb5279fbf5836c51e73cabded96edce6d1cef3fbcf75d90536c6ce839a7483a25d93c3b63f7c9599c599c00d6d98ce58c16e2ed45ac4cefbc9fa9febcdf2ac3235e0a9645e074a9ff32cce3b6b7204e398397cca53147a401712b299a3501a90f64831120c0c90e4c1a56d729aeeccb"}, @generic={0x87, 0x22, "758f288de9ffcc2312af8a285f90b7221e968e1af9451fe3ed999c4736960d57aa46f74821672aee8fb5d504a91692bf7ef45507636d6c78d47a5da552da9bbb553c39aa7af19c5589b64bc877c70c69e89a8807c3c98e36e67d950b4dbcbcd6b2517469e657694d0fe9cee49c8ced6c5f510291d082e8a6290512f9df703cffbf57066e28"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xa, 0x5, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x9}]}}]}}, {{0x9, 0x4, 0xb5, 0x1, 0xf, 0xa7, 0x65, 0x56, 0x4, [@generic={0x7d, 0x11, "9135bc9f139f9bd9ee4dfe6ec00090c74e24f8a81e840b6a1c140381383b2051b2dd69a8103fd0209d315b1e478092435d5797faa9c650762f8f33aa5e2fc29dda0c10ec4f4840d2275160428f2c073a062135bb756104dc478437870550d0e903edc4aa3bcb44a8de1816b035bbd7a67c61c4761332a5ca238158"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x7, "a3f1", "e25f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb, 0x0, 0x4, "249ca7e31f3ecb"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x60, 0x4, 0x2, 0x7, "08c6c7"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x81, 0x1, "aba9f7", "4c36b6"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x61, 0x0, "751529b0f6"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x8, 0x2}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x64, 0xacd}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0x0, 0x7, [@generic={0xdd, 0x24, "6bb7eef6112f44ae75b6e38a289a56798c98dc318028eff41f0748b43837500096d45f099db468856d2d744733f247afa5fb120f326143f3d8d2ed2bddc99cd3d684b8339dafb6698ae5b14e6d20495eff8ec9995587929bf7869c322732cbd90f7e09b571917dde8c849c8889239e0cee27b8fee44480ee4dd74c3797778a0dce6c3898219d0be12eaee43b5b2ba14137c5b457dff8b07a3f21ba0314b442fb9bdccd4c3ee23590385e46108807c8119b6b14d58e8a415e616b5647a8f9f925ed2b49801125aaccff5641e5518bda4dea07fb9aed35c26a84a4ba"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x0, 0x8, [@generic={0xea, 0x31, "157fd5371dd9b0da86b856491869408bdcd15fc65531cde6d9dda4b84fe620d0a8ed1d2bc03d3e3154db4be5ea20bcef11a838259f4f7393f39f36773f46ff09ca234e5f7d6069e1bc55306137620519ed002256f1f031a74f159012ea7e2f56d543c009453335fc16be0b3b12cef59beb46937ee3aedc98775d669389a2c2c9dbcae095144ea07216ff91917db76efaab27cf42e93a748c986935090b62d8c033452fdb0759e1e3032494c3855a43eaa40df484bd70522354d43bd9e88d09abfee770a34ae04cc087c916405abc6e79d5f9a68f7b0b713036d82bd7c50cbc6676a9ae9dcbb7afa7"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x5, 0x7, 0xc, [@generic={0xc5, 0x22, "5c0d83be2adadd3ae6357366773a97492d0d90c81d7f10d8d76ebc89a6540e74ffc3e4dd410f0e58d51ab74e6e76035002c8744956458a34d001d0cf9c83e7bf3dc0f37f3659cbb922bf87fd1d4a42c35dd67e96f8619da51e68002393ea43ee6300165cf9f3a81944c178d1e4b28049f0ec613c16e54a4622477d03632a1354ec30bcc9f595b5d95e9ecabf32eff48c162e06409198b716f6fbe71eb80d86b60c5642f9504a41139c139f7a7eefe55342a7c1b56e8ce545ba38154f4ad3ce145c93eb"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x7f, 0x7, 0x3}}, {{0x9, 0x5, 0x12, 0x1, 0x3ff, 0x81, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xfff7}, @generic={0x100, 0xb, "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"}]}}, {{0x9, 0x5, 0x8c, 0x8, 0x3ff, 0xb, 0x5, 0xa, [@generic={0xf0, 0x31, "dea87704865f7389bec6020779b09512085fddbf8e65d4d9f01e1d79948772f015384a62e79b1b1fcd996c8f348983a198d2b7d9dc3c0ce58dbf222863f6133ee6ee91d06e202811002fa95aff96d8f2ef71b6405894dec39e4a87b3651f5ed205d3debc25f6be4b7d2c410f2c81cc36da77090bc078b2bc0199b7e77e8c77ad4f0cd1a12d4f1287eb0cc74db342ebfc42aba66c78d8dafc26925ac84b4a33612d2e615a44f929bb9ed8856d86fea8b30825656ad1eab71cb4f588f35817290f2b8a3ead4620b24d29f5f1dfc77888db5bc338129a901837a9c4cfe47983d23a887888a0c9d317f7d6699995aa32"}, @generic={0x29, 0x16, "86d8ea882129b87e1a8fff7a2500f9b08711892b2edc426c5397b76f3e70b1dcd844133bb5557d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x80, 0x4c}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x5, 0x8, 0x7, [@generic={0x3, 0x22, '\b'}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xb4, 0x0, 0x68, [@generic={0x45, 0xb, "170ba69b18b9b6bcf052f3d99f8850bd3f7a21c2eb217368fbd2db3f841ad2b33a934e807c98ec04c4d8e6d942ca7ad5a81b8461005161d1238a92d5f75bc177025fff"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6d, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xc, 0x5, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xe}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x40}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x7, 0x3}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0xb1, 0x9, 0x2, 0x40, 0x66}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x5, [{0xd2, &(0x7f0000000080)=@string={0xd2, 0x3, "126b8b5c8ae97427f9ae3a99717f399d002a510c06df7a8847916c79da98aa3150beb33ff00d307166ce95617e8f337dce8bfeb2f999fd6fe6fd2dfb4d41d9342c3c05206c4a25a0dec8559093eb66023809fd619e439c2e205ddbf70ed78603c590cfaf8cae2364a5ca86cb0892b5d8b82e6ada1154725397b7533d4778b40987560d19a8e2ea7539fb7d52369c47d28e34e2483643d84e17cafa63ff8da791294418b1af1663a3eae2ac6fdfe2182794e32e486bd1a3cfb5a552d676aa40290903ef89bc468fd9ab43052936096b56"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x59, &(0x7f0000000200)=@string={0x59, 0x3, "6482dbc357cc4ff5cd32b05a384859bee474329c31634d56438e1ddf355fd6e8589bde3fdaed0ca92e6a997fbedab60443723956d6a512125e4b8621428cb464ee77c9c802959224b9f2c75b8dff6294cdf718d04bce50"}}, {0x41, &(0x7f0000000280)=@string={0x41, 0x3, "6bc641539aa47d3110a5a30bfeb7e4b73d94cd0dcbc455ddacc54762c9eac8f88fbd4141bc23d015d9d7ebae9cf5c7fbd2b06cdd085a498535c9a7c6a61ce7"}}]}) 3m27.289728154s ago: executing program 4 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000009000000010000000300000080000000", @ANYRES32, @ANYBLOB="06000000000000000039529c1d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000d00"/28], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x437, 0x0, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x5068b, 0x25}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, @IFLA_IPTUN_LINK={0xfffffffffffffeef, 0x1, r2}]}}}]}, 0x64}}, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYRES16=r2], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000e40), 0x7a96, 0xa001) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40001f, 0x2) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x8, 0x7f, {0x0, 0x2710}, {0x3, 0x1, 0x7, 0x0, 0x8, 0xf8, "54b80003"}, 0x7, 0x2, {&(0x7f0000000600)=[{0x3, 0x4, {&(0x7f0000000280)}, 0x8}, {0x9, 0xffff, {&(0x7f00000005c0)}, 0xf6}]}, 0xc3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) fallocate(r4, 0x40, 0x0, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r9, 0x2, {0x0, 0x0, 0x4}}, 0x18) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d8020000", @ANYRES16=0x0, @ANYBLOB="05032bbd7000fedbdf251700000048000180080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="140002007465616d5f736c6176655f30000000000800030001000000900001801400020076657468305f746f5f687372000000001400020074756e6c300000000000000000000000080003000200000008000300020000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="bc304f89943d14000200636169000000000b748a96f52040", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000540001800800030001000000080003000100000014000200697036746e6c30000000000000000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f6d616376746170000000300001801400020067656e6576653100000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="7800018014000200766c616e31000000000000000000000008000300010000000800030002000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006272696467653000000000000000000008000300010000000800030000000000140002006d6163766cea2d2e5cd566db3038dd5c7af7b0bce694c171e826000000000050000180140002007753300000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200626f6e64300000000000000000000000080003000000000014000200697036677265300000000000000000006000018008000100", @ANYRES32=r2, @ANYBLOB="14000200767863616e310000000000000000000008000300000000000800030001000000140002006d6163766c616e30000000000000000014000200766574683000000000000000000000000800030002000000400001801400020076657468305f6d61637674617000000014000200736974300000000000000000000000001400020069705f76746930000000000000000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r12}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000008000000030000000400000070200400", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32=r12, @ANYBLOB="0200000002000000054014000c0000000000000000000000000000007aa2b0b3548759c2f7fc3c9baa44a98572589f1b4e0956f819e7b03faeccb34e3a90563a6cd45f09d97d1e0fe8d54bed29fdc8abe0c30cd43bf7f97b46075bcbc8c2ec2bd91971f93d24675c0bd8fe1f2a7042eb643c0a11dfa670fe886b7e1825"], 0x50) fcntl$setlease(r13, 0x400, 0x1) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r14) sendmsg$IEEE802154_LLSEC_LIST_KEY(r14, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r15, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x44840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m26.159368292s ago: executing program 4 (id=253): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x1, 0x97e, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0x65, 0xa5, 0xe7, 0x20, 0x710, 0x1, 0xc289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96c, 0x3, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x27, 0xcb, 0xe, 0xee, 0xe0, 0x90, 0x40, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xfd, 0x2, 0xb, 0x1, "e7a38169c237a90f38"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc0, 0x3, 0x3, 0x6, "8e86db4db7abf8d3c7"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x8, 0x86}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x9, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x1}]}}, {{0x9, 0x5, 0xf, 0xe, 0x20, 0x4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x9, 0x7, 0x7, [@generic={0xb0, 0xe, "96b21ddd6ca0032e097932e2183ff533b67a94714df4946b4544c860d8733a310bbfddecdb15b4252b1e65014b3d97faf9ceded110e44f3b7880577759a2b2ec95d4ccd6de33f3251e91e46917b39a981549c20ffbdf5e63ab099f9a2ad7ecd60f5244a23595fd6d7a6f9ae580103b50fae42bca1c100e460a258254515840759426b9e92f2d6f8888e6122919e23ac96aa662f4e7eccfd997de37509ae319594a560de7e4e73722e4e1ddf81ef7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x8, 0x56, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x1, 0x26, 0x8, [@generic={0x8e, 0x4, "b51841ec14d2e6529664c3fb602a02277c00129440e0d7dfe4b6fd066a87d77e1eb61e4500bbc6c95b4854c9807bd617f66ba68427d35496e8462e8ca98464f487874b0b5725b03803e779af308ec7150fcc456c6069d8b464890918cccbe516dc58478a698a47f7b2c773e7b9fe61915a8662d7bc942d263447c06ad02252cea4a74f8723419d9d5e60722b"}, @generic={0xff, 0x22, "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"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0xb5, 0xfe, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xb4, 0xf, "9005040e0299618015e2dc2f9c6cddd96bfe7fc13eaac56b6a8af67b4840d20789cd1e5fb2ac23f8362c8e78f60fd9b7240c1cfca8b8d64939c6797f05e03f0bd4d24b6d121d2b5884e21b677a4b6cafbdd11de24ac33a977912a9891a2c1fb9837ea143bd88926b4c5cb6062c415803c47ce3e30bf77a45f63756a09aa48e9a1c247a5412ccd2682795e02fb0ebed308f409e5081414410048bca46f93463eb121f5603b4dd895a923b8881962ef036d561"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0xc, 0x1, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc5, 0x797}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x2, 0x4, [@generic={0x40, 0x23, "de902b21c7782ea5f1d40e475df92b46ac26ae6dd33a7e12bf8a5940093e069742972a1c5a3330376cd283f75d2ce6cbbe0ecd207744058974899610a762"}, @generic={0x68, 0x2, "f1d8597e19e69415fdbab79a2ee1deebe16c461e088c411580ba41197c6bf513311b567f548350d32ecc3b1f85bff1c33ec0551c3ad800d604f357025c18b70ca1ba2a75cd72177858d9d69bc0760b0d21504351a543e38e27d31185f8bd297e23458fec530d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x7, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7, 0x5, 0xff, [@generic={0x45, 0x5, "748cb61b8f2eecca6d821a17641160efcf7bfaba53819e7616c46212c213f2bd72aba772f6c45cf52360c78b8bcd58f58cd4c870461e6f20a3d9ad68cc37182a086e1a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xfd, 0x7f, 0x7}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x4, 0x7f, 0x4}}]}}, {{0x9, 0x4, 0x8e, 0xfd, 0x5, 0x42, 0x46, 0x6c, 0x3c, [@hid_hid={0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x958}}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x7}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x5, 0x6, "f8cdaba7"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x4, "93"}]}], [{{0x9, 0x5, 0xc, 0x1, 0x10, 0xe, 0x5, 0x5, [@generic={0x65, 0x21, "5f47923d2cd8a0e5a85a895f19720e424c0910c82b50379cea3610eb563317afe29c1e37f35c476c8e22253428f4cdb5c3dac663576868eb9eedccb142274c9cdb80df5f7c4f5a9b932f4debf97a27a67fd02987f1cf42455e215e4802a686b664493f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xb0, 0xc7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xc05e}, @generic={0xbe, 0x23, "19de476a350fb6f892b794fa500bfd9a5288fedc00d5f310dc6d0452f4751e471bcd68b7eef358e729bf9692622c14ce5e52b53bea81fe6fe3af17ede3e76aafe03ef2e10c21e4a2a1cf74858f8743cd67da5b0d1ab56892efdb6b644d64a450dc25bf432c09ae6cf8f9a1a2f90f34ff55390a2fa120be9d4b4d28e4364e9d6ded40461fc745c63a474e95c6893d434e3c0e1fb04b836f834df02228a975ecee6c751708d774a82b45adbaf3fe19b7c83e838bf4c80139104694443a"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x3, 0x34, 0x28}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xc8, 0x33, 0xa}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x51, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}]}}]}}, {{0x9, 0x4, 0xdd, 0x1, 0x10, 0xe6, 0xac, 0xa4, 0x57, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0552175f1c"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xfbe, 0x5, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0xa, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x1, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x3, 0xa, 0x16f, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x1, 0x7, 0x5}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0xc, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x2, 0xa4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x6d, 0x12}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x2, 0x3, 0x6, [@generic={0x72, 0x5, "913538ecfc27a1375e62ec3cc2c33ee1e402b7dcaf1474df4aa2fc3b60e0f7ef2d55f999986f400d7e17753506fced51c9d239ca381c2304c27e9ee99ac170b1984b57327a9cccce4cf859f8b3602b0be9e44cd204c72a0bf9f78bb411ccb13b3210341d078dd1052b5372fc1c4a83e8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x6, 0x4}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x2, 0xf2}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x1, 0xb3, 0xb}}, {{0x9, 0x5, 0xd, 0x0, 0x19f, 0x2, 0x56, 0xe}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x8, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3, 0x0, 0xd, 0xda, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xb7, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x0, 0x3, 0x1, [@generic={0xcb, 0xc, "98d6860e0961676fca172654542a0f81f5c9c8d6c1a0bc05b55aeb05db59b687560e38ca2de48b4956c20b148b56fb4d06585a7c2ae2f074c7417a6b8eb6f5431e9f183e114b3e40799c1e88f45ab45177f9c5665eb6c7a1d4723567bd200885a9ab67a0ed9b0ff76b92b964b16c3863fc3984c3ed67779e5221d79426804880700e2ac9480ce001fb08b8322917767591914c2a681fa0d1c6ae5f6651598c11d1080e63ad0e689114604aa541985ccc79fb99fad8ae556cedf3a090905a7487591d8d9f0daacf1f0a"}, @generic={0xa, 0xb, "d19a7cd29d8a6aa6"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7f, 0x7, 0xff}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x6, 0x7, 0x7, [@generic={0xd2, 0x8, "637e86cfc7dc4f41c221cf7500e7119f3f37d8e021e0935006c37f3eb13c8489d23f3293e4cd5331accd79462c735df973b80dcff5e01a1e791d8334225beabf36eff7b1b1f1b84ea9a8f167b53c954154f7945a3cbd7e0ef064b1495d2fbca25ca2553e0e7793cbdde2b9b741d6182a8effea150d92e25b20c794542cd2ba8b58c5818660eb9e1aa1f77b2e3ef982845a5882e0d804c2f5de226dc8057fc24ff871a7d64a283ea4e0dfe51365f9921a9b86c72e41157b5f00b11384e63a4b9f0d41c0a2608aa637af6111c50e77ab40"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x7, 0x0, 0x10}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0xff, 0x7, 0x8, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0xbd, &(0x7f00000005c0)=@string={0xbd, 0x3, "8303b9608eb6a12d837feba4ed7311138b1a0732a6ba81246b48ae6c6a9780462f514ae292cbb7d91d483c92b3f1c8b7e8f8518b15d0ee4707c4a92b091793951cb6e0582c31fb9a3213d395a56fd8144c2035d7d8e56381ffad43cf136bb8eb17788b6681af2996cbbd7dc070127cb3a9dee0394661c267cd475cb1b71a69aec10710afb224a52849bef486e24304d136583617f11cf2611880b196d5260ba6f571fd6d5bf0bd208b1663930614a222525b4e01fe869d92db1d45"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x407}}, {0x99, &(0x7f0000000680)=@string={0x99, 0x3, "0a2f9d1ec367fb7e24376500d5e3b5364064c07d1a91301cc9f7be1e35f2856bcf5d10cdfab72645a79261ad970585923ed695e8a00760fe3d263dd9321689b2727c88809c1d6298580b06ca6c88f5e80bc52427a2c2c450d68f9a5ae1e381e77da3f3e049957d0ad6b81e0f722b75e3d27b585bf978173cc408e97cdc1edf477dbbc14ef11d88028b4ba3ecacc0734bab191e66362e80"}}, {0xb3, &(0x7f00000007c0)=@string={0xb3, 0x3, "d12690268e0b7366637f6555bfb07f71b548e590a08d47141aac7c136f1e09e7ed58cd123fa521858832cae2a86998d614a2910d446dbd9deac6406e9bca53bcb921b50cbdeadd46bfaa195a806328d549012f50cedf8d531be356550c13ca29a57640a2677d77ee833e6ccc0eb513edfbd99f793abb432205feb39a8b66f70760608aece6a175868c923d70c0e2681aa71da14249d75913beaf0ea3566984963222091d94aec703ae20951c2c9d75da99"}}]}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xe, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000c1de8916fe06e16f681100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_usb_ep_write(r0, 0x1, 0xd7, &(0x7f0000000880)="eb564cb1faf8b46a18d507e94b0761f2634f97bd7adbf31cf5155352a7692cb819bda0b33a0af0534d096d04e8320d091072967aee1aa01d0e4f5c4c3a7714782f98090a23a2917931e2133078e1114af95421d2ce17e59bef01ca5348139c69bdd683a7ce9d45ca58175a730228bb5a466acab0914a5d78c51f792f41d48da77680903390361982e8ea88949206198dbd972016d316d24598dcb43ccbb159e79a9c0a148cf6d309b6f1ab62ecd7020a35c4d4a03b59d67ad0bc249caefd44a2837a38a8e841b86cc1bf2d1f517d7d4efe22271d62b949") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000004c0)=""/197) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0x1880, 0x1, 0x8000, 0x1}, 0x1ff, 0x1, 0x401, 0x1, 0x6, 0xa, 0x18, 0xd, 0x6, 0x7ff, {0x7, 0x5, 0xfff, 0x63, 0xffffffff, 0x7ff}}}}]}, 0x78}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f400000013002f0a29bd7200fcdbdf2507006800", @ANYRES32=r5, @ANYBLOB="000000001020060024001a8009000100766c616e000000001400048010000480"], 0xf4}}, 0x4050) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0x6f, {0x6f, 0xc, "c5f8b41970b01e19fb9b5ac4c96c86db0f84ab6869acc2abcc0facc922a6a1334395c00b3c5322f8b1eb84335918e05fcb82247d921d437b9c90ec783f6c6d3c5c196cd07c0f9f017a2bd3ae66188bdda15786608231fa375102d697f0194925e64a091bfbbe2d7e8bcc94d9a0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m22.883876434s ago: executing program 4 (id=261): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fanotify_init(0x0, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb6}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x15, 0x8, 0x3ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fanotify_mark(r0, 0x641, 0x1800, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x1, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xfd, {{0x8, 0x24, 0x6, 0x0, 0x0, "0c8e65"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffff0000, 0x4, 0x5, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0xcb29caa51cb78436, 0x59}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x70693625372ce662, 0xb3, 0x8, 0x7}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x240, 0x80, 0x3, 0xf0, 0x10, 0x6}, 0x21, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2100011c100a080400000000080200001a42000fc00000503f000030000000"], 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}, {0xfffffffffffffcad, &(0x7f00000002c0)=@string={0xc4, 0x3, "d6ee2af0c38044257324e4a7596cbda60e37c1867a257212e43c5f9872faa24765fd98ee5f4ed10be705a7b50d2f3dd4f08a126a753d73f541dd0f3120229fb9734eba8a43e07b93e571075193f7fe71336cd30169dbda14f961e6f3624cfdc82aacd34deceb7f36207ff64d9baa328d1f74e160e2f8aee0bb1db29c593d7f0ec80de5db28a7ca805bf0f42cbc7d0b2dea4fe04babb03662e64a12959d73dfeb72ad18481bdf4f134da8ed90c50cd39b86b7333c0fa7076dfd731b872c6fd1aa3f53"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000440)=@string={0x0, 0x3, "016e9bc424e06cb1f2a63d5b2dc39aa2b8de7eacca786133c84720e4d4f42fca9357859cb687b2f8dd67af71f50e4fa19d82cca2199e75835b3881e75e22c66419ca20b9bb3d0f6f076fe4daacdaa0e5c687fd18e266bb15a63711f103a51d1f5c25c95f5138384bafe48bbe410394fbed0af9bd303dc91ebe1294087a7dab1531be2187f4262a5705e6adf889ca64522f26d6b512903b5ce6367291d3"}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "048a8dd2"}]}}, 0x0}, 0x0) 3m20.925015235s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$eJzs3c+KI0UYAPCvJ52ZRBeSgycRbNCDp2Fnn2AHGWFxTkof9KLiZkEmYWECgVUx7sm74Ml38Am8+ABeBB/Ag0fBm3sQW5Lu/J1O2JFMlPH3u8zXVfVVV1XXzECgKx++Mrh4+Hj46Onnv0SrlcTB/bgfz5LoxkHMfBkAwG3yrCji96IUcbi1bTqtLzrV1cF+RggA7Nrq/38A4P/g3ffef/v0/PzsnSxrRQy+GuVJRAySUV7Wnz6KT6Ifvbgbnfgzopgr4zsPzs8izbLZhwGjduQRgw9+rK5Pf4uY5p9EJ7pX8996cH52kpXi9cF4lE/uPPnZjBeSiNMiKTu6F514KaJoRtXJIv9eTX7kh/HGa99W4/+rF8fRiZ8+jsfRj4fTLhb5X5xk2ZvFN398Vs4gj0jGo/xo2m6haOztoQAAAAAAAAAAAAAAAAAAAAAAcOsdZ3Pd5fNzZqcBHh/X10/PB2rUnA9UnfAzXjpf526WZbNjfEZ5M8r8NF5OI/1XJw8AAAAAAAAAAAAAAAAAAAD/EcMnn1581O/3LleCH4r1kpqgeqM/qpJ0qSpdrdreT01w8V3E9bOeJ4hGNbR+cuUWswk9d4fp5sZH1xlYu66fONi0hmk/ysF/ff1FeHXrBBs1WcU/WOfZ7ppski2NGzF80ioneKe9WrW0M9tVZ5fD6QNqb9q0q0FRs3SNjVmHO9pjhy/udtNOZtycL+Zqm9bkSS6VNHf8m7ImuYk/PwAAAAAAAAAAAAAAAAAAwJLFS7/x65XKp1tTv//5BscFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPu0+P7/eRDd9ZL1YFwl9+rS14Kjy2HNbbt7niYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC33N8BAAD//w2EV5M=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m18.180650988s ago: executing program 4 (id=268): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x40) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x10) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000080)) 3m16.911295802s ago: executing program 4 (id=271): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c00a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000200)="$eJzs3T9rJGUYAPBnksnsngq7hZUIDmhhdVyutdkgFxBTeaRQCw3eHcjuItxBwD+4XmVrY2HhJxAEP4iN30CwFew85eCVmZ1hJ5fdNRvciN7v1+Thfd9n3mcmL8mkyLPvvzgd3ynj3sPPfo5+P4udUYziURbD2InWF3HG6KsAAP7LHqUUv6W5lYueOz+URUR/u6UBAFuy+vd/2YnzRfjDlZUGAGzJ7bffefPg6OjWW2XZj8Ppl6fH1V/21df5/MG9+DAmcTduxCAeR9QvCntRvy1U4WFKaZaXlWG8Mp2dHleZ0/d+bK5/8GtEnb8fgxjWQymlvA3S4RtHt/bLuU7+rKrjmWb/UZV/MwbxfLN/87bS5t9ckh/HRbz6cqf+6zGInz6Ij2ISd+q9F/mf75fl6+nr3z99t6qqys9mp8e9et1C2r3SbwwAAAAAAAAAAAAAAAAAAAAAAP9r15veOb0oh3/OewA2/Xd2H1fze1G2hmf788zzs/ZC3f5AKaVZim/b/jo3yrJMzcJFfh4v5N3GggAAAAAAAAAAAAAAAAAAAPD0evDxJ+OTyeTu/UsH12Ix0nYDyCPij9sRl73yqDPyUtRBvqrUXrPnyWSy04Rn1+Tdkdht12QRa8uobuLyj2W8yeJr52pugu++33T3/t+v2Vu+1z8ZtKdrfJItf4a9aEf6zSH5pojOQSrignsVq6ZSbHL8iqVTg43vvXi2DmZr1kS2rrDXfpk/uWYke/IuivqpLk3fa4JO+hNn40LnOfrz9PM/KzLdOgAAAAAAAAAAAAAAAAAAYKsW//27ZPLh2tSd1NtaWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpRaf/79BMGuSL7C4iPsP/uVbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CnwVwAAAP//NnNahw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r0, 0x0) prlimit64(r2, 0xa, &(0x7f0000000100)={0x5}, &(0x7f0000000140)) 3m1.234641252s ago: executing program 32 (id=271): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c00a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000200)="$eJzs3T9rJGUYAPBnksnsngq7hZUIDmhhdVyutdkgFxBTeaRQCw3eHcjuItxBwD+4XmVrY2HhJxAEP4iN30CwFew85eCVmZ1hJ5fdNRvciN7v1+Thfd9n3mcmL8mkyLPvvzgd3ynj3sPPfo5+P4udUYziURbD2InWF3HG6KsAAP7LHqUUv6W5lYueOz+URUR/u6UBAFuy+vd/2YnzRfjDlZUGAGzJ7bffefPg6OjWW2XZj8Ppl6fH1V/21df5/MG9+DAmcTduxCAeR9QvCntRvy1U4WFKaZaXlWG8Mp2dHleZ0/d+bK5/8GtEnb8fgxjWQymlvA3S4RtHt/bLuU7+rKrjmWb/UZV/MwbxfLN/87bS5t9ckh/HRbz6cqf+6zGInz6Ij2ISd+q9F/mf75fl6+nr3z99t6qqys9mp8e9et1C2r3SbwwAAAAAAAAAAAAAAAAAAAAAAP9r15veOb0oh3/OewA2/Xd2H1fze1G2hmf788zzs/ZC3f5AKaVZim/b/jo3yrJMzcJFfh4v5N3GggAAAAAAAAAAAAAAAAAAAPD0evDxJ+OTyeTu/UsH12Ix0nYDyCPij9sRl73yqDPyUtRBvqrUXrPnyWSy04Rn1+Tdkdht12QRa8uobuLyj2W8yeJr52pugu++33T3/t+v2Vu+1z8ZtKdrfJItf4a9aEf6zSH5pojOQSrignsVq6ZSbHL8iqVTg43vvXi2DmZr1kS2rrDXfpk/uWYke/IuivqpLk3fa4JO+hNn40LnOfrz9PM/KzLdOgAAAAAAAAAAAAAAAAAAYKsW//27ZPLh2tSd1NtaWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpRaf/79BMGuSL7C4iPsP/uVbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CnwVwAAAP//NnNahw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r0, 0x0) prlimit64(r2, 0xa, &(0x7f0000000100)={0x5}, &(0x7f0000000140)) 2m59.604570277s ago: executing program 1 (id=294): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x400400c0) 2m58.263259973s ago: executing program 1 (id=296): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m55.748355323s ago: executing program 1 (id=302): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101040, 0x0) r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x8000020, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ftruncate(r2, 0x3) 2m54.139912085s ago: executing program 1 (id=304): syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x804008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16], 0xff, 0x4c8, &(0x7f0000000440)="$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") r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf5, &(0x7f0000001a00)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) fadvise64(r0, 0xca, 0x4, 0x5) sync() socket(0x10, 0x6, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m51.818561021s ago: executing program 1 (id=307): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201120153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905e3"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x74}]}]}, 0x64}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000440)={[{@usrjquota}, {@data_err_ignore}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r1, &(0x7f00000001c0)=""/109, 0x6d) getdents(r1, &(0x7f0000000000)=""/38, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0xd) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x11, 0xf9, 0x6c, 0xeb, 0x8, 0x46d, 0x897, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x13, 0xb0, 0x6, [{{0x9, 0x4, 0x70, 0x81, 0x0, 0x96, 0xbd, 0x50, 0x5}}]}}]}}, 0x0) 2m49.401802123s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.326169829s ago: executing program 1 (id=310): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) (async) ioperm(0x0, 0x5, 0x4000000000000020) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file6\x00', 0x101442, 0xfb) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbaf52d03b9526362}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x44001}, 0x4001) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)) (async) syz_usb_disconnect(r0) (async, rerun: 32) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, &(0x7f0000000300)="c3", 0x1, 0x40010002}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@nolazytime}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async, rerun: 64) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) (async, rerun: 64) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc84119b613"], 0x381, 0x2) (async, rerun: 32) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m43.346690448s ago: executing program 33 (id=310): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) (async) ioperm(0x0, 0x5, 0x4000000000000020) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file6\x00', 0x101442, 0xfb) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbaf52d03b9526362}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x44001}, 0x4001) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)) (async) syz_usb_disconnect(r0) (async, rerun: 32) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, &(0x7f0000000300)="c3", 0x1, 0x40010002}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@nolazytime}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async, rerun: 64) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) (async, rerun: 64) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[@ANYBLOB="00fb8101408a9f9e8755f9a5a4c14af1c37801b23531862360e7c169ccfbb93fc84119b613"], 0x381, 0x2) (async, rerun: 32) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m11.576272446s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m34.032815901s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$eJzs3c+KI0UYAPCvJ52ZRBeSgycRbNCDp2Fnn2AHGWFxTkof9KLiZkEmYWECgVUx7sm74Ml38Am8+ABeBB/Ag0fBm3sQW5Lu/J1O2JFMlPH3u8zXVfVVV1XXzECgKx++Mrh4+Hj46Onnv0SrlcTB/bgfz5LoxkHMfBkAwG3yrCji96IUcbi1bTqtLzrV1cF+RggA7Nrq/38A4P/g3ffef/v0/PzsnSxrRQy+GuVJRAySUV7Wnz6KT6Ifvbgbnfgzopgr4zsPzs8izbLZhwGjduQRgw9+rK5Pf4uY5p9EJ7pX8996cH52kpXi9cF4lE/uPPnZjBeSiNMiKTu6F514KaJoRtXJIv9eTX7kh/HGa99W4/+rF8fRiZ8+jsfRj4fTLhb5X5xk2ZvFN398Vs4gj0jGo/xo2m6haOztoQAAAAAAAAAAAAAAAAAAAAAAcOsdZ3Pd5fNzZqcBHh/X10/PB2rUnA9UnfAzXjpf526WZbNjfEZ5M8r8NF5OI/1XJw8AAAAAAAAAAAAAAAAAAAD/EcMnn1581O/3LleCH4r1kpqgeqM/qpJ0qSpdrdreT01w8V3E9bOeJ4hGNbR+cuUWswk9d4fp5sZH1xlYu66fONi0hmk/ysF/ff1FeHXrBBs1WcU/WOfZ7ppski2NGzF80ioneKe9WrW0M9tVZ5fD6QNqb9q0q0FRs3SNjVmHO9pjhy/udtNOZtycL+Zqm9bkSS6VNHf8m7ImuYk/PwAAAAAAAAAAAAAAAAAAwJLFS7/x65XKp1tTv//5BscFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPu0+P7/eRDd9ZL1YFwl9+rS14Kjy2HNbbt7niYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC33N8BAAD//w2EV5M=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.761198022s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.155401357s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x380481d, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000080)) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.8270592s ago: executing program 2 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) 5.826519316s ago: executing program 3 (id=527): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.325864308s ago: executing program 3 (id=529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000e8b9d0fa3286c0d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) 4.272081583s ago: executing program 6 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) poll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x4230}, {0xffffffffffffffff, 0x4400}], 0x5b, 0x8000009) 4.222731362s ago: executing program 2 (id=531): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r5], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 4.01278641s ago: executing program 5 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1, 0x8, 0x4}, 0x14}}, 0x0) 3.303114443s ago: executing program 6 (id=533): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 2.867885114s ago: executing program 5 (id=534): bpf$MAP_CREATE(0x0, 0x0, 0x48) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 2.837580104s ago: executing program 2 (id=535): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.703995535s ago: executing program 3 (id=536): syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2.427788669s ago: executing program 6 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.251742967s ago: executing program 5 (id=538): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9003) 1.798861056s ago: executing program 6 (id=539): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) 1.579727569s ago: executing program 2 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 1.579174389s ago: executing program 5 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 1.511788838s ago: executing program 3 (id=542): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffb, @loopback, 0x800}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4014, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) 1.089820399s ago: executing program 6 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x17) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 824.199202ms ago: executing program 2 (id=544): r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 778.644685ms ago: executing program 5 (id=545): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') listxattr(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) 740.935458ms ago: executing program 3 (id=546): get_robust_list(0x0, 0x0, &(0x7f00000004c0)) 251.496994ms ago: executing program 6 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xf, 0x3a, &(0x7f0000000040)="b90108001f", 0x0, 0x80100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 185.955775ms ago: executing program 5 (id=548): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 105.539012ms ago: executing program 3 (id=549): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x10, 0x2, 0x0, 0x56, 0x101, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 2 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): on: batadv_slave_1 [ 479.722571][ T7900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.732816][ T7900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.744657][ T7900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.755995][ T7900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.767106][ T7900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.777362][ T7900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.788430][ T7900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.799482][ T7900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.810880][ T7900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.825018][ T7900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.007934][ T7900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.017159][ T7900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.026334][ T7900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.035485][ T7900] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.189531][ T8145] XFS (loop5): Ending clean mount [ 480.201338][ T8145] XFS (loop5): Quotacheck needed: Please wait. [ 480.450133][ T8145] XFS (loop5): Quotacheck: Done. [ 480.812993][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.635119][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'. [ 481.694443][ T8177] fuse: Unknown parameter 'euid>18446744073709551615' [ 481.760150][ T7711] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 482.746288][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.756321][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.916670][ T8180] loop3: detected capacity change from 0 to 2048 [ 482.990108][ T5861] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 483.211474][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 483.260170][ T8180] Bluetooth: MGMT ver 1.23 [ 483.264910][ T8180] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 483.562987][ T5861] usb 3-1: device descriptor read/all, error -71 [ 484.002109][ T8208] loop2: detected capacity change from 0 to 512 [ 484.112389][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.122444][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.139933][ T8208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 484.378514][ T8208] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.344: couldn't read orphan inode 26 (err -116) [ 484.457507][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.466587][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.487828][ T8208] EXT4-fs (loop2): Remounting filesystem read-only [ 484.497177][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.511722][ T8208] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.649855][ T8217] FAULT_INJECTION: forcing a failure. [ 484.649855][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 484.663525][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.3.345 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 484.663672][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 484.663745][ T8217] Call Trace: [ 484.663791][ T8217] [ 484.663839][ T8217] __dump_stack+0x26/0x30 [ 484.664000][ T8217] dump_stack_lvl+0x1df/0x270 [ 484.664171][ T8217] dump_stack+0x1e/0x25 [ 484.664305][ T8217] should_fail_ex+0x7dc/0x8a0 [ 484.664511][ T8217] should_fail+0x2a/0x40 [ 484.664724][ T8217] should_fail_usercopy+0x2e/0x40 [ 484.664894][ T8217] strncpy_from_user+0x38/0x470 [ 484.665046][ T8217] ? __msan_memcpy+0x108/0x1c0 [ 484.665179][ T8217] __se_sys_memfd_create+0x59b/0x11f0 [ 484.665347][ T8217] ? kmsan_get_metadata+0x105/0x1b0 [ 484.665515][ T8217] __x64_sys_memfd_create+0x78/0xb0 [ 484.665718][ T8217] x64_sys_call+0x15be/0x3db0 [ 484.665886][ T8217] do_syscall_64+0xd9/0x1b0 [ 484.666033][ T8217] ? irqentry_exit+0x16/0x60 [ 484.666163][ T8217] ? clear_bhb_loop+0x25/0x80 [ 484.666301][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.666447][ T8217] RIP: 0033:0x7fcd0098e969 [ 484.666542][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.666684][ T8217] RSP: 002b:00007fcd017e8e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 484.666815][ T8217] RAX: ffffffffffffffda RBX: 0000000000005a6b RCX: 00007fcd0098e969 [ 484.666911][ T8217] RDX: 00007fcd017e8ef0 RSI: 0000000000000000 RDI: 00007fcd00a11444 [ 484.667006][ T8217] RBP: 00002000000068c0 R08: 00007fcd017e8bb7 R09: 00007fcd017e8e40 [ 484.667104][ T8217] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 484.667191][ T8217] R13: 00007fcd017e8ef0 R14: 00007fcd017e8eb0 R15: 0000200000000640 [ 484.667320][ T8217] [ 485.189827][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.970647][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 486.063771][ T5036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.169020][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 486.254476][ T24] usb 6-1: config 175 has an invalid descriptor of length 84, skipping remainder of the config [ 486.265437][ T24] usb 6-1: config 175 has 0 interfaces, different from the descriptor's value: 1 [ 486.275190][ T24] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 486.287878][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.310201][ T5036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.531120][ T5036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.003366][ T5036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.229272][ T8237] loop2: detected capacity change from 0 to 32768 [ 487.236475][ T24] usb 6-1: string descriptor 0 read error: -71 [ 487.304825][ T24] usb 6-1: USB disconnect, device number 2 [ 487.449624][ T8237] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 487.449624][ T8237] allowing incompatible features above 0.0: (unknown version) [ 487.476853][ T8237] bcachefs (loop2): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 487.476991][ T8237] size == 0, deleting [ 487.502914][ T8237] bcachefs (loop2): invalid bkey in superblock btree=dirents level=1: u64s 11 type extent SPOS_MAX len 0 ver 281474976710656: durability: 0 (invalid extent entry 0000000000000000) [ 487.503032][ T8237] invalid key type for btree internal btree node (extent), deleting [ 487.531454][ T8237] bcachefs (loop2): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 255 ver 18446462598732840960: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 487.534117][ T8237] size != 0, deleting [ 487.564176][ T8237] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 487.573765][ T8237] bcachefs (loop2): Version upgrade required: [ 487.573765][ T8237] Version upgrade from 0.12: snapshot to 1.7: mi_btree_bitmap incomplete [ 487.573765][ T8237] Doing incompatible version upgrade from 0.12: snapshot to 1.25: extent_flags [ 487.573765][ T8237] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 487.669981][ T8237] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree inodes level 0/0 [ 487.670090][ T8237] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 487.670210][ T8237] node offset 16/24 bset u64s 110 bset byte offset 792: keys out of order: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0, fixing [ 487.721303][ T8237] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 0:74:U32_MAX len 0 ver 0: [ 487.721418][ T8237] mode=40755 [ 487.721474][ T8237] flags=(16300000) [ 487.721530][ T8237] journal_seq=4 [ 487.721588][ T8237] hash_seed=28e4f092a4fc58ee [ 487.721649][ T8237] hash_type=siphash [ 487.721708][ T8237] bi_size=0 [ 487.721784][ T8237] bi_sectors=0 [ 487.721841][ T8237] bi_version=0 [ 487.721900][ T8237] bi_atime=200535484 [ 487.721964][ T8237] bi_ctime=2780562352 [ 487.722027][ T8237] bi_mtime=2780562352 [ 487.722090][ T8237] bi_otime=200535484 [ 487.722152][ T8237] bi_uid=0 [ 487.722208][ T8237] bi_gid=0 [ 487.722264][ T8237] bi_nlink=2 [ 487.722332][ T8237] bi_generation=0 [ 487.722388][ T8237] bi_dev=0 [ 487.722444][ T8237] bi_data_checksum=0 [ 487.722503][ T8237] bi_compression=0 [ 487.722564][ T8237] bi_project=0 [ 487.722629][ T8237] bi_background_compression=0 [ 487.722691][ T8237] bi_data_replicas=0 [ 487.722749][ T8237] bi_promote_target=0 [ 487.722807][ T8237] bi_foreground_target=0 [ 487.722865][ T8237] bi_background_target=0 [ 487.722922][ T8237] bi_erasure_code=0 [ 487.722977][ T8237] bi_fields_set=0 [ 487.723042][ T8237] bi_dir=0 [ 487.723094][ T8237] bi_dir_offset=0 [ 487.723166][ T8237] bi_subvol=1 [ 487.723221][ T8237] bi_parent_subvol=0 [ 487.723286][ T8237] bi_nocow=0 [ 487.723340][ T8237] bi_depth=0 [ 487.723395][ T8237] bi_inodes_32bit=0 [ 487.723452][ T8237] fs inode in blockdev range, deleting [ 487.890608][ T8237] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0: (unpack error) [ 487.890722][ T8237] nonzero k.p.inode, deleting [ 487.912055][ T8237] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 487.912055][ T8237] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 487.969521][ T8237] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 487.969620][ T8237] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 487.969729][ T8237] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 488.012274][ T8237] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree alloc level 0/0 [ 488.012376][ T8237] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 488.012491][ T8237] node offset 16/24 bset u64s 0: unsupported bset version 3.519 [ 488.050052][ T8237] bcachefs (loop2): flagging btree alloc lost data [ 488.056861][ T8237] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 488.071297][ T8237] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 488.123439][ T8237] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree freespace level 0/0 [ 488.123550][ T8237] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 488.123651][ T8237] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 488.123735][ T8237] inconsistency detected - emergency read only at journal seq 10 [ 488.171656][ T8237] bcachefs (loop2): flagging btree freespace lost data [ 488.180738][ T8237] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 488.208926][ T8237] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree backpointers level 0/0 [ 488.209024][ T8237] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 488.209120][ T8237] node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 18446744073709551615 + 0 > 4294967295 [ 488.209229][ T8237] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 255:0, 0:0, btree topology error: [ 488.259291][ T8237] bcachefs (loop2): flagging btree backpointers lost data [ 488.268517][ T8237] bcachefs (loop2): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 488.288989][ T8237] bcachefs (loop2): check_topology... done [ 488.295991][ T8237] bcachefs (loop2): accounting_read... done [ 488.337134][ T8237] bcachefs (loop2): alloc_read... done [ 488.340186][ T5036] bridge_slave_1: left allmulticast mode [ 488.343312][ T8237] bcachefs (loop2): snapshots_read... [ 488.348950][ T5036] bridge_slave_1: left promiscuous mode [ 488.349944][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.356473][ T8237] done [ 488.375623][ T8237] bcachefs (loop2): done starting filesystem [ 488.571161][ T5036] bridge_slave_0: left allmulticast mode [ 488.577066][ T5036] bridge_slave_0: left promiscuous mode [ 488.585006][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.740869][ T5805] bcachefs (loop2): shutting down [ 489.090163][ T5805] bcachefs (loop2): shutdown complete [ 489.640647][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.713236][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.754742][ T5036] bond0 (unregistering): Released all slaves [ 490.161767][ T3882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.170185][ T3882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.485529][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.493897][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.651033][ T5036] hsr_slave_0: left promiscuous mode [ 490.678802][ T5036] hsr_slave_1: left promiscuous mode [ 490.686959][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.694962][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.782239][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.791415][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.849297][ T5036] veth1_macvtap: left promiscuous mode [ 490.855058][ T5036] veth0_macvtap: left promiscuous mode [ 490.861109][ T5036] veth1_vlan: left promiscuous mode [ 490.866663][ T5036] veth0_vlan: left promiscuous mode [ 491.629620][ T8263] loop5: detected capacity change from 0 to 8 [ 492.295679][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 492.401117][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.410971][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.420916][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.435257][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.446506][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.495060][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 492.972803][ T8276] Invalid ELF header len 3 [ 493.016350][ T8276] loop5: detected capacity change from 0 to 64 [ 493.154882][ T8276] hfs: Unknown parameter 'D' [ 493.914633][ T8280] loop5: detected capacity change from 0 to 512 [ 493.951464][ T8280] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 493.963566][ T8280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 493.972968][ T8280] EXT4-fs (loop5): orphan cleanup on readonly fs [ 493.981174][ T8280] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 493.993064][ T8280] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 494.005018][ T8280] EXT4-fs (loop5): 1 truncate cleaned up [ 494.013117][ T8280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 494.092449][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.522448][ T8287] loop3: detected capacity change from 0 to 128 [ 494.529672][ T5807] Bluetooth: hci0: command tx timeout [ 494.532041][ T8287] EXT4-fs: Ignoring removed nobh option [ 494.542054][ T8287] ext4: Unknown parameter 'obj_role' [ 494.962726][ T8289] 9pnet_fd: Insufficient options for proto=fd [ 495.004079][ T8296] loop2: detected capacity change from 0 to 1024 [ 495.152815][ T8296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.558952][ T30] audit: type=1804 audit(1746310620.451:69): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.354" name="/newroot/99/file0/bus" dev="overlay" ino=594 res=1 errno=0 [ 495.581201][ T30] audit: type=1804 audit(1746310620.461:70): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.354" name="/newroot/99/file0/bus" dev="overlay" ino=594 res=1 errno=0 [ 496.051728][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 496.110954][ T8296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.139739][ T5861] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 496.368853][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 496.479341][ T5861] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 496.488060][ T5861] usb 4-1: config 0 has no interface number 0 [ 496.494690][ T5861] usb 4-1: config 0 interface 184 has no altsetting 0 [ 496.599983][ T5807] Bluetooth: hci0: command tx timeout [ 496.732121][ T5861] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 496.742166][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.751353][ T5861] usb 4-1: Product: syz [ 496.755738][ T5861] usb 4-1: Manufacturer: syz [ 496.760972][ T5861] usb 4-1: SerialNumber: syz [ 496.982027][ T5861] usb 4-1: config 0 descriptor?? [ 497.195389][ T5861] smsc75xx v1.0.0 [ 497.369962][ T8321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 498.087854][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.329314][ T5861] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 498.340730][ T5861] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 498.474929][ T5861] usb 4-1: USB disconnect, device number 24 [ 498.710061][ T5807] Bluetooth: hci0: command tx timeout [ 498.819487][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.827135][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.836150][ T8270] bridge_slave_0: entered allmulticast mode [ 498.845228][ T8270] bridge_slave_0: entered promiscuous mode [ 498.976217][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.983871][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.991656][ T8270] bridge_slave_1: entered allmulticast mode [ 499.002643][ T8270] bridge_slave_1: entered promiscuous mode [ 499.611212][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.840981][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.870678][ T8356] loop6: detected capacity change from 0 to 128 [ 500.020499][ T8359] loop2: detected capacity change from 0 to 512 [ 500.038094][ T8359] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 500.046447][ T8359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 500.055703][ T8359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 500.063258][ T8359] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #13: comm syz.2.367: iget: bad extra_isize 13 (inode size 256) [ 500.064439][ T8356] EXT4-fs: Ignoring removed nobh option [ 500.082253][ T8359] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.367: couldn't read orphan inode 13 (err -117) [ 500.098047][ T8359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 500.201778][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.241671][ T8270] team0: Port device team_slave_0 added [ 500.313832][ T8270] team0: Port device team_slave_1 added [ 500.726384][ T8368] loop5: detected capacity change from 0 to 16 [ 500.764352][ T5807] Bluetooth: hci0: command tx timeout [ 500.801627][ T8368] erofs (device loop5): mounted with root inode @ nid 36. [ 500.806225][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.816194][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.843288][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.862457][ T8356] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 500.874533][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.883245][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.910249][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.979894][ T8368] erofs (device loop5): corrupted dir block 8200 @ nid 36 [ 501.129268][ T8356] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 501.602209][ T8270] hsr_slave_0: entered promiscuous mode [ 501.612687][ T8270] hsr_slave_1: entered promiscuous mode [ 501.647196][ T8356] FAULT_INJECTION: forcing a failure. [ 501.647196][ T8356] name failslab, interval 1, probability 0, space 0, times 1 [ 501.660907][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.6.364 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 501.661043][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 501.661118][ T8356] Call Trace: [ 501.661165][ T8356] [ 501.661210][ T8356] __dump_stack+0x26/0x30 [ 501.661366][ T8356] dump_stack_lvl+0x1df/0x270 [ 501.661527][ T8356] dump_stack+0x1e/0x25 [ 501.661669][ T8356] should_fail_ex+0x7dc/0x8a0 [ 501.661875][ T8356] should_failslab+0x15b/0x200 [ 501.662042][ T8356] __kmalloc_noprof+0x182/0x1310 [ 501.662218][ T8356] ? tomoyo_encode+0x626/0xa10 [ 501.662374][ T8356] ? prepend_path+0xff2/0x10c0 [ 501.662523][ T8356] ? kmsan_get_metadata+0x105/0x1b0 [ 501.662681][ T8356] ? kmsan_get_metadata+0x105/0x1b0 [ 501.662863][ T8356] tomoyo_encode+0x626/0xa10 [ 501.663049][ T8356] tomoyo_realpath_from_path+0x92e/0x9f0 [ 501.663247][ T8356] tomoyo_path_perm+0x249/0x9a0 [ 501.663426][ T8356] ? kmsan_get_metadata+0x105/0x1b0 [ 501.663608][ T8356] tomoyo_file_truncate+0x39/0x50 [ 501.663775][ T8356] security_file_truncate+0x11e/0x500 [ 501.663944][ T8356] do_ftruncate+0x301/0x730 [ 501.664115][ T8356] __x64_sys_ftruncate+0x11b/0x240 [ 501.664279][ T8356] x64_sys_call+0xfe3/0x3db0 [ 501.664470][ T8356] do_syscall_64+0xd9/0x1b0 [ 501.664667][ T8356] ? irqentry_exit+0x16/0x60 [ 501.664818][ T8356] ? clear_bhb_loop+0x25/0x80 [ 501.664973][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.665131][ T8356] RIP: 0033:0x7f79fc98e969 [ 501.665231][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.665354][ T8356] RSP: 002b:00007f79fd7ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 501.665487][ T8356] RAX: ffffffffffffffda RBX: 00007f79fcbb5fa0 RCX: 00007f79fc98e969 [ 501.665584][ T8356] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 501.665663][ T8356] RBP: 00007f79fd7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 501.665750][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.665838][ T8356] R13: 0000000000000000 R14: 00007f79fcbb5fa0 R15: 00007ffc68495a38 [ 501.665962][ T8356] [ 501.666933][ T8356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.947586][ T8378] loop5: detected capacity change from 0 to 1024 [ 501.978369][ T8382] loop2: detected capacity change from 0 to 512 [ 502.067568][ T8378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.116009][ T8382] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 502.230789][ T8382] EXT4-fs (loop2): orphan cleanup on readonly fs [ 502.338433][ T8382] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 502.350901][ T8382] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 502.361403][ T8382] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.371: Failed to acquire dquot type 1 [ 502.423796][ T8378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.480028][ T8382] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.371: bg 0: block 40: padding at end of block bitmap is not set [ 502.558475][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.372'. [ 502.568010][ T8382] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 502.614663][ T8382] EXT4-fs (loop2): 1 truncate cleaned up [ 502.623322][ T8382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.666827][ T8390] loop3: detected capacity change from 0 to 128 [ 502.719062][ T8390] EXT4-fs: Ignoring removed nobh option [ 502.779941][ T8377] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 502.923590][ T8390] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.996557][ T8390] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 503.064289][ T7900] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.213806][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.535188][ T8378] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 503.738060][ T5807] Bluetooth: hci0: command 0x0401 tx timeout [ 503.753459][ T8397] loop2: detected capacity change from 0 to 512 [ 503.769582][ T8270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.792528][ T8270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.828377][ T8397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.881177][ T8397] EXT4-fs (loop2): 1 truncate cleaned up [ 503.910328][ T8397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.037515][ T8270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.142580][ T8270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.201635][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.364968][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.929022][ T5861] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 504.972037][ T5814] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.017652][ T8402] loop6: detected capacity change from 0 to 512 [ 505.216132][ T5861] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 505.226044][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.234493][ T5861] usb 6-1: Product: syz [ 505.238984][ T5861] usb 6-1: Manufacturer: syz [ 505.243807][ T5861] usb 6-1: SerialNumber: syz [ 505.392090][ T8402] EXT4-fs: Ignoring removed orlov option [ 505.455451][ T5861] usb 6-1: config 0 descriptor?? [ 505.615100][ T8402] EXT4-fs (loop6): Test dummy encryption mode enabled [ 505.622800][ T8402] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 505.640484][ T8407] loop2: detected capacity change from 0 to 32768 [ 505.651842][ T8407] btrfs: Deprecated parameter 'usebackuproot' [ 505.661145][ T8407] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 505.676658][ T8407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.377 (8407) [ 505.732442][ T8407] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 505.743058][ T8407] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 505.753067][ T8407] BTRFS info (device loop2): disk space caching is enabled [ 505.762590][ T5861] hso 6-1:0.0: Failed to find BULK IN ep [ 505.769947][ T8407] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 505.793587][ T5861] usb-storage 6-1:0.0: USB Mass Storage device detected [ 506.168174][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.179215][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.294382][ T8407] BTRFS info (device loop2): rebuilding free space tree [ 506.334471][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.360512][ T8407] BTRFS info (device loop2): disabling free space tree [ 506.367905][ T8407] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 506.380965][ T8407] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 506.487906][ T5861] usb 6-1: USB disconnect, device number 3 [ 506.532504][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.688560][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.696201][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.807052][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.814644][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.856289][ T8402] EXT4-fs (loop6): 1 truncate cleaned up [ 506.864364][ T8402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.682356][ T8433] loop3: detected capacity change from 0 to 32768 [ 507.979779][ T8433] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.160157][ T5805] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 508.440995][ T8433] XFS (loop3): Ending clean mount [ 508.747167][ T7900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.187031][ T8450] loop5: detected capacity change from 0 to 32768 [ 509.221438][ T8433] XFS (loop3): Quotacheck needed: Please wait. [ 509.420194][ T8461] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 509.564945][ T8433] XFS (loop3): Quotacheck: Done. [ 509.740273][ T8450] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 509.740273][ T8450] allowing incompatible features above 0.0: (unknown version) [ 509.770716][ T8450] bcachefs (loop5): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 509.770832][ T8450] size == 0, deleting [ 509.796639][ T8450] bcachefs (loop5): invalid bkey in superblock btree=dirents level=1: u64s 11 type extent SPOS_MAX len 0 ver 281474976710656: durability: 0 (invalid extent entry 0000000000000000) [ 509.796752][ T8450] invalid key type for btree internal btree node (extent), deleting [ 509.827166][ T8450] bcachefs (loop5): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 255 ver 18446462598732840960: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 509.827296][ T8450] size != 0, deleting [ 509.853790][ T8450] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 509.862484][ T5814] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 509.875442][ T8450] bcachefs (loop5): Version upgrade required: [ 509.875442][ T8450] Version upgrade from 0.12: snapshot to 1.7: mi_btree_bitmap incomplete [ 509.875442][ T8450] Doing incompatible version upgrade from 0.12: snapshot to 1.25: extent_flags [ 509.875442][ T8450] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 509.999865][ T8450] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree inodes level 0/0 [ 509.999976][ T8450] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 510.000098][ T8450] node offset 16/24 bset u64s 110 bset byte offset 792: keys out of order: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0, fixing [ 510.051976][ T8450] bcachefs (loop5): invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 0:74:U32_MAX len 0 ver 0: [ 510.052072][ T8450] mode=40755 [ 510.052126][ T8450] flags=(16300000) [ 510.052181][ T8450] journal_seq=4 [ 510.052240][ T8450] hash_seed=28e4f092a4fc58ee [ 510.052298][ T8450] hash_type=siphash [ 510.052353][ T8450] bi_size=0 [ 510.052403][ T8450] bi_sectors=0 [ 510.052456][ T8450] bi_version=0 [ 510.052507][ T8450] bi_atime=200535484 [ 510.052563][ T8450] bi_ctime=2780562352 [ 510.052617][ T8450] bi_mtime=2780562352 [ 510.052673][ T8450] bi_otime=200535484 [ 510.052728][ T8450] bi_uid=0 [ 510.052777][ T8450] bi_gid=0 [ 510.052825][ T8450] bi_nlink=2 [ 510.052877][ T8450] bi_generation=0 [ 510.052935][ T8450] bi_dev=0 [ 510.052995][ T8450] bi_data_checksum=0 [ 510.053081][ T8450] bi_compression=0 [ 510.053133][ T8450] bi_project=0 [ 510.053186][ T8450] bi_background_compression=0 [ 510.053256][ T8450] bi_data_replicas=0 [ 510.053312][ T8450] bi_promote_target=0 [ 510.053370][ T8450] bi_foreground_target=0 [ 510.053426][ T8450] bi_background_target=0 [ 510.053483][ T8450] bi_erasure_code=0 [ 510.053537][ T8450] bi_fields_set=0 [ 510.053591][ T8450] bi_dir=0 [ 510.053662][ T8450] bi_dir_offset=0 [ 510.053718][ T8450] bi_subvol=1 [ 510.053776][ T8450] bi_parent_subvol=0 [ 510.053832][ T8450] bi_nocow=0 [ 510.053889][ T8450] bi_depth=0 [ 510.053944][ T8450] bi_inodes_32bit=0 [ 510.054004][ T8450] fs inode in blockdev range, deleting [ 510.223192][ T8450] bcachefs (loop5): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0: (unpack error) [ 510.223301][ T8450] nonzero k.p.inode, deleting [ 510.244519][ T8450] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 510.244519][ T8450] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 510.293764][ T8450] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree alloc level 0/0 [ 510.293879][ T8450] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 510.293990][ T8450] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 510.336635][ T8450] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree alloc level 0/0 [ 510.336733][ T8450] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 510.336818][ T8450] node offset 16/24 bset u64s 0: unsupported bset version 3.519 [ 510.374498][ T8450] bcachefs (loop5): flagging btree alloc lost data [ 510.381823][ T8450] bcachefs (loop5): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 510.395454][ T8450] bcachefs (loop5): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 510.459965][ T8450] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree freespace level 0/0 [ 510.460089][ T8450] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 510.460217][ T8450] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 510.460313][ T8450] inconsistency detected - emergency read only at journal seq 10 [ 510.509103][ T8450] bcachefs (loop5): flagging btree freespace lost data [ 510.517983][ T8450] bcachefs (loop5): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 510.535747][ T8450] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree backpointers level 0/0 [ 510.535853][ T8450] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 510.535962][ T8450] node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 18446744073709551615 + 0 > 4294967295 [ 510.536049][ T8450] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 255:0, 0:0, btree topology error: [ 510.586745][ T8450] bcachefs (loop5): flagging btree backpointers lost data [ 510.596155][ T8450] bcachefs (loop5): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 510.666454][ T8450] bcachefs (loop5): check_topology... done [ 510.677764][ T8450] bcachefs (loop5): accounting_read... done [ 510.685833][ T8450] bcachefs (loop5): alloc_read... done [ 510.691941][ T8450] bcachefs (loop5): snapshots_read... done [ 510.701974][ T8450] bcachefs (loop5): done starting filesystem [ 510.829781][ T7711] bcachefs (loop5): shutting down [ 511.014756][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.100233][ T7711] bcachefs (loop5): shutdown complete [ 511.569628][ T8270] veth0_vlan: entered promiscuous mode [ 511.717701][ T8270] veth1_vlan: entered promiscuous mode [ 511.744784][ T8473] loop6: detected capacity change from 0 to 128 [ 511.986408][ T8473] EXT4-fs: Ignoring removed nobh option [ 512.017468][ T8476] loop2: detected capacity change from 0 to 128 [ 512.028378][ T8476] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 512.206792][ T8270] veth0_macvtap: entered promiscuous mode [ 512.467752][ T8270] veth1_macvtap: entered promiscuous mode [ 512.855445][ T8476] loop2: detected capacity change from 0 to 32768 [ 512.996007][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.007015][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.017286][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.029775][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.040891][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.051906][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.063688][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.074469][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.085368][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.096679][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.111349][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.198016][ T8476] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 513.312679][ T8473] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.376552][ T8476] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x421 dinode [ 513.387790][ T8476] XFS (loop2): Unmount and run xfs_repair [ 513.394031][ T8476] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 513.401813][ T8476] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 513.411194][ T8476] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 513.420431][ T8476] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f 41 b3 80 ..e.....4.Xh.A.. [ 513.429782][ T8476] 00000030: 34 f7 58 68 7f 41 b3 80 00 00 00 00 00 00 00 00 4.Xh.A.......... [ 513.443144][ T8476] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 513.452410][ T8476] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 513.461649][ T8476] 00000060: ff ff ff ff b9 b2 13 76 00 00 00 00 00 00 00 02 .......v........ [ 513.470864][ T8476] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 513.480173][ T8476] XFS (loop2): metadata inode 0x421 type 5 is corrupt [ 513.487258][ T8476] XFS (loop2): failed to read RT inodes [ 513.493319][ T8476] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 513.551315][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.562123][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.572417][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.583191][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.593390][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.604135][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.614419][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.625189][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.635913][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.649385][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.665338][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.694494][ T8473] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.812923][ T8270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.822265][ T8270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.831656][ T8270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.841434][ T8270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.212292][ T8493] loop7: detected capacity change from 0 to 8 [ 514.222468][ T8493] Dev loop7: unable to read RDB block 8 [ 514.228361][ T8493] loop7: unable to read partition table [ 514.235783][ T8493] loop7: partition table beyond EOD, truncated [ 514.242476][ T8493] loop_reread_partitions: partition scan of loop7 (被x) failed (rc=-5) [ 515.004005][ T8493] loop2: detected capacity change from 0 to 32768 [ 515.432731][ T8493] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 515.432731][ T8493] allowing incompatible features above 0.0: (unknown version) [ 515.463548][ T8493] bcachefs (loop2): initializing new filesystem [ 515.474451][ T8493] bcachefs (loop2): going read-write [ 515.510096][ T8493] bcachefs (loop2): marking superblocks [ 515.568286][ T8493] bcachefs (loop2): initializing freespace [ 515.584556][ T8493] bcachefs (loop2): done initializing freespace [ 515.607404][ T8493] bcachefs (loop2): reading snapshots table [ 515.614058][ T8493] bcachefs (loop2): reading snapshots done [ 515.725149][ T8493] bcachefs (loop2): done starting filesystem [ 516.349333][ T5805] bcachefs (loop2): shutting down [ 516.354604][ T5805] bcachefs (loop2): going read-only [ 516.423057][ T5805] bcachefs (loop2): finished waiting for writes to stop [ 516.513088][ T5805] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 516.852507][ T5805] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 516.955864][ T5805] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 517.051181][ T5805] bcachefs (loop2): marking filesystem clean [ 517.235704][ T7900] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 517.302653][ T5805] bcachefs (loop2): shutdown complete [ 519.004893][ T8540] FAULT_INJECTION: forcing a failure. [ 519.004893][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 519.017962][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.6.388 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 519.018096][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 519.018172][ T8540] Call Trace: [ 519.018222][ T8540] [ 519.018266][ T8540] __dump_stack+0x26/0x30 [ 519.018429][ T8540] dump_stack_lvl+0x1df/0x270 [ 519.018592][ T8540] dump_stack+0x1e/0x25 [ 519.018728][ T8540] should_fail_ex+0x7dc/0x8a0 [ 519.018915][ T8540] should_failslab+0x15b/0x200 [ 519.019084][ T8540] kmem_cache_alloc_noprof+0xf0/0xec0 [ 519.019258][ T8540] ? security_file_alloc+0x7a/0x6e0 [ 519.019469][ T8540] ? kmsan_get_metadata+0x105/0x1b0 [ 519.019634][ T8540] ? kmsan_get_metadata+0x105/0x1b0 [ 519.019820][ T8540] security_file_alloc+0x7a/0x6e0 [ 519.020014][ T8540] init_file+0x91/0x330 [ 519.020197][ T8540] alloc_empty_file+0x165/0x5b0 [ 519.020384][ T8540] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 519.020568][ T8540] alloc_file_pseudo+0x1de/0x400 [ 519.020775][ T8540] __shmem_file_setup+0x378/0x4f0 [ 519.020919][ T8540] shmem_file_setup+0x61/0x80 [ 519.021066][ T8540] __se_sys_memfd_create+0x844/0x11f0 [ 519.021284][ T8540] ? kmsan_get_metadata+0x105/0x1b0 [ 519.021479][ T8540] __x64_sys_memfd_create+0x78/0xb0 [ 519.021676][ T8540] x64_sys_call+0x15be/0x3db0 [ 519.021850][ T8540] do_syscall_64+0xd9/0x1b0 [ 519.022015][ T8540] ? irqentry_exit+0x16/0x60 [ 519.022159][ T8540] ? clear_bhb_loop+0x25/0x80 [ 519.022321][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.022467][ T8540] RIP: 0033:0x7f79fc98e969 [ 519.022568][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.022689][ T8540] RSP: 002b:00007f79fd7cde18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 519.022822][ T8540] RAX: ffffffffffffffda RBX: 0000000000005a6b RCX: 00007f79fc98e969 [ 519.022917][ T8540] RDX: 00007f79fd7cdef0 RSI: 0000000000000000 RDI: 00007f79fca11444 [ 519.023008][ T8540] RBP: 00002000000068c0 R08: 00007f79fd7cdbb7 R09: 00007f79fd7cde40 [ 519.023104][ T8540] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 519.023191][ T8540] R13: 00007f79fd7cdef0 R14: 00007f79fd7cdeb0 R15: 0000200000000640 [ 519.023319][ T8540] [ 520.109347][ T8552] loop5: detected capacity change from 0 to 512 [ 520.250398][ T8552] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.389: casefold flag without casefold feature [ 520.356242][ T8552] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.389: couldn't read orphan inode 15 (err -117) [ 520.460326][ T8552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.997633][ T8560] loop3: detected capacity change from 0 to 164 [ 521.716978][ T8568] loop2: detected capacity change from 0 to 256 [ 521.804567][ T8568] exfat: Deprecated parameter 'utf8' [ 521.812061][ T8568] exfat: Invalid uid '0xffffffff' [ 521.854952][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.855051][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.023599][ T8568] loop2: detected capacity change from 0 to 128 [ 522.295262][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.295360][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.847572][ T8582] loop2: detected capacity change from 0 to 1024 [ 522.959837][ T8582] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 522.960106][ T8582] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 522.960344][ T8582] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 522.974882][ T8582] EXT4-fs (loop2): invalid journal inode [ 522.975015][ T8582] EXT4-fs (loop2): can't get journal size [ 522.991162][ T8582] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.392: blocks 2-2 from inode overlap system zone [ 523.027853][ T8582] EXT4-fs (loop2): failed to initialize system zone (-117) [ 523.028004][ T8582] EXT4-fs (loop2): mount failed [ 523.125608][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.557720][ T5036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.694657][ T5036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.877951][ T5036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.015927][ T8592] loop3: detected capacity change from 0 to 128 [ 524.051890][ T5861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 524.116771][ T5036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.249852][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 524.279370][ T5861] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 524.279518][ T5861] usb 6-1: config 0 has no interface number 0 [ 524.279665][ T5861] usb 6-1: config 0 interface 184 has no altsetting 0 [ 524.306375][ T5861] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 524.306517][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.306642][ T5861] usb 6-1: Product: syz [ 524.306736][ T5861] usb 6-1: Manufacturer: syz [ 524.306831][ T5861] usb 6-1: SerialNumber: syz [ 524.331172][ T5861] usb 6-1: config 0 descriptor?? [ 524.354648][ T5861] smsc75xx v1.0.0 [ 524.440528][ T30] audit: type=1800 audit(1746310649.331:71): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="bus" dev="loop3" ino=27 res=0 errno=0 [ 524.990625][ T5036] bridge_slave_1: left allmulticast mode [ 524.990791][ T5036] bridge_slave_1: left promiscuous mode [ 524.991890][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.008048][ T5036] bridge_slave_0: left allmulticast mode [ 525.008227][ T5036] bridge_slave_0: left promiscuous mode [ 525.009965][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.523515][ T5861] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 525.613587][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.672525][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.684807][ T5036] bond0 (unregistering): Released all slaves [ 526.135426][ T5861] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 526.135575][ T5861] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 526.135696][ T5861] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 526.135810][ T5861] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 526.138362][ T5861] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 526.156990][ T5861] usb 6-1: USB disconnect, device number 4 [ 526.643402][ T5036] hsr_slave_0: left promiscuous mode [ 526.657450][ T5036] hsr_slave_1: left promiscuous mode [ 526.663966][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.664108][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.676041][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.676213][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.759523][ T5036] veth1_macvtap: left promiscuous mode [ 526.759673][ T5036] veth0_macvtap: left promiscuous mode [ 526.759985][ T5036] veth1_vlan: left promiscuous mode [ 526.760219][ T5036] veth0_vlan: left promiscuous mode [ 527.609536][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 527.626822][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 528.642540][ T1671] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 528.721216][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 528.805681][ T1671] usb 3-1: Using ep0 maxpacket: 8 [ 528.827170][ T1671] usb 3-1: config 0 has no interfaces? [ 528.827336][ T1671] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.827481][ T1671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.828483][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.836339][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.839179][ T1671] usb 3-1: config 0 descriptor?? [ 528.847638][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.872017][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.876659][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.889057][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 528.912288][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.912415][ T24] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 528.912563][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 528.939548][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.939700][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 528.939831][ T24] usb 6-1: SerialNumber: syz [ 529.133803][ T8609] netlink: 52 bytes leftover after parsing attributes in process `syz.2.396'. [ 529.191758][ T24] usb 6-1: USB disconnect, device number 5 [ 529.277691][ T8616] loop3: detected capacity change from 0 to 256 [ 529.297143][ T8609] loop2: detected capacity change from 0 to 512 [ 529.342942][ T8616] exfat: Deprecated parameter 'utf8' [ 529.396570][ T8609] EXT4-fs: quotafile must be on filesystem root [ 529.402056][ T8616] exfat: Deprecated parameter 'namecase' [ 530.534141][ T8625] loop5: detected capacity change from 0 to 8 [ 530.591955][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 530.601302][ T8625] SQUASHFS error: Failed to read block 0x9b: -5 [ 530.607728][ T8625] SQUASHFS error: Unable to read metadata cache entry [99] [ 530.616304][ T8625] SQUASHFS error: Unable to read inode 0x127 [ 530.858796][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 530.919518][ T5803] Bluetooth: hci0: command tx timeout [ 531.255507][ T8633] FAULT_INJECTION: forcing a failure. [ 531.255507][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 531.270668][ T8633] CPU: 0 UID: 0 PID: 8633 Comm: syz.6.401 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 531.270792][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 531.270863][ T8633] Call Trace: [ 531.270906][ T8633] [ 531.270951][ T8633] __dump_stack+0x26/0x30 [ 531.271103][ T8633] dump_stack_lvl+0x1df/0x270 [ 531.271251][ T8633] dump_stack+0x1e/0x25 [ 531.271379][ T8633] should_fail_ex+0x7dc/0x8a0 [ 531.271556][ T8633] should_failslab+0x15b/0x200 [ 531.271707][ T8633] kmem_cache_alloc_noprof+0xf0/0xec0 [ 531.271873][ T8633] ? vm_area_alloc+0x5c/0x230 [ 531.272016][ T8633] ? kmsan_get_metadata+0x105/0x1b0 [ 531.272180][ T8633] vm_area_alloc+0x5c/0x230 [ 531.272328][ T8633] mmap_region+0x1859/0x48d0 [ 531.272592][ T8633] ? kmsan_get_metadata+0x105/0x1b0 [ 531.272753][ T8633] do_mmap+0x1881/0x1d60 [ 531.272921][ T8633] vm_mmap_pgoff+0x48e/0x770 [ 531.273123][ T8633] ksys_mmap_pgoff+0x16c/0x7c0 [ 531.273263][ T8633] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 531.273427][ T8633] __x64_sys_mmap+0x19c/0x260 [ 531.273583][ T8633] x64_sys_call+0x1a6e/0x3db0 [ 531.273753][ T8633] do_syscall_64+0xd9/0x1b0 [ 531.273902][ T8633] ? irqentry_exit+0x16/0x60 [ 531.274054][ T8633] ? clear_bhb_loop+0x25/0x80 [ 531.274201][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.274333][ T8633] RIP: 0033:0x7f79fc98e9a3 [ 531.274421][ T8633] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 531.274527][ T8633] RSP: 002b:00007f79fd7cde18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 531.274641][ T8633] RAX: ffffffffffffffda RBX: 0000000000005a69 RCX: 00007f79fc98e9a3 [ 531.274723][ T8633] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 531.274796][ T8633] RBP: 00002000000068c2 R08: 00000000ffffffff R09: 0000000000000000 [ 531.274872][ T8633] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 531.274943][ T8633] R13: 00007f79fd7cdef0 R14: 00007f79fd7cdeb0 R15: 0000200000000640 [ 531.275066][ T8633] [ 531.679255][ T24] usb 3-1: USB disconnect, device number 22 [ 531.840999][ T8639] loop3: detected capacity change from 0 to 512 [ 531.937741][ T8639] /dev/loop3: Can't open blockdev [ 532.710120][ T8653] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 532.866589][ T8653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 533.010202][ T5803] Bluetooth: hci0: command tx timeout [ 533.060465][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.068072][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.075999][ T8612] bridge_slave_0: entered allmulticast mode [ 533.085676][ T8612] bridge_slave_0: entered promiscuous mode [ 533.195033][ T8659] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 533.211224][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.218920][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.226675][ T8612] bridge_slave_1: entered allmulticast mode [ 533.236386][ T8612] bridge_slave_1: entered promiscuous mode [ 533.686013][ T8666] loop2: detected capacity change from 0 to 1024 [ 533.792843][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.905488][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.969046][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 534.490166][ T8612] team0: Port device team_slave_0 added [ 534.568012][ T8612] team0: Port device team_slave_1 added [ 535.078852][ T5803] Bluetooth: hci0: command tx timeout [ 536.343770][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.351514][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.379298][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.619818][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.627075][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.653724][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.780738][ T8691] loop3: detected capacity change from 0 to 2048 [ 536.867226][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.874857][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.925257][ T8691] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 536.964379][ T8691] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x9b != 0xd4 [ 537.038269][ T8691] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 1312: 0x4a != 0xb3 [ 537.049299][ T8691] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 537.259173][ T5803] Bluetooth: hci0: command tx timeout [ 537.375715][ T8691] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 537.489216][ T8691] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 537.559600][ T8691] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 537.585367][ T8612] hsr_slave_0: entered promiscuous mode [ 537.595823][ T8612] hsr_slave_1: entered promiscuous mode [ 537.675558][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.414'. [ 537.699945][ T8691] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 537.795773][ T8691] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 537.872356][ T8691] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 537.882861][ T8691] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 537.964809][ T8701] loop5: detected capacity change from 0 to 40427 [ 538.001526][ T8701] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 538.011534][ T8701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 538.021977][ T8701] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff [ 538.031072][ T8701] F2FS-fs (loop5): heap/no_heap options were deprecated [ 538.038894][ T8701] F2FS-fs (loop5): Image doesn't support compression [ 538.048429][ T8706] tipc: Failed to obtain node identity [ 538.054514][ T8706] tipc: Enabling of bearer rejected, failed to enable media [ 538.071540][ T8701] F2FS-fs (loop5): invalid crc value [ 538.405712][ T8702] loop6: detected capacity change from 0 to 512 [ 538.441777][ T8701] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 538.449831][ T8701] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 538.485491][ T8701] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0xcdd/0x3cd0 [ 538.523928][ T8705] tipc: Failed to obtain node identity [ 538.532669][ T8705] tipc: Enabling of bearer rejected, failed to enable media [ 538.769483][ T5861] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 538.798939][ T8702] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 538.808147][ T8702] EXT4-fs (loop6): failed to open journal device unknown-block(8,3) -6 [ 539.048116][ T5861] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 539.057797][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.066265][ T5861] usb 6-1: Product: syz [ 539.070880][ T5861] usb 6-1: Manufacturer: syz [ 539.075706][ T5861] usb 6-1: SerialNumber: syz [ 539.269384][ T5861] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 539.547944][ T5887] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 539.719998][ T5861] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 540.137096][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.416'. [ 540.197324][ T24] usb 6-1: USB disconnect, device number 7 [ 540.239443][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 540.308938][ T5861] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 540.317482][ T5861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.328527][ T5861] usb 7-1: config 0 has no interface number 0 [ 540.385851][ T5861] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 540.395500][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.404256][ T5861] usb 7-1: Product: syz [ 540.408757][ T5861] usb 7-1: Manufacturer: syz [ 540.413604][ T5861] usb 7-1: SerialNumber: syz [ 540.515657][ T5861] usb 7-1: config 0 descriptor?? [ 540.599484][ T5887] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 540.608019][ T5887] ath9k_htc: Failed to initialize the device [ 540.723203][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 540.954985][ T7711] syz-executor: attempt to access beyond end of device [ 540.954985][ T7711] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 540.969619][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 540.969774][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 540.969862][ T7711] Call Trace: [ 540.969913][ T7711] [ 540.969965][ T7711] __dump_stack+0x26/0x30 [ 540.970144][ T7711] dump_stack_lvl+0x1df/0x270 [ 540.970326][ T7711] dump_stack+0x1e/0x25 [ 540.970495][ T7711] f2fs_handle_critical_error+0xa6f/0xc20 [ 540.970732][ T7711] f2fs_stop_checkpoint+0x60/0x70 [ 540.970866][ T7711] f2fs_write_end_io+0xd98/0x1e20 [ 540.971026][ T7711] ? f2fs_write_end_io+0xaa1/0x1e20 [ 540.971182][ T7711] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 540.971315][ T7711] bio_endio+0xe05/0xf60 [ 540.971453][ T7711] submit_bio_noacct+0x214/0x2710 [ 540.971636][ T7711] submit_bio+0x5a9/0x5d0 [ 540.971778][ T7711] f2fs_submit_write_bio+0x92/0x250 [ 540.971964][ T7711] __submit_merged_bio+0x16f/0x6a0 [ 540.972146][ T7711] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 540.972322][ T7711] __submit_merged_write_cond+0x458/0x9a0 [ 540.972526][ T7711] f2fs_write_data_pages+0x509a/0x58e0 [ 540.972790][ T7711] ? kmsan_get_metadata+0x105/0x1b0 [ 540.972949][ T7711] ? kmsan_get_metadata+0x105/0x1b0 [ 540.973111][ T7711] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 540.973279][ T7711] ? __pfx_folios_put_refs+0x1/0x10 [ 540.973408][ T7711] ? filter_irq_stacks+0x13f/0x190 [ 540.973573][ T7711] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 540.973730][ T7711] ? kmsan_get_metadata+0x105/0x1b0 [ 540.973886][ T7711] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 540.974060][ T7711] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 540.974194][ T7711] do_writepages+0x445/0xcb0 [ 540.974348][ T7711] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 540.974518][ T7711] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 540.974731][ T7711] filemap_fdatawrite+0x207/0x260 [ 540.975038][ T7711] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 540.975234][ T7711] f2fs_write_checkpoint+0xfe2/0x2b00 [ 540.975526][ T7711] kill_f2fs_super+0x2ff/0x970 [ 540.975703][ T7711] ? __pfx_kill_f2fs_super+0x10/0x10 [ 540.975861][ T7711] deactivate_locked_super+0xc8/0x3c0 [ 540.976083][ T7711] deactivate_super+0x12f/0x140 [ 540.976275][ T7711] cleanup_mnt+0x6fb/0x780 [ 540.976423][ T7711] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 540.976586][ T7711] ? __pfx___cleanup_mnt+0x10/0x10 [ 540.976746][ T7711] __cleanup_mnt+0x22/0x30 [ 540.976897][ T7711] task_work_run+0x206/0x2b0 [ 540.977086][ T7711] resume_user_mode_work+0x105/0x160 [ 540.977265][ T7711] syscall_exit_to_user_mode+0x7b/0xb0 [ 540.977424][ T7711] do_syscall_64+0xe6/0x1b0 [ 540.977576][ T7711] ? irqentry_exit+0x16/0x60 [ 540.977709][ T7711] ? clear_bhb_loop+0x25/0x80 [ 540.977852][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.977992][ T7711] RIP: 0033:0x7fbc08f8fc97 [ 540.978102][ T7711] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 540.978203][ T7711] RSP: 002b:00007fffd1501578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 540.978318][ T7711] RAX: 0000000000000000 RBX: 00007fbc0901089d RCX: 00007fbc08f8fc97 [ 540.978400][ T7711] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd1501630 [ 540.978476][ T7711] RBP: 00007fffd1501630 R08: 0000000000000000 R09: 0000000000000000 [ 540.978556][ T7711] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd15026c0 [ 540.978635][ T7711] R13: 00007fbc0901089d R14: 0000000000083e54 R15: 00007fffd1502700 [ 540.978746][ T7711] [ 541.331446][ T7711] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 542.349252][ T5861] usb 7-1: can't set config #0, error -71 [ 542.376822][ T8737] overlayfs: failed to clone upperpath [ 542.387721][ T8612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 542.470190][ T5861] usb 7-1: USB disconnect, device number 2 [ 542.534288][ T8612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 542.697391][ T8612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 542.735154][ T8742] loop3: detected capacity change from 0 to 256 [ 542.761669][ T8742] exfat: Unknown parameter 'gigd' [ 542.865445][ T8612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.393281][ T8756] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 544.400352][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.400498][ T8756] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 544.510342][ T8758] hsr_slave_0: left promiscuous mode [ 544.583638][ T8758] hsr_slave_1: left promiscuous mode [ 544.852720][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.955327][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.963008][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.111267][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.118965][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.738829][ T8765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.804609][ T8766] sctp: [Deprecated]: syz.5.422 (pid 8766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.804609][ T8766] Use struct sctp_sack_info instead [ 546.556356][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.428'. [ 547.073873][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.615625][ T8798] loop5: detected capacity change from 0 to 256 [ 547.912339][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.401465][ T8612] veth0_vlan: entered promiscuous mode [ 548.559376][ T5856] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 548.569575][ T8612] veth1_vlan: entered promiscuous mode [ 549.239883][ T8612] veth0_macvtap: entered promiscuous mode [ 549.323916][ T8807] loop5: detected capacity change from 0 to 32768 [ 549.357292][ T8807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.436 (8807) [ 549.401597][ T5856] usb 4-1: device descriptor read/64, error -71 [ 549.414795][ T8612] veth1_macvtap: entered promiscuous mode [ 549.431554][ T8807] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 549.442252][ T8807] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 549.451660][ T8807] BTRFS info (device loop5): disk space caching is enabled [ 549.459282][ T8807] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 549.649102][ T5856] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 549.681827][ T8807] BTRFS info (device loop5): rebuilding free space tree [ 549.718461][ T8807] BTRFS info (device loop5): disabling free space tree [ 549.726105][ T8807] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 549.736152][ T8807] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 549.804458][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.815485][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.825664][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.829080][ T5856] usb 4-1: device descriptor read/64, error -71 [ 549.836329][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.852871][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.863714][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.874112][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.886303][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.900172][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.911793][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.926852][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.106211][ T5856] usb usb4-port1: attempt power cycle [ 550.139487][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.151363][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.161563][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.172382][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.183155][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.193945][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.205770][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.217278][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.227482][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.238270][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.253616][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.554557][ T8612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.563784][ T8612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.572959][ T8612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.582074][ T8612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.762922][ T5856] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 550.853147][ T5856] usb 4-1: device descriptor read/8, error -71 [ 550.972715][ T30] audit: type=1326 audit(1746310675.911:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.6.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79fc98e969 code=0x0 [ 551.102132][ T30] audit: type=1326 audit(1746310675.941:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.6.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79fc98e969 code=0x0 [ 551.139039][ T7711] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.150309][ T5856] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 551.195711][ T5856] usb 4-1: device descriptor read/8, error -71 [ 551.315650][ T5856] usb usb4-port1: unable to enumerate USB device [ 551.896525][ T8847] netlink: 'syz.2.439': attribute type 11 has an invalid length. [ 552.002443][ T8850] loop3: detected capacity change from 0 to 16 [ 552.062759][ T8850] erofs (device loop3): mounted with root inode @ nid 36. [ 553.681800][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'. [ 553.693926][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.444'. [ 553.884724][ T8874] loop5: detected capacity change from 0 to 512 [ 554.014802][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 554.123184][ T8874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 554.234102][ T8877] bond0: (slave bond_slave_0): Releasing backup interface [ 554.419619][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.712967][ T8888] loop3: detected capacity change from 0 to 32768 [ 555.989391][ T8888] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 555.989391][ T8888] allowing incompatible features above 0.0: (unknown version) [ 556.019087][ T8888] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 556.028531][ T8888] bcachefs (loop3): Version upgrade required: [ 556.028531][ T8888] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 556.028531][ T8888] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 556.028531][ T8888] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 556.117892][ T8888] bcachefs (loop3): dropping and reconstructing all alloc info [ 556.179707][ T8888] bcachefs (loop3): accounting_read... done [ 556.186789][ T8888] bcachefs (loop3): alloc_read... done [ 556.193395][ T8888] bcachefs (loop3): snapshots_read... done [ 556.199962][ T8888] bcachefs (loop3): check_allocations... done [ 556.433436][ T8888] bcachefs (loop3): going read-write [ 556.495387][ T8888] bcachefs (loop3): done starting filesystem [ 556.600739][ T8888] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 556.600856][ T8888] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0 [ 556.600968][ T8888] [ 556.635499][ T8888] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 556.635614][ T8888] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0 [ 556.635733][ T8888] [ 556.675276][ T8888] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 556.675387][ T8888] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0 [ 556.675510][ T8888] [ 556.808823][ T3773] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 556.808917][ T3773] u64s 5 type deleted 0:1:0 len 0 ver 0, , continuing [ 557.025167][ T3773] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 557.025260][ T3773] u64s 5 type deleted 0:4:0 len 0 ver 0, , continuing [ 557.212586][ T8888] overlay: ./file1 is not a directory [ 557.713045][ T5814] bcachefs (loop3): shutting down [ 557.718368][ T5814] bcachefs (loop3): going read-only [ 557.724354][ T5814] bcachefs (loop3): finished waiting for writes to stop [ 557.784037][ T5814] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 557.912269][ T3773] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 557.912367][ T3773] u64s 5 type deleted 0:2:0 len 0 ver 0, , continuing [ 558.021912][ T3773] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 558.022004][ T3773] u64s 5 type deleted 0:6:0 len 0 ver 0, , continuing [ 558.090343][ T5814] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 558.192297][ T5814] bcachefs (loop3): unclean shutdown complete, journal seq 13 [ 558.250268][ T5814] bcachefs (loop3): done going read-only, filesystem not clean [ 558.434509][ T5814] bcachefs (loop3): shutdown complete [ 559.012720][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.020895][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.280776][ T8937] loop5: detected capacity change from 0 to 4096 [ 559.387325][ T8937] ntfs3: Unknown parameter '' [ 559.503758][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.511961][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.032421][ T5887] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 560.250149][ T8948] loop5: detected capacity change from 0 to 256 [ 560.303401][ T8948] exFAT-fs (loop5): failed to read boot sector [ 560.310015][ T8948] exFAT-fs (loop5): failed to recognize exfat type [ 560.349199][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 560.453628][ T8948] loop5: detected capacity change from 0 to 64 [ 560.526365][ T5887] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 560.537981][ T5887] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.538997][ T8949] ptrace attach of "./syz-executor exec"[7711] was attempted by " xݿOM@xX$VF16aF΄p0\x1b1v,쬍=heeݚEnw\x07ǂ_]ۙ~eu}?HU$]Iu*Mn,o*}5͡2KvUm=W\x0b_U?`DQ}R/ﱅot<at+e7 [e\x07P2]=xq e81\x074o_ 'RFY2?sC8>HF9-fRH.MѨ[n5/,o5=Ѽ*6\x1b(v&'68>e?_tʞl&k5j;R;ܫ1Qf+F-ûzYWtȷ$C9&tgw{jM5WPk*]_9ٜ]wyfn{-YW 9AWҟa\x07Nr>]]棕Vǯ]>WoJ?$=?~#\x07z^r0>'193NEZIG?[+x}4u\x09'H8}`P{\x0d1eqVwͭ_5ӣ]/omÇ`?Ypt5\x1b;:{^:O\x07\x0d}Ϻ M;'CJ\x22 ^n̂'MWmCOR\x0bk \x22rmU  =>yyXcrޡOJS\x1bRf$!~;іFn\x0aa s= [ 560.797485][ T757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.554273][ T757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.893577][ T757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.258258][ T757] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.167305][ T8956] loop5: detected capacity change from 0 to 32768 [ 563.360994][ T8956] read_mapping_page failed! [ 563.365904][ T8956] ERROR: (device loop5): txAbort: [ 563.365904][ T8956] [ 563.562178][ T757] bridge_slave_1: left allmulticast mode [ 563.568252][ T757] bridge_slave_1: left promiscuous mode [ 563.571180][ T7711] ERROR: (device loop5): diFree: numfree > numinos [ 563.571180][ T7711] [ 563.580008][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.684208][ T757] bridge_slave_0: left allmulticast mode [ 563.690442][ T757] bridge_slave_0: left promiscuous mode [ 563.697568][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.389191][ T5887] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.400169][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.529846][ T5887] usb 7-1: can't set config #1, error -71 [ 564.581242][ T5887] usb 7-1: USB disconnect, device number 3 [ 564.927661][ T757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.016813][ T757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.086819][ T757] bond0 (unregistering): Released all slaves [ 565.881758][ T8968] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 565.975532][ T757] hsr_slave_0: left promiscuous mode [ 566.030068][ T757] hsr_slave_1: left promiscuous mode [ 566.038126][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.046128][ T757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.059101][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 566.121498][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.129610][ T757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.219316][ T757] veth1_macvtap: left promiscuous mode [ 566.225213][ T757] veth0_macvtap: left promiscuous mode [ 566.232760][ T757] veth1_vlan: left promiscuous mode [ 566.238344][ T757] veth0_vlan: left promiscuous mode [ 566.288514][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 566.298993][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 566.690735][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 566.702710][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.712077][ T24] usb 4-1: Product: syz [ 566.716473][ T24] usb 4-1: Manufacturer: syz [ 566.721425][ T24] usb 4-1: SerialNumber: syz [ 566.753095][ T24] usb 4-1: config 0 descriptor?? [ 566.762574][ T8969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 566.811200][ T8969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.043544][ T8968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.111224][ T8968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.332581][ T757] team0 (unregistering): Port device team_slave_1 removed [ 567.452026][ T757] team0 (unregistering): Port device team_slave_0 removed [ 568.136532][ T8968] loop3: detected capacity change from 0 to 8 [ 568.385671][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 568.503870][ T24] dm9601 4-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 34:94:ee:39:32:af [ 568.560470][ T24] usb 4-1: USB disconnect, device number 29 [ 568.636764][ T24] dm9601 4-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 568.750405][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.794561][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.857832][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.883309][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.923071][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 569.253165][ T9001] syz.2.464 uses obsolete (PF_INET,SOCK_PACKET) [ 570.313309][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 570.967301][ T9012] loop3: detected capacity change from 0 to 40427 [ 571.008778][ T5807] Bluetooth: hci0: command tx timeout [ 571.356669][ T9012] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 571.543563][ T9012] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 571.558961][ T9012] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 572.589699][ T5856] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 572.832097][ T5856] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 572.843699][ T5856] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 572.854876][ T5856] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.864301][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.875327][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.6.467'. [ 572.887323][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.896042][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.903957][ T8995] bridge_slave_0: entered allmulticast mode [ 572.913200][ T8995] bridge_slave_0: entered promiscuous mode [ 572.977802][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.6.467'. [ 573.003465][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.011235][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.019112][ T8995] bridge_slave_1: entered allmulticast mode [ 573.028688][ T8995] bridge_slave_1: entered promiscuous mode [ 573.043139][ T9042] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 573.096366][ T5856] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 573.097411][ T5807] Bluetooth: hci0: command tx timeout [ 573.515821][ T5856] usb 6-1: USB disconnect, device number 8 [ 573.605146][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.6.467'. [ 573.636232][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.781395][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.588097][ T8995] team0: Port device team_slave_0 added [ 574.671774][ T9057] netlink: 'syz.2.473': attribute type 29 has an invalid length. [ 575.159433][ T5807] Bluetooth: hci0: command tx timeout [ 575.210413][ T9061] netlink: 500 bytes leftover after parsing attributes in process `syz.2.473'. [ 575.333694][ T8995] team0: Port device team_slave_1 added [ 575.347828][ T9057] netlink: 'syz.2.473': attribute type 29 has an invalid length. [ 575.553052][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.306036][ T9064] loop3: detected capacity change from 0 to 32768 [ 576.338869][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.346004][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.373588][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.477045][ T3557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.490319][ T9064] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 576.490319][ T9064] allowing incompatible features above 0.0: (unknown version) [ 576.526769][ T9064] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 576.537283][ T9064] bcachefs (loop3): Version upgrade required: [ 576.537283][ T9064] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 576.537283][ T9064] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 576.537283][ T9064] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 576.693456][ T9064] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree alloc level 0/0 [ 576.693571][ T9064] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 576.693694][ T9064] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 576.740624][ T9064] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 576.740624][ T9064] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 576.867730][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.875962][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.902402][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.942813][ T9064] bcachefs (loop3): accounting_read... done [ 576.951632][ T9064] bcachefs (loop3): alloc_read... done [ 576.958295][ T9064] bcachefs (loop3): snapshots_read... done [ 576.964969][ T9064] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 576.976553][ T9064] bcachefs (loop3): done starting filesystem [ 577.013555][ T3557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.167950][ T5814] bcachefs (loop3): shutting down [ 577.239046][ T5807] Bluetooth: hci0: command tx timeout [ 577.325682][ T3557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.424656][ T5814] bcachefs (loop3): shutdown complete [ 577.557435][ T3557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.727613][ T8995] hsr_slave_0: entered promiscuous mode [ 577.737633][ T8995] hsr_slave_1: entered promiscuous mode [ 578.637469][ T3557] bridge_slave_1: left allmulticast mode [ 578.643609][ T3557] bridge_slave_1: left promiscuous mode [ 578.650450][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.740950][ T3557] bridge_slave_0: left allmulticast mode [ 578.747131][ T3557] bridge_slave_0: left promiscuous mode [ 578.753871][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.343417][ T3557] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 579.355511][ T3557] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 579.417532][ T3557] ip6gretap1 (unregistering): left promiscuous mode [ 579.424640][ T3557] ip6gretap1 (unregistering): left allmulticast mode [ 579.883291][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 580.025944][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.096365][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.175609][ T3557] bond0 (unregistering): Released all slaves [ 580.198943][ T3557] bond1 (unregistering): Released all slaves [ 581.102788][ T3557] hsr_slave_0: left promiscuous mode [ 581.139301][ T3557] hsr_slave_1: left promiscuous mode [ 581.147227][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.155216][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.283005][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.291006][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.442667][ T3557] veth1_macvtap: left promiscuous mode [ 581.448474][ T3557] veth0_macvtap: left promiscuous mode [ 581.454706][ T3557] veth1_vlan: left promiscuous mode [ 581.461061][ T3557] veth0_vlan: left promiscuous mode [ 581.951867][ T9115] 9pnet_fd: Insufficient options for proto=fd [ 583.258179][ T9119] loop3: detected capacity change from 0 to 32768 [ 583.264724][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 583.482392][ T5856] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 583.530126][ T9119] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 583.530126][ T9119] allowing incompatible features above 0.0: (unknown version) [ 583.559521][ T9119] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 583.569213][ T9119] bcachefs (loop3): Version upgrade required: [ 583.569213][ T9119] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 583.569213][ T9119] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 583.569213][ T9119] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 583.650178][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 583.680879][ T9119] bcachefs (loop3): dropping and reconstructing all alloc info [ 583.739093][ T9119] bcachefs (loop3): accounting_read... done [ 583.888897][ T9119] bcachefs (loop3): alloc_read... done [ 583.898119][ T9119] bcachefs (loop3): snapshots_read... done [ 583.904722][ T9119] bcachefs (loop3): check_allocations... done [ 584.121482][ T9119] bcachefs (loop3): going read-write [ 584.161987][ T9119] bcachefs (loop3): done starting filesystem [ 584.492096][ T5856] usb 7-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.503803][ T5856] usb 7-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.514776][ T5856] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 584.524488][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.144566][ T5814] bcachefs (loop3): shutting down [ 585.150133][ T5814] bcachefs (loop3): going read-only [ 585.155586][ T5814] bcachefs (loop3): finished waiting for writes to stop [ 585.230251][ T8995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.242102][ T5814] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 585.280194][ T9123] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 585.301794][ T5814] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 585.333089][ T8995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.412320][ T8995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.481203][ T5814] bcachefs (loop3): unclean shutdown complete, journal seq 12 [ 585.511480][ T8995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.533251][ T5814] bcachefs (loop3): done going read-only, filesystem not clean [ 585.775259][ T5814] bcachefs (loop3): shutdown complete [ 586.068022][ T9146] loop5: detected capacity change from 0 to 1024 [ 586.137850][ T9146] EXT4-fs: inline encryption not supported [ 586.146884][ T9146] EXT4-fs: Ignoring removed i_version option [ 586.261174][ T9146] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 586.397588][ T9146] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.488: lblock 2 mapped to illegal pblock 2 (length 1) [ 586.471783][ T9146] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 586.481632][ T9146] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.488: lblock 0 mapped to illegal pblock 48 (length 1) [ 586.618481][ T9146] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 586.627719][ T9146] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.488: Failed to acquire dquot type 0 [ 586.755909][ T9146] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 586.806635][ T9146] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #11: comm syz.5.488: mark_inode_dirty error [ 586.884076][ T9146] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 586.889851][ T5856] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 586.895874][ T9146] EXT4-fs (loop5): 1 orphan inode deleted [ 586.913055][ T9146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.928235][ T4084] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 587.077532][ T4084] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 587.087503][ T4084] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 0 [ 587.207272][ T5856] usb 7-1: USB disconnect, device number 4 [ 587.762081][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.814021][ T7711] EXT4-fs error (device loop5): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 587.859822][ T7711] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 587.944027][ T7711] EXT4-fs error (device loop5): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 588.213134][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.263203][ T9159] macvlan0: entered promiscuous mode [ 588.275348][ T9159] batadv0: entered promiscuous mode [ 588.285442][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.294449][ T9159] Cannot create hsr debugfs directory [ 588.513465][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.628283][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.635926][ T3882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.680778][ T9164] loop5: detected capacity change from 0 to 1024 [ 588.761377][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.769046][ T3882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.664614][ T9176] loop5: detected capacity change from 0 to 64 [ 589.706207][ T9170] loop6: detected capacity change from 0 to 512 [ 590.096001][ T9170] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.542048][ T9186] loop5: detected capacity change from 0 to 8 [ 590.829007][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.833421][ T30] audit: type=1326 audit(1746310715.751:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9184 comm="syz.5.495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x0 [ 591.094087][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.416463][ T8995] veth0_vlan: entered promiscuous mode [ 591.556678][ T8995] veth1_vlan: entered promiscuous mode [ 592.217055][ T8995] veth0_macvtap: entered promiscuous mode [ 592.910899][ T8995] veth1_macvtap: entered promiscuous mode [ 593.070771][ T9198] loop3: detected capacity change from 0 to 32768 [ 593.364822][ T9198] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 593.364822][ T9198] allowing incompatible features above 0.0: (unknown version) [ 593.399960][ T9198] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 593.409427][ T9198] bcachefs (loop3): Version upgrade required: [ 593.409427][ T9198] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 593.409427][ T9198] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 593.409427][ T9198] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 593.634343][ T9198] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree alloc level 0/0 [ 593.634451][ T9198] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 593.634560][ T9198] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 593.677805][ T9198] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 593.677805][ T9198] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 593.792296][ T9198] bcachefs (loop3): accounting_read... done [ 593.799474][ T9198] bcachefs (loop3): alloc_read... done [ 593.806139][ T9198] bcachefs (loop3): snapshots_read... done [ 593.812611][ T9198] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 593.825733][ T9198] bcachefs (loop3): done starting filesystem [ 593.990377][ T5814] bcachefs (loop3): shutting down [ 594.184727][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.195609][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.207959][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.220126][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.230857][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.245571][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.256660][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.267577][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.282632][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.435350][ T5814] bcachefs (loop3): shutdown complete [ 594.851516][ T7900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.075683][ T9215] loop5: detected capacity change from 0 to 64 [ 595.098747][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.109584][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.119737][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.130519][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.140708][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.151475][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.164587][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.177325][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.192336][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.242024][ T9215] hfs: creator requires a 4 character value [ 595.273356][ T8995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.283253][ T8995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.292506][ T8995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.301621][ T8995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.670443][ T9238] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 596.670443][ T9238] The task syz.2.503 (9238) triggered the difference, watch for misbehavior. [ 596.870523][ T30] audit: type=1326 audit(1746310721.801:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.2.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x0 [ 597.775929][ T9237] loop6: detected capacity change from 0 to 32768 [ 598.064708][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.074815][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.315778][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.322590][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.331493][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 598.630296][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 598.811300][ T5887] usb 6-1: device descriptor read/all, error -61 [ 598.971949][ T5887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 599.171895][ T5887] usb 6-1: device descriptor read/64, error -71 [ 599.311037][ T5887] usb usb6-port1: attempt power cycle [ 600.410266][ T9271] loop3: detected capacity change from 0 to 256 [ 600.467043][ T9271] vfat: Deprecated parameter 'posix' [ 600.472835][ T9271] FAT-fs: "posix" option is obsolete, not supported now [ 600.626480][ T5887] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 600.779137][ T5887] usb 6-1: device descriptor read/8, error -71 [ 601.040332][ T5887] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 601.109618][ T5856] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 601.245685][ T9278] bond0: entered promiscuous mode [ 601.251470][ T9278] bond_slave_1: entered promiscuous mode [ 601.330935][ T5887] usb 6-1: device descriptor read/8, error -71 [ 601.364635][ T5856] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 601.374179][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 601.383144][ T5856] usb 4-1: Product: syz [ 601.453095][ T30] audit: type=1326 audit(1746310726.361:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 601.475874][ T30] audit: type=1326 audit(1746310726.361:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 601.481428][ T5887] usb usb6-port1: unable to enumerate USB device [ 601.500835][ T30] audit: type=1326 audit(1746310726.371:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 601.509636][ T5856] usb 4-1: config 0 descriptor?? [ 601.545087][ T5856] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 601.556449][ T5856] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 601.762208][ T5887] usb 4-1: USB disconnect, device number 30 [ 601.771942][ T5887] ftdi_sio 4-1:0.0: device disconnected [ 601.958296][ T30] audit: type=1326 audit(1746310726.511:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 601.981436][ T30] audit: type=1326 audit(1746310726.561:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 602.004004][ T30] audit: type=1326 audit(1746310726.561:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 602.029055][ T30] audit: type=1326 audit(1746310726.561:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 602.052446][ T30] audit: type=1326 audit(1746310726.561:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 602.075020][ T30] audit: type=1326 audit(1746310726.561:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2ff8e969 code=0x7ffc0000 [ 602.560422][ T9285] loop5: detected capacity change from 0 to 32768 [ 602.572805][ T9285] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.510 (9285) [ 602.606996][ T9285] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 602.617765][ T9285] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 602.627558][ T9285] BTRFS info (device loop5): using free-space-tree [ 603.153107][ T9285] BTRFS info (device loop5): rebuilding free space tree [ 603.360082][ T7711] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 603.659731][ T30] audit: type=1326 audit(1746310728.581:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fc98e969 code=0x7ffc0000 [ 603.787814][ T30] audit: type=1326 audit(1746310728.721:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f79fc98e969 code=0x7ffc0000 [ 603.810809][ T30] audit: type=1326 audit(1746310728.721:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fc98e969 code=0x7ffc0000 [ 603.834400][ T30] audit: type=1326 audit(1746310728.721:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.6.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fc98e969 code=0x7ffc0000 [ 604.159280][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.170004][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.728980][ T3882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.737147][ T3882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.383699][ T757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.686628][ T757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.703454][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 607.703527][ T30] audit: type=1326 audit(1746310732.641:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 607.899699][ T757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.922041][ T30] audit: type=1326 audit(1746310732.711:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 607.944768][ T30] audit: type=1326 audit(1746310732.721:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 607.968412][ T30] audit: type=1326 audit(1746310732.721:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 607.991526][ T30] audit: type=1326 audit(1746310732.721:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.014317][ T30] audit: type=1326 audit(1746310732.751:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.037013][ T30] audit: type=1326 audit(1746310732.751:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.060537][ T30] audit: type=1326 audit(1746310732.751:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.083541][ T30] audit: type=1326 audit(1746310732.781:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.106287][ T30] audit: type=1326 audit(1746310732.841:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0098e969 code=0x7ffc0000 [ 608.155085][ T9353] mmap: syz.3.523 (9353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 608.444944][ T757] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.644637][ T9359] loop6: detected capacity change from 0 to 128 [ 609.121523][ T757] bridge_slave_1: left allmulticast mode [ 609.127443][ T757] bridge_slave_1: left promiscuous mode [ 609.134510][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.245614][ T757] bridge_slave_0: left allmulticast mode [ 609.252719][ T757] bridge_slave_0: left promiscuous mode [ 609.259417][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.483305][ T9359] wޣ: attempt to access beyond end of device [ 609.483305][ T9359] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 610.053470][ T757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.140812][ T757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.176250][ T757] bond0 (unregistering): Released all slaves [ 610.931156][ T757] hsr_slave_0: left promiscuous mode [ 610.950373][ T757] hsr_slave_1: left promiscuous mode [ 610.958344][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.966785][ T757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.994189][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.002072][ T757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.052401][ T757] veth1_macvtap: left promiscuous mode [ 611.058286][ T757] veth0_macvtap: left promiscuous mode [ 611.065723][ T757] veth1_vlan: left promiscuous mode [ 611.071412][ T757] veth0_vlan: left promiscuous mode [ 611.961095][ T757] team0 (unregistering): Port device team_slave_1 removed [ 612.046836][ T757] team0 (unregistering): Port device team_slave_0 removed [ 612.106784][ T9373] loop5: detected capacity change from 0 to 512 [ 612.490267][ T9373] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.528: corrupted in-inode xattr: invalid ea_ino [ 612.550588][ T9373] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.528: couldn't read orphan inode 15 (err -117) [ 612.610674][ T9373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.855028][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.864618][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.878680][ T9370] bridge0: entered allmulticast mode [ 613.150994][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.162600][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.173085][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.203287][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.216362][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.630081][ T7711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.826161][ T9384] netlink: 76 bytes leftover after parsing attributes in process `syz.3.529'. [ 613.860240][ T9386] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 613.956465][ T9386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.152528][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 614.241832][ T9386] dummy0: entered promiscuous mode [ 615.040589][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 615.272618][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 615.281996][ T9406] batman_adv: batadv0: Removing interface: team0 [ 615.304386][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.312415][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.320679][ T5807] Bluetooth: hci0: command tx timeout [ 615.372653][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.381047][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.580395][ T9406] batadv0 (unregistering): left promiscuous mode [ 616.318072][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 616.318141][ T30] audit: type=1326 audit(1746310741.251:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.347857][ T30] audit: type=1326 audit(1746310741.251:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.373222][ T30] audit: type=1326 audit(1746310741.311:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.395981][ T30] audit: type=1326 audit(1746310741.311:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.418928][ T30] audit: type=1326 audit(1746310741.311:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.441684][ T30] audit: type=1326 audit(1746310741.311:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.464891][ T30] audit: type=1326 audit(1746310741.311:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 616.488060][ T30] audit: type=1326 audit(1746310741.331:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08f8e969 code=0x7ffc0000 [ 617.235012][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.244157][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.253970][ T9379] bridge_slave_0: entered allmulticast mode [ 617.263255][ T9379] bridge_slave_0: entered promiscuous mode [ 617.411131][ T5807] Bluetooth: hci0: command tx timeout [ 617.451628][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.460946][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.468947][ T9379] bridge_slave_1: entered allmulticast mode [ 617.483166][ T9379] bridge_slave_1: entered promiscuous mode [ 617.790077][ T9446] ===================================================== [ 617.797348][ T9446] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 617.804827][ T9446] batadv_get_vid+0x2d0/0x3b0 [ 617.809893][ T9446] batadv_interface_tx+0x2e9/0x1e60 [ 617.815293][ T9446] dev_hard_start_xmit+0x299/0xa30 [ 617.820796][ T9446] __dev_queue_xmit+0x3cb4/0x5e20 [ 617.826061][ T9446] __bpf_redirect+0x162d/0x1760 [ 617.831298][ T9446] bpf_clone_redirect+0x366/0x530 [ 617.836559][ T9446] ___bpf_prog_run+0x1294/0xeba0 [ 617.841887][ T9446] __bpf_prog_run512+0xc5/0x100 [ 617.847069][ T9446] bpf_test_run+0x547/0xd20 [ 617.852043][ T9446] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 617.857775][ T9446] bpf_prog_test_run+0x5b7/0xa30 [ 617.863175][ T9446] __sys_bpf+0x6ca/0xe60 [ 617.867604][ T9446] __x64_sys_bpf+0xa4/0xf0 [ 617.872446][ T9446] x64_sys_call+0x2c3b/0x3db0 [ 617.877373][ T9446] do_syscall_64+0xd9/0x1b0 [ 617.882231][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.888364][ T9446] [ 617.890933][ T9446] Uninit was created at: [ 617.895439][ T9446] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 617.901724][ T9446] kmalloc_reserve+0x13c/0x4b0 [ 617.906720][ T9446] pskb_expand_head+0x207/0x1c90 [ 617.912031][ T9446] skb_ensure_writable+0x4c9/0x590 [ 617.917398][ T9446] bpf_clone_redirect+0x1c1/0x530 [ 617.922803][ T9446] ___bpf_prog_run+0x1294/0xeba0 [ 617.927973][ T9446] __bpf_prog_run512+0xc5/0x100 [ 617.933203][ T9446] bpf_test_run+0x547/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 617.937945][ T9446] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 617.943767][ T9446] bpf_prog_test_run+0x5b7/0xa30 [ 617.948999][ T9446] __sys_bpf+0x6ca/0xe60 [ 617.953447][ T9446] __x64_sys_bpf+0xa4/0xf0 [ 617.958076][ T9446] x64_sys_call+0x2c3b/0x3db0 [ 617.963180][ T9446] do_syscall_64+0xd9/0x1b0 [ 617.967898][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.974162][ T9446] [ 617.976623][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.6.547 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 617.988951][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 617.999285][ T9446] ===================================================== [ 618.006343][ T9446] Disabling lock debugging due to kernel taint [ 618.012766][ T9446] Kernel panic - not syncing: kmsan.panic set ... [ 618.019342][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.6.547 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 618.033193][ T9446] Tainted: [B]=BAD_PAGE [ 618.037472][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 618.047674][ T9446] Call Trace: [ 618.051082][ T9446] [ 618.054151][ T9446] __dump_stack+0x26/0x30 [ 618.058676][ T9446] dump_stack_lvl+0x53/0x270 [ 618.063474][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.069486][ T9446] dump_stack+0x1e/0x25 [ 618.073835][ T9446] panic+0x4bd/0xd50 [ 618.077962][ T9446] kmsan_report+0x29d/0x2a0 [ 618.082661][ T9446] ? __msan_warning+0x96/0x120 [ 618.087592][ T9446] ? batadv_get_vid+0x2d0/0x3b0 [ 618.092673][ T9446] ? batadv_interface_tx+0x2e9/0x1e60 [ 618.098237][ T9446] ? dev_hard_start_xmit+0x299/0xa30 [ 618.103723][ T9446] ? __dev_queue_xmit+0x3cb4/0x5e20 [ 618.109149][ T9446] ? __bpf_redirect+0x162d/0x1760 [ 618.114407][ T9446] ? bpf_clone_redirect+0x366/0x530 [ 618.119806][ T9446] ? ___bpf_prog_run+0x1294/0xeba0 [ 618.125115][ T9446] ? __bpf_prog_run512+0xc5/0x100 [ 618.130336][ T9446] ? bpf_test_run+0x547/0xd20 [ 618.135235][ T9446] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 618.141091][ T9446] ? bpf_prog_test_run+0x5b7/0xa30 [ 618.146412][ T9446] ? __sys_bpf+0x6ca/0xe60 [ 618.150996][ T9446] ? __x64_sys_bpf+0xa4/0xf0 [ 618.155749][ T9446] ? x64_sys_call+0x2c3b/0x3db0 [ 618.160783][ T9446] ? do_syscall_64+0xd9/0x1b0 [ 618.165666][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.171909][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.177298][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.183332][ T9446] ? do_syscall_64+0x61/0x1b0 [ 618.188201][ T9446] ? filter_irq_stacks+0x49/0x190 [ 618.193393][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.198799][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.204824][ T9446] ? batadv_interface_tx+0x41/0x1e60 [ 618.210276][ T9446] ? filter_irq_stacks+0x49/0x190 [ 618.215489][ T9446] ? stack_depot_save_flags+0x35/0x7c0 [ 618.221137][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.226541][ T9446] __msan_warning+0x96/0x120 [ 618.231313][ T9446] batadv_get_vid+0x2d0/0x3b0 [ 618.236211][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.242228][ T9446] batadv_interface_tx+0x2e9/0x1e60 [ 618.247631][ T9446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 618.254180][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.259581][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.265605][ T9446] ? __pfx_batadv_interface_tx+0x10/0x10 [ 618.271420][ T9446] dev_hard_start_xmit+0x299/0xa30 [ 618.276800][ T9446] __dev_queue_xmit+0x3cb4/0x5e20 [ 618.282057][ T9446] ? skb_release_data+0xeee/0x1110 [ 618.287417][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.292818][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.298863][ T9446] ? __dev_queue_xmit+0x30c/0x5e20 [ 618.304245][ T9446] __bpf_redirect+0x162d/0x1760 [ 618.309401][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.314844][ T9446] bpf_clone_redirect+0x366/0x530 [ 618.320132][ T9446] ___bpf_prog_run+0x1294/0xeba0 [ 618.325285][ T9446] __bpf_prog_run512+0xc5/0x100 [ 618.330322][ T9446] ? bpf_test_run+0x101/0xd20 [ 618.335192][ T9446] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 618.341030][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.346441][ T9446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 618.352983][ T9446] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 618.359275][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.364669][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.370675][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.376080][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.381464][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.386846][ T9446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 618.393360][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.399374][ T9446] ? __pfx___bpf_prog_run512+0x10/0x10 [ 618.405062][ T9446] ? __pfx___bpf_prog_run512+0x10/0x10 [ 618.410739][ T9446] bpf_test_run+0x547/0xd20 [ 618.415433][ T9446] ? kmsan_get_metadata+0x105/0x1b0 [ 618.420848][ T9446] ? bpf_test_run+0x39e/0xd20 [ 618.425762][ T9446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 618.431771][ T9446] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 618.437505][ T9446] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 618.443545][ T9446] bpf_prog_test_run+0x5b7/0xa30 [ 618.448717][ T9446] __sys_bpf+0x6ca/0xe60 [ 618.453193][ T9446] __x64_sys_bpf+0xa4/0xf0 [ 618.457815][ T9446] x64_sys_call+0x2c3b/0x3db0 [ 618.462719][ T9446] do_syscall_64+0xd9/0x1b0 [ 618.467443][ T9446] ? irqentry_exit+0x16/0x60 [ 618.472203][ T9446] ? clear_bhb_loop+0x25/0x80 [ 618.477054][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.483138][ T9446] RIP: 0033:0x7f79fc98e969 [ 618.487682][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.507469][ T9446] RSP: 002b:00007f79fd7ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.516056][ T9446] RAX: ffffffffffffffda RBX: 00007f79fcbb5fa0 RCX: 00007f79fc98e969 [ 618.524188][ T9446] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 618.532288][ T9446] RBP: 00007f79fca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 618.540390][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.548490][ T9446] R13: 0000000000000000 R14: 00007f79fcbb5fa0 R15: 00007ffc68495a38 [ 618.556626][ T9446] [ 618.560126][ T9446] Kernel Offset: disabled [ 618.564539][ T9446] Rebooting in 86400 seconds..