last executing test programs: 3m53.813859822s ago: executing program 0 (id=208): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) shutdown(r4, 0x2) 3m52.626066447s ago: executing program 0 (id=212): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffd}, 0x8) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000fc0)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 3m47.0460278s ago: executing program 0 (id=219): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000009500"/23], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x20, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x47, 0x0, @fd_index=0x8, 0x4, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2], 0x3c}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000019c0)) 3m44.41074755s ago: executing program 0 (id=222): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 3m41.213256203s ago: executing program 0 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$eJzs289vVEUcAPDve7sFBGUrIgqCVNGk8UdLCyoHE6PRxIMmJnrAY20LQRZqaE2ENFqNwaMh8W48mvgXePJk1JOJVzyaGBKixAT04pq3+17ZLrullS27YT+fZGFm3+zMfPvevJ2d2Q1gYI1k/yQRd0fExYioNLIrC4w0/rt2ZXH67yuL00nUam/+kdTLXb2yOF3LFa/bltc5mkaknyZ5IzHUXO382XMnp6rV2TN5fnzh1Hvj82fPPX3i1NTx2eOzpyePHDl8aOK5ZyefadPr3y6sN84svqt7Ppzbu/vVty+8Pn30wjs/fpP1d9e+xvEsjvXW2UGtlidGssD/bPxtWgs93qXG+sW/tetxJuVe94a1KkVEOR+cF6MSpbh+8irxyic97RywobJ79ubOh5dqwB0siY0rDfSz4o0++/xbPG7T1KMvXH6x8QEoi/ta/mgcKUealxnawPZHIuLo0j9fZo9oWYeotVk3AAC4Vd9l85+n2s3/0tjVVG57vjc0HBH3RsSOiLgvInZGxP0R9bIPRMSD62x/pCV/4/wzvfS/AlujbP73fL63tXL+V8z+YriU5+6pxz+UHDtRnT2Y/01GY2hzlp9oV3lRxcu/fN6p/eb5X/bI2i/mgnkll8qNBbotxTMzUwtT3ZqUXv44Yk+5XfzJ8k5AEhG7I2LP+qreXiROPPH13k6Fbh7/Krqwz1T7qqhkcSla4i8kq+9Pjm+J6uzB8eKquNFPP59/o1P7txR/F2Tnf+vK67+lROWvpHm/dn75wAvNpVZZQ47zv37W8TNlee3X/7Ls+t+UvFXf092UP/fB1MLCmYmITclr9fyK5yevv7bIF+Wz+EcPtB//O/LXZPE/FBHZRbwvIh6OiP35uXskIh6NiAOrxP/DS4+92+lYP5z/mbb3v+Xrf3jl+V9/onTy+287tb+2+9/hemo0f6Z+/7uJzt0pbqMtVzMAAADcwdL6d+OTdGw5naZjY43v8O+MrWl1bn7hyWNz75+eaXyHfjiG0mKlq9K0HjqRLOU1NvKT+VpxcfxQvm78Remuen5seq460+PYYdBt6zD+M7+Xet07YMP5vRYMrtbxn/aoH8Dt5/0fBpfxD4PL+IfB1W78f9SStxcAd6Japdc9AHrH/B8Gl/EPg8v4h4F0K7/r36hEeZVf70v0SyLSvuhG3yT2txlNaY/GV7kLo7vHNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//W5/4VQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000500), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) setgroups(0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000000)) 3m35.118824188s ago: executing program 0 (id=240): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 3m19.891140899s ago: executing program 32 (id=240): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0x5a}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3}) socket(0x1e, 0x2, 0x0) 46.857288443s ago: executing program 4 (id=892): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) 45.456828549s ago: executing program 4 (id=896): bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 43.416399179s ago: executing program 4 (id=901): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x400}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xffffffffffffbffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndmidi(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x14, 0x0, 0x0, 0x0, &(0x7f0000753000/0x3000)=nil, 0x3000}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 41.250653619s ago: executing program 4 (id=902): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004f40)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80086303, &(0x7f0000000000)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) preadv(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 38.250842603s ago: executing program 4 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 35.848897064s ago: executing program 4 (id=914): read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002580), 0x0, 0x200, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x400380, 0x10) 20.656196134s ago: executing program 33 (id=914): read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002580), 0x0, 0x200, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x400380, 0x10) 17.494772929s ago: executing program 5 (id=947): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="e2c3eee68290cfdabcb89b52b94d9e8fb82be66cc093cb2033b123b2af", 0x1d) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 15.942588046s ago: executing program 5 (id=950): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x2, 0x7b77, 0x78, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8, 0x10, 0xffffff00}}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x22) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 15.068418811s ago: executing program 3 (id=952): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e25, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000", @ANYRES32, @ANYBLOB="00000000000000000000218cccf153de00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r6, 0x40049409, r5) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f00000001002700000000000800"], 0x6c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newae={0x48, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x2b}, @in6=@private2, 0xb413, 0x3501}, [@etimer_thresh={0x8, 0xc, 0xa56}]}, 0x48}}, 0x20008000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 12.548647732s ago: executing program 3 (id=955): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ptrace$setopts(0x4206, r0, 0x5, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0xfffffffd, 0x2, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.795244596s ago: executing program 3 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x2f, &(0x7f0000000000)={0x2b, 0x3ff, 0xd}) 11.559145497s ago: executing program 5 (id=960): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000100"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 9.735844405s ago: executing program 5 (id=963): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) ioctl$TIOCSTI(r5, 0x540b, 0x0) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) 5.715762654s ago: executing program 5 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.278651646s ago: executing program 1 (id=970): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 5.178617206s ago: executing program 5 (id=972): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r2) ioctl$TIOCSTI(r3, 0x540b, 0x0) 4.39395297s ago: executing program 2 (id=974): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 4.33679687s ago: executing program 1 (id=975): ioperm(0x0, 0x7, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_pgetevents(r3, 0x4, 0x0, 0x0, &(0x7f0000000180), 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000001000)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) 4.33653918s ago: executing program 3 (id=976): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3a50745, &(0x7f0000000f00)={[{@noauto_da_alloc}, {@nodiscard}, {@max_dir_size_kb}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@nodioread_nolock}, {@delalloc}, {@usrjquota}, {@resgid}, {@test_dummy_encryption}]}, 0x1, 0x45b, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000800006113980000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.877288077s ago: executing program 2 (id=977): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 2.645259918s ago: executing program 3 (id=978): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) socket$inet6(0xa, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1}, 0x18) 2.530858019s ago: executing program 1 (id=979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_io_uring_setup(0x1e45, &(0x7f0000000780), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8001, 0x100000, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10003, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x3}, [@typed={0x4}]}, 0x18}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 2.3174071s ago: executing program 1 (id=980): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r3, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 2.042250011s ago: executing program 2 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x3) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6, @remote}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000fc0)=""/23, 0x17}, 0x3}], 0x2, 0x10001, &(0x7f0000003000)) 988.747806ms ago: executing program 2 (id=982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 979.365606ms ago: executing program 1 (id=983): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 885.397306ms ago: executing program 3 (id=984): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 847.906647ms ago: executing program 2 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000000) 807.694527ms ago: executing program 2 (id=986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="05000000010000", 0x7) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x10, 0x5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240)) stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) 0s ago: executing program 1 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) kernel console output (not intermixed with test programs): O error on dev loop1, logical block 162, lost async page write [ 223.427245][ T4433] attempt to access beyond end of device [ 223.427245][ T4433] loop1: rw=1, want=164, limit=64 [ 223.439106][ T4433] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 223.447765][ T4433] attempt to access beyond end of device [ 223.447765][ T4433] loop1: rw=1, want=168, limit=64 [ 223.458403][ T4433] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 223.467038][ T4433] attempt to access beyond end of device [ 223.467038][ T4433] loop1: rw=1, want=170, limit=64 [ 223.477694][ T4433] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 223.496951][ T4433] attempt to access beyond end of device [ 223.496951][ T4433] loop1: rw=1, want=172, limit=64 [ 223.601187][ T4433] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 223.839687][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.847370][ T4433] attempt to access beyond end of device [ 223.847370][ T4433] loop1: rw=1, want=173, limit=64 [ 223.864759][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.956114][ T5752] loop4: detected capacity change from 0 to 256 [ 224.478551][ T5754] loop3: detected capacity change from 0 to 512 [ 224.825187][ T5754] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.966971][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.121204][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.132748][ T5754] EXT4-fs (loop3): 1 truncate cleaned up [ 225.138424][ T5754] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 225.172500][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.431874][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.438978][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.544747][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.560520][ T4211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 226.886369][ T5788] devpts: called with bogus options [ 227.747254][ T5800] loop3: detected capacity change from 0 to 512 [ 227.862642][ T5802] loop1: detected capacity change from 0 to 128 [ 228.005347][ T5802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.016690][ T5802] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.020771][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.072097][ T5802] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.316' sets config #0 [ 228.252190][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.264163][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.271426][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.281427][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.341982][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.363003][ T5800] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 228.383983][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.400241][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.420898][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.449573][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.515780][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.918131][ T5522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.796351][ T5800] loop3: detected capacity change from 0 to 512 [ 229.837192][ T5522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.145198][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.153780][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.322696][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.408492][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.820992][ T5826] loop1: detected capacity change from 0 to 1024 [ 231.034348][ T4323] device hsr_slave_0 left promiscuous mode [ 231.360655][ T5839] loop2: detected capacity change from 0 to 256 [ 232.510334][ T4323] device hsr_slave_1 left promiscuous mode [ 232.530961][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.557577][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.573380][ T4323] device bridge_slave_1 left promiscuous mode [ 232.581578][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.599180][ T4323] device bridge_slave_0 left promiscuous mode [ 232.608432][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.653090][ T4323] device veth1_macvtap left promiscuous mode [ 232.659530][ T4323] device veth0_macvtap left promiscuous mode [ 232.674899][ T4323] device veth1_vlan left promiscuous mode [ 232.681168][ T4323] device veth0_vlan left promiscuous mode [ 233.019546][ T5848] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 233.096124][ T5850] rdma_rxe: rxe_register_device failed with error -23 [ 233.104818][ T5850] rdma_rxe: failed to add team_slave_1 [ 233.163260][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 233.187351][ T4323] team0 (unregistering): Port device team_slave_0 removed [ 233.191504][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 233.211003][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.239473][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.363249][ T4323] bond0 (unregistering): Released all slaves [ 233.441464][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 233.453440][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.473741][ T5849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 233.561702][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.585846][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.617235][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.777324][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.796702][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.820434][ T5845] infiniband syz2: set active [ 233.837466][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.861861][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.886674][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.887301][ T5845] infiniband syz2: added team_slave_1 [ 233.899207][ T23] usb 3-1: Product: syz [ 233.921467][ T23] usb 3-1: Manufacturer: syz [ 233.938220][ T23] usb 3-1: SerialNumber: syz [ 233.995702][ T5845] infiniband syz2: Couldn't open port 1 [ 234.065896][ T23] usb 3-1: can't set config #1, error -71 [ 234.082098][ T23] usb 3-1: USB disconnect, device number 3 [ 234.156024][ T5845] RDS/IB: syz2: added [ 234.160660][ T5845] smc: adding ib device syz2 with port count 1 [ 234.182977][ T5845] smc: ib device syz2 port 1 has pnetid [ 234.429926][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.454123][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.549534][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.586887][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.609035][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.662288][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.686095][ T5522] device veth0_vlan entered promiscuous mode [ 234.762930][ T5522] device veth1_vlan entered promiscuous mode [ 235.332340][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.370488][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.418049][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.444732][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.486705][ T5522] device veth0_macvtap entered promiscuous mode [ 235.506659][ T5522] device veth1_macvtap entered promiscuous mode [ 235.533912][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.547144][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.618481][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.632452][ T5914] loop1: detected capacity change from 0 to 256 [ 235.679679][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.720161][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.749203][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.769905][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.790919][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.823602][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.898965][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.012663][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.206103][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.227715][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.279211][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.343847][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.374193][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.393027][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.454963][ T5936] netlink: 'syz.4.340': attribute type 3 has an invalid length. [ 237.526106][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.626030][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.830610][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.969733][ T5914] FAT-fs (loop1): Directory bread(block 64) failed [ 237.984134][ T5522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.013410][ T5914] FAT-fs (loop1): Directory bread(block 65) failed [ 238.020040][ T5914] FAT-fs (loop1): Directory bread(block 66) failed [ 238.047302][ T5522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.078910][ T5914] FAT-fs (loop1): Directory bread(block 67) failed [ 238.086633][ T5914] FAT-fs (loop1): Directory bread(block 68) failed [ 238.093249][ T5914] FAT-fs (loop1): Directory bread(block 69) failed [ 238.099850][ T5914] FAT-fs (loop1): Directory bread(block 70) failed [ 238.101095][ T5938] loop2: detected capacity change from 0 to 2048 [ 238.106435][ T5914] FAT-fs (loop1): Directory bread(block 71) failed [ 238.106556][ T5914] FAT-fs (loop1): Directory bread(block 72) failed [ 238.106588][ T5914] FAT-fs (loop1): Directory bread(block 73) failed [ 238.114959][ T5522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.153900][ T5522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.167994][ T5940] loop4: detected capacity change from 0 to 64 [ 238.182443][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.220627][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.294882][ T5940] hfs: get root inode failed [ 238.404014][ T5941] loop2: detected capacity change from 0 to 2048 [ 238.612285][ T5941] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.670003][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.820494][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.364189][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.412771][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.421302][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.443217][ T5945] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.522947][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.569441][ T5948] loop4: detected capacity change from 0 to 24 [ 239.585053][ T26] audit: type=1800 audit(1731402903.483:15): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.341" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 239.637578][ T5948] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 239.672055][ T5941] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 239.680025][ T5941] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 239.716123][ T5951] loop3: detected capacity change from 0 to 16 [ 239.725926][ T26] audit: type=1800 audit(1731402903.513:16): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.341" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 239.755771][ T5948] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 239.841544][ T5951] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.226786][ T5965] loop1: detected capacity change from 0 to 512 [ 240.321587][ T5965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.007765][ T5958] loop2: detected capacity change from 0 to 8192 [ 241.141835][ T5965] EXT4-fs (loop1): 1 truncate cleaned up [ 241.147524][ T5965] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 241.179111][ T5958] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 241.284897][ T5958] REISERFS (device loop2): using ordered data mode [ 241.321654][ T5958] reiserfs: using flush barriers [ 241.965439][ T5958] REISERFS (device loop2): journal params: device ram0, size 127, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 242.019943][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.258'. [ 242.118697][ T5958] REISERFS (device loop2): checking transaction log (ram0) [ 242.319132][ T5958] REISERFS warning: reiserfs-5086 is_leaf: item location seems wrong (second one): *3.5*[1 2 0x0 SD], item_len 32, item_location 1760, free_space(entry_count) 0 [ 242.377295][ T5958] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 242.551825][ T5958] REISERFS (device loop2): Remounting filesystem read-only [ 242.623932][ T5958] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 242.930977][ T5958] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 243.474984][ T6002] loop5: detected capacity change from 0 to 512 [ 243.485051][ T6004] loop1: detected capacity change from 0 to 256 [ 243.577143][ T6002] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 243.612539][ T6002] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 243.635635][ T6002] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 243.701407][ T6002] EXT4-fs (loop5): group descriptors corrupted! [ 243.902813][ T6008] loop2: detected capacity change from 0 to 4096 [ 244.011760][ T6008] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 244.045434][ T6008] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 244.077973][ T6008] ntfs3: loop2: Failed to load $MFT. [ 244.112761][ T5977] loop4: detected capacity change from 0 to 32768 [ 244.165022][ T6017] loop1: detected capacity change from 0 to 2048 [ 244.269357][ T6023] loop5: detected capacity change from 0 to 4096 [ 244.311968][ T6017] hpfs: filesystem error: improperly stopped; already mounted read-only [ 244.337406][ T6017] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 244.341349][ T5991] loop3: detected capacity change from 0 to 40427 [ 244.374561][ T6023] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 244.400703][ T5991] F2FS-fs (loop3): LFS not compatible with checkpoint=disable [ 244.569700][ T26] audit: type=1800 audit(1731402908.463:17): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.359" name="file1" dev="loop5" ino=29 res=0 errno=0 [ 244.577614][ T6030] syz.2.362 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 244.697766][ T6036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.361'. [ 244.704332][ T6035] netlink: 'syz.5.359': attribute type 4 has an invalid length. [ 244.820619][ T6023] netlink: 'syz.5.359': attribute type 4 has an invalid length. [ 245.531491][ T4265] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.811967][ T4265] usb 4-1: Using ep0 maxpacket: 8 [ 246.006193][ T6059] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 246.061680][ T4265] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 246.070741][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.070768][ T4265] usb 4-1: SerialNumber: syz [ 246.152864][ T4265] usb 4-1: config 0 descriptor?? [ 246.437910][ T4326] usb 4-1: USB disconnect, device number 4 [ 247.702771][ T6085] usb usb8: usbfs: process 6085 (syz.5.372) did not claim interface 0 before use [ 249.808832][ T6110] loop2: detected capacity change from 0 to 8 [ 249.866845][ T6099] loop5: detected capacity change from 0 to 8192 [ 249.969933][ T6099] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 250.024772][ T6099] REISERFS (device loop5): using journaled data mode [ 250.049893][ T6099] reiserfs: using flush barriers [ 250.107304][ T6099] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.174681][ T6099] REISERFS (device loop5): checking transaction log (loop5) [ 250.188857][ T6115] loop1: detected capacity change from 0 to 4096 [ 250.447475][ T6099] REISERFS (device loop5): Using r5 hash to sort names [ 250.679101][ T6099] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 250.758526][ T6115] ntfs: volume version 3.1. [ 250.818661][ T6099] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 250.985130][ T6133] loop4: detected capacity change from 0 to 512 [ 251.037233][ T6133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.099935][ T6133] EXT4-fs (loop4): 1 truncate cleaned up [ 251.119895][ T6133] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 251.221952][ T4519] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.581496][ T4519] usb 4-1: Using ep0 maxpacket: 16 [ 252.292458][ T4519] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 252.693363][ T4519] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.735234][ T4519] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.143056][ T6171] xt_l2tp: v2 sid > 0xffff: 262144 [ 253.182413][ T6174] loop4: detected capacity change from 0 to 8 [ 253.211716][ T4519] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.258098][ T4519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.293741][ T4519] usb 4-1: Product: syz [ 253.320140][ T4519] usb 4-1: Manufacturer: syz [ 253.338764][ T4519] usb 4-1: SerialNumber: syz [ 253.555334][ T6184] usb usb8: usbfs: process 6184 (syz.1.398) did not claim interface 0 before use [ 253.565713][ T1110] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 253.736580][ T4519] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 254.036311][ T1110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.106374][ T1110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 254.173312][ T4519] usb 4-1: USB disconnect, device number 5 [ 254.256769][ T1110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 254.313167][ T1110] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 254.642929][ T6203] loop4: detected capacity change from 0 to 128 [ 254.845276][ T6207] loop5: detected capacity change from 0 to 512 [ 254.950904][ T6190] loop1: detected capacity change from 0 to 8192 [ 255.182404][ T6207] EXT4-fs (loop5): #blocks per group too big: 16384 [ 255.182525][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.190510][ T6190] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 255.207495][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.216451][ T1110] usb 3-1: SerialNumber: syz [ 255.228637][ T6203] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.240083][ T6203] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.249546][ T6190] REISERFS (device loop1): using ordered data mode [ 255.291642][ T6219] loop3: detected capacity change from 0 to 512 [ 255.299038][ T6190] reiserfs: using flush barriers [ 255.305682][ T6195] usb usb1: usbfs: interface 0 claimed by hub while '+}[@' sets config #0 [ 255.307305][ T6190] REISERFS (device loop1): journal params: device ram0, size 0, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 255.330689][ T6172] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 255.338384][ T6172] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 255.355867][ T5105] udevd[5105]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.358752][ T6190] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (0 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 255.383135][ T1110] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 255.399920][ T6190] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 255.414594][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.476320][ T6219] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.538739][ T6219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.407: bg 0: block 248: padding at end of block bitmap is not set [ 255.615398][ T1110] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 255.637022][ T1110] usb 3-1: USB disconnect, device number 4 [ 255.686973][ T6219] Quota error (device loop3): write_blk: dquota write failed [ 255.733977][ T6219] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 255.752144][ T6219] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.407: Failed to acquire dquot type 1 [ 255.781100][ T6219] EXT4-fs (loop3): 1 truncate cleaned up [ 255.800633][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,auto_da_alloc,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 255.899995][ T6232] loop1: detected capacity change from 0 to 16 [ 255.923539][ T6230] loop4: detected capacity change from 0 to 4096 [ 255.965939][ T6230] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 256.005982][ T6232] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.333792][ T6243] loop2: detected capacity change from 0 to 64 [ 257.078961][ T6224] loop5: detected capacity change from 0 to 32768 [ 257.122808][ T6243] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2 [ 257.135205][ T6224] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.409 (6224) [ 257.206362][ T6224] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 257.251618][ T6224] BTRFS info (device loop5): using free space tree [ 257.295200][ T6224] BTRFS info (device loop5): has skinny extents [ 257.538504][ T6224] BTRFS info (device loop5): enabling ssd optimizations [ 257.552637][ T6245] loop1: detected capacity change from 0 to 32768 [ 257.576073][ T6224] BTRFS warning (device loop5): qgroup rescan init failed, qgroup is not enabled [ 257.622736][ T6293] rdma_rxe: rxe_register_device failed with error -23 [ 257.639752][ T6245] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.417 (6245) [ 257.650625][ T6293] rdma_rxe: failed to add team_slave_1 [ 257.694826][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 257.858658][ T4173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4173) [ 258.088034][ T6295] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 258.215839][ T6264] loop3: detected capacity change from 0 to 32768 [ 258.300344][ T6264] jfs: Unrecognized mount option "gid=0x0000000000000000" or missing value [ 258.598236][ T6315] loop4: detected capacity change from 0 to 256 [ 258.732365][ T6315] FAT-fs (loop4): Directory bread(block 64) failed [ 258.781537][ T6315] FAT-fs (loop4): Directory bread(block 65) failed [ 258.796963][ T6315] FAT-fs (loop4): Directory bread(block 66) failed [ 258.811594][ T6315] FAT-fs (loop4): Directory bread(block 67) failed [ 258.831971][ T6322] loop3: detected capacity change from 0 to 256 [ 258.860230][ T6315] FAT-fs (loop4): Directory bread(block 68) failed [ 258.881489][ T6315] FAT-fs (loop4): Directory bread(block 69) failed [ 258.888118][ T6315] FAT-fs (loop4): Directory bread(block 70) failed [ 258.900970][ T6318] loop1: detected capacity change from 0 to 4096 [ 258.937708][ T6322] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.972662][ T6315] FAT-fs (loop4): Directory bread(block 71) failed [ 258.991130][ T6315] FAT-fs (loop4): Directory bread(block 72) failed [ 259.010934][ T6315] FAT-fs (loop4): Directory bread(block 73) failed [ 259.064103][ T6318] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 259.221138][ T26] audit: type=1800 audit(1731402923.113:18): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.438" name="file1" dev="loop1" ino=29 res=0 errno=0 [ 259.267119][ T6333] capability: warning: `syz.5.442' uses deprecated v2 capabilities in a way that may be insecure [ 259.269954][ T6318] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 259.419742][ T6332] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 259.455018][ T6340] loop4: detected capacity change from 0 to 512 [ 259.536639][ T6344] loop3: detected capacity change from 0 to 1024 [ 259.605313][ T6340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.752759][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 259.759659][ T6340] EXT4-fs (loop4): 1 truncate cleaned up [ 259.771926][ T6340] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 259.810246][ T6312] loop2: detected capacity change from 0 to 32768 [ 259.904078][ T6357] loop3: detected capacity change from 0 to 512 [ 259.946778][ T6312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.434 (6312) [ 260.093598][ T6357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.105183][ T6312] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 260.177700][ T6312] BTRFS info (device loop2): metadata ratio 2 [ 260.184987][ T6312] BTRFS info (device loop2): force zlib compression, level 3 [ 260.193655][ T6312] BTRFS info (device loop2): enabling auto defrag [ 260.200365][ T6312] BTRFS info (device loop2): max_inline at 0 [ 260.207109][ T6312] BTRFS info (device loop2): using free space tree [ 260.214807][ T6312] BTRFS info (device loop2): has skinny extents [ 260.216181][ T6357] EXT4-fs (loop3): 1 truncate cleaned up [ 260.281445][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 261.639618][ T6393] loop4: detected capacity change from 0 to 1024 [ 261.787638][ T6393] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.452: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 261.932851][ T6393] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.452: couldn't read orphan inode 11 (err -117) [ 261.953690][ T6393] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 262.035461][ T6348] loop5: detected capacity change from 0 to 32768 [ 262.125085][ T6406] loop3: detected capacity change from 0 to 2048 [ 262.224463][ T6393] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.452: Invalid block bitmap block 0 in block_group 0 [ 262.257622][ T6348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.446 (6348) [ 262.278995][ T6393] Quota error (device loop4): write_blk: dquota write failed [ 262.285024][ T6406] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 262.287498][ T6393] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 262.315553][ T6393] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.452: Failed to acquire dquot type 0 [ 262.330387][ T6427] loop2: detected capacity change from 0 to 512 [ 262.362973][ T6406] UDF-fs: Scanning with blocksize 512 failed [ 262.380998][ T6348] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 262.417397][ T6348] BTRFS info (device loop5): using free space tree [ 262.428940][ T6406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.464609][ T6348] BTRFS info (device loop5): has skinny extents [ 262.527694][ T6427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.632225][ T6427] EXT4-fs (loop2): 1 truncate cleaned up [ 262.667322][ T6427] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 262.724308][ T6430] loop1: detected capacity change from 0 to 32768 [ 262.732127][ T154] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 262.735062][ T6348] BTRFS error (device loop5): open_ctree failed [ 262.741032][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 262.764735][ T4507] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4507) [ 262.850466][ T6430] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 262.860129][ T6430] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 263.096554][ T6430] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 263.255724][ T284] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 263.278036][ T284] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 263.503423][ T284] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 225ms [ 263.512318][ T284] gfs2: fsid=syz:syz.0: jid=0: Done [ 263.527986][ T6430] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 263.619849][ T6459] capability: warning: `syz.5.460' uses 32-bit capabilities (legacy support in use) [ 264.477288][ T6475] loop3: detected capacity change from 0 to 512 [ 264.560110][ T6475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.593258][ T6481] loop2: detected capacity change from 0 to 128 [ 264.642346][ T6475] EXT4-fs (loop3): 1 truncate cleaned up [ 264.649533][ T6475] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 264.744289][ T6491] devpts: called with bogus options [ 264.829408][ T6481] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 265.516988][ T6481] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 265.563672][ T6499] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 265.652297][ T6498] loop5: detected capacity change from 0 to 1024 [ 265.664226][ T6501] loop4: detected capacity change from 0 to 2048 [ 265.680761][ T6481] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.465: checksumming directory block 0 [ 265.729029][ T6481] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.465: checksumming directory block 0 [ 265.747323][ T6501] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 265.851735][ T4420] hfsplus: b-tree write err: -5, ino 4 [ 266.210470][ T6517] tipc: Started in network mode [ 266.234991][ T6517] tipc: Node identity ac14140f, cluster identity 4711 [ 266.286876][ T6517] tipc: New replicast peer: 255.255.255.255 [ 266.348110][ T6517] tipc: Enabled bearer , priority 10 [ 267.308271][ T6551] loop5: detected capacity change from 0 to 128 [ 267.350963][ T6558] loop2: detected capacity change from 0 to 512 [ 267.377556][ T4216] tipc: Node number set to 2886997007 [ 267.406022][ T6558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 267.427204][ T6551] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 267.480539][ T6558] EXT4-fs (loop2): 1 truncate cleaned up [ 267.486508][ T6551] sysv_free_block: trying to free block not in datazone [ 267.531570][ T6558] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 267.551869][ T4216] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 267.610587][ T5522] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 267.661641][ T6419] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.811672][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 267.901514][ T6419] usb 4-1: Using ep0 maxpacket: 16 [ 267.972015][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.010630][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.022231][ T6419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.092497][ T6419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.114518][ T4216] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 268.170016][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.179767][ T6419] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 268.216212][ T6419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.219807][ T4216] usb 2-1: config 0 descriptor?? [ 268.239176][ T6419] usb 4-1: config 0 descriptor?? [ 268.321827][ T6576] loop5: detected capacity change from 0 to 4096 [ 268.427328][ T6576] ntfs3: loop5: ino=3, Correct links count -> 2. [ 268.477898][ T6595] loop4: detected capacity change from 0 to 512 [ 268.522116][ T6597] netlink: 'syz.2.497': attribute type 21 has an invalid length. [ 268.530082][ T6597] netlink: 144 bytes leftover after parsing attributes in process `syz.2.497'. [ 268.603024][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 268.659286][ T6595] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.660140][ T6603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 268.700958][ T6603] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 268.718212][ T4216] apple 0003:05AC:0247.0001: unknown main item tag 0xd [ 268.733606][ T4216] apple 0003:05AC:0247.0001: unexpected long global item [ 268.735229][ T6419] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 268.742832][ T4216] apple 0003:05AC:0247.0001: parse failed [ 268.754730][ T4216] apple: probe of 0003:05AC:0247.0001 failed with error -22 [ 268.778321][ T26] audit: type=1800 audit(1731402932.673:19): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.496" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 268.848864][ T6419] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 268.881030][ T26] audit: type=1800 audit(1731402932.703:20): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.496" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 268.937926][ T6419] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 268.982496][ T6419] usb 4-1: USB disconnect, device number 6 [ 269.018390][ T6304] usb 2-1: USB disconnect, device number 4 [ 269.109368][ T6608] loop2: detected capacity change from 0 to 4096 [ 269.175724][ T6608] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 269.234662][ T6623] loop4: detected capacity change from 0 to 512 [ 269.282471][ T6623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.340792][ T6623] EXT4-fs (loop4): 1 truncate cleaned up [ 269.357071][ T6623] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 270.507638][ T6663] loop2: detected capacity change from 0 to 8 [ 270.661676][ T4644] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.688478][ T6676] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.518'. [ 270.760014][ T6305] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 270.952402][ T6676] openvswitch: netlink: Message has 41214 unknown bytes. [ 271.021608][ T4644] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.054069][ T4644] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.131941][ T6305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 271.151805][ T4644] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.224182][ T6305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 271.293353][ T4644] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 271.352920][ T6305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.438830][ T4644] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 271.471470][ T6305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 271.511513][ T6305] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 271.545399][ T6305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.601151][ T6305] usb 2-1: config 0 descriptor?? [ 271.621698][ T4644] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.637541][ T4644] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.658682][ T4644] usb 6-1: Product: syz [ 271.667520][ T4644] usb 6-1: Manufacturer: syz [ 271.766273][ T4644] cdc_wdm 6-1:1.0: skipping garbage [ 271.773151][ T4644] cdc_wdm 6-1:1.0: skipping garbage [ 271.781084][ T6691] loop4: detected capacity change from 0 to 128 [ 271.798875][ T4644] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 271.835001][ T4644] cdc_wdm 6-1:1.0: Unknown control protocol [ 271.890679][ T4644] usb 2-1: USB disconnect, device number 5 [ 271.898781][ T6691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.911659][ T6691] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.014016][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.019157][ T6706] loop4: detected capacity change from 0 to 64 [ 272.021362][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.033843][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.040458][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.058663][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.065288][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.071499][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.078106][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.087896][ T6419] usb 6-1: USB disconnect, device number 2 [ 272.093775][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.093795][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.093808][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.135524][ T6710] ax25_connect(): syz.3.527 uses autobind, please contact jreuter@yaina.de [ 272.164481][ T6706] hfs: bad catalog entry type 0 [ 272.314732][ T6719] input: syz0 as /devices/virtual/input/input5 [ 273.200263][ T6741] loop2: detected capacity change from 0 to 7 [ 273.343601][ T6733] loop1: detected capacity change from 0 to 4096 [ 273.366728][ T6741] Dev loop2: unable to read RDB block 7 [ 273.423055][ T6741] loop2: unable to read partition table [ 273.428939][ T6741] loop2: partition table beyond EOD, truncated [ 273.435447][ T6741] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.463006][ T6743] loop5: detected capacity change from 0 to 512 [ 273.521929][ T6733] ntfs3: loop1: ino=3, Correct links count -> 2. [ 273.536619][ T6743] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 273.637807][ T6743] EXT4-fs (loop5): 1 truncate cleaned up [ 273.656030][ T6749] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 273.684122][ T6743] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 274.307335][ T6740] loop3: detected capacity change from 0 to 32768 [ 274.308776][ T6762] loop4: detected capacity change from 0 to 512 [ 274.320356][ T6763] loop2: detected capacity change from 0 to 1024 [ 274.343296][ T6763] EXT4-fs (loop2): Ignoring removed oldalloc option [ 274.396839][ T6763] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 274.436338][ T6740] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 274.460560][ T6762] EXT4-fs (loop4): 1 truncate cleaned up [ 274.480592][ T6762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.490580][ T6740] BTRFS info (device loop3): using free space tree [ 274.498693][ T6771] mmap: syz.1.549 (6771) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 274.514654][ T26] audit: type=1800 audit(1731402938.413:21): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.547" name="bus" dev="loop2" ino=15 res=0 errno=0 [ 274.526623][ T6740] BTRFS info (device loop3): has skinny extents [ 274.748237][ T6787] loop5: detected capacity change from 0 to 256 [ 274.876569][ T6801] loop4: detected capacity change from 0 to 512 [ 274.942403][ T6740] BTRFS info (device loop3): enabling ssd optimizations [ 274.971914][ T6801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 275.009930][ T6801] System zones: 1-12 [ 275.023462][ T6801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.555: inode #1: comm syz.4.555: iget: illegal inode # [ 275.025986][ T6808] loop2: detected capacity change from 0 to 512 [ 275.050283][ T6801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.555: error while reading EA inode 1 err=-117 [ 275.073393][ T6801] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.100343][ T6801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.555: inode #1: comm syz.4.555: iget: illegal inode # [ 275.120365][ T6801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.555: error while reading EA inode 1 err=-117 [ 275.134963][ T6801] EXT4-fs (loop4): 1 orphan inode deleted [ 275.140702][ T6801] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,debug,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 275.215616][ T6808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.259372][ T6808] EXT4-fs (loop2): 1 truncate cleaned up [ 275.310211][ T6808] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 275.961508][ T6817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 276.222550][ T6817] usb 6-1: Using ep0 maxpacket: 16 [ 276.267268][ T26] audit: type=1326 audit(1731402940.163:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.310661][ T26] audit: type=1326 audit(1731402940.163:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.391681][ T6817] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.400445][ T6817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.437051][ T6837] loop3: detected capacity change from 0 to 4096 [ 276.443516][ T26] audit: type=1326 audit(1731402940.193:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.477077][ T6817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.494561][ T26] audit: type=1326 audit(1731402940.193:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.521035][ T6849] loop1: detected capacity change from 0 to 64 [ 276.528466][ T26] audit: type=1326 audit(1731402940.193:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.558023][ T26] audit: type=1326 audit(1731402940.193:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.588317][ T26] audit: type=1326 audit(1731402940.193:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.624587][ T26] audit: type=1326 audit(1731402940.193:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.653828][ T26] audit: type=1326 audit(1731402940.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.2.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998053d719 code=0x7ffc0000 [ 276.681264][ T6837] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 276.712405][ T6817] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.727519][ T6817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.744665][ T6817] usb 6-1: Product: syz [ 276.754132][ T6817] usb 6-1: Manufacturer: syz [ 276.759397][ T6817] usb 6-1: SerialNumber: syz [ 276.837911][ T6827] loop4: detected capacity change from 0 to 40427 [ 276.940524][ T6827] F2FS-fs (loop4): Found nat_bits in checkpoint [ 277.002903][ T6827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 277.066134][ T4175] attempt to access beyond end of device [ 277.066134][ T4175] loop4: rw=2049, want=45104, limit=40427 [ 277.158836][ T6865] input: syz0 as /devices/virtual/input/input6 [ 277.282965][ T6817] usb 6-1: 0:2 : does not exist [ 277.551452][ T6878] loop4: detected capacity change from 0 to 512 [ 277.610793][ T6878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.691686][ T6878] EXT4-fs (loop4): 1 truncate cleaned up [ 277.697565][ T6888] loop2: detected capacity change from 0 to 1024 [ 277.697762][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 277.731337][ T6882] loop1: detected capacity change from 0 to 4096 [ 277.827567][ T6888] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.581: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 277.852377][ T6882] ntfs3: loop1: ino=3, Correct links count -> 2. [ 277.941726][ T6817] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 278.145767][ T6888] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.581: couldn't read orphan inode 11 (err -117) [ 278.168953][ T6892] loop3: detected capacity change from 0 to 256 [ 278.197340][ T6888] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 278.311937][ T6817] usb 6-1: USB disconnect, device number 3 [ 278.366296][ T6888] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.581: Invalid block bitmap block 0 in block_group 0 [ 278.388417][ T4179] Bluetooth: Wrong link type (-22) [ 278.404814][ T6888] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.581: Failed to acquire dquot type 0 [ 278.542975][ T4270] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:9: Failed to release dquot type 0 [ 278.562699][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.567541][ T6905] loop1: detected capacity change from 0 to 1024 [ 278.669853][ T6911] loop4: detected capacity change from 0 to 512 [ 278.713164][ T6915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 278.724415][ T6911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.745197][ T6911] EXT4-fs (loop4): 1 truncate cleaned up [ 278.751117][ T6911] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 278.839287][ T6920] loop2: detected capacity change from 0 to 4096 [ 278.896304][ T6920] ntfs3: loop2: ino=3, Correct links count -> 2. [ 278.930975][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 278.941705][ T6817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.268724][ T6924] loop1: detected capacity change from 0 to 512 [ 279.375242][ T6817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.391724][ T6817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 279.417867][ T6817] usb 4-1: config 1 has no interface number 0 [ 279.435613][ T6924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.439544][ T6817] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.475316][ T6926] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 279.482217][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.484957][ T6817] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 279.494861][ T6924] EXT4-fs (loop1): 1 truncate cleaned up [ 279.540826][ T6924] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 279.543345][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 279.653003][ T6927] usbip_core: unknown command [ 279.657792][ T6927] vhci_hcd: unknown pdu 808531767 [ 279.686510][ T6927] usbip_core: unknown command [ 279.701728][ T6817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.731165][ T6817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.744238][ T4323] vhci_hcd: stop threads [ 279.752106][ T4323] vhci_hcd: release socket [ 279.757969][ T4323] vhci_hcd: disconnect device [ 279.902193][ T6817] usb 4-1: Product: syz [ 279.911686][ T6419] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 279.949338][ T6817] usb 4-1: Manufacturer: syz [ 280.025548][ T6817] usb 4-1: SerialNumber: syz [ 280.994206][ T6943] loop5: detected capacity change from 0 to 1024 [ 281.120905][ T6943] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.599: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 281.147992][ T6943] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.599: couldn't read orphan inode 11 (err -117) [ 281.160278][ T6943] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobarrier,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 281.162226][ T6817] cdc_ncm 4-1:1.1: bind() failure [ 281.221610][ T6419] usb 5-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 281.234109][ T6943] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.599: Invalid block bitmap block 0 in block_group 0 [ 281.261499][ T6419] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.301477][ T6419] usb 5-1: config 1 has no interface number 0 [ 281.308800][ T6419] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.311893][ T6943] __quota_error: 8 callbacks suppressed [ 281.311909][ T6943] Quota error (device loop5): write_blk: dquota write failed [ 281.330183][ T6419] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 281.352893][ T6419] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.368096][ T6943] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 281.386369][ T6943] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.599: Failed to acquire dquot type 0 [ 281.429867][ T4644] usb 4-1: USB disconnect, device number 7 [ 281.525648][ T4357] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 281.539929][ T4357] EXT4-fs error (device loop5): ext4_release_dquot:6220: comm kworker/u4:11: Failed to release dquot type 0 [ 281.558322][ T6955] loop2: detected capacity change from 0 to 512 [ 281.581599][ T6419] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.590777][ T6419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.605331][ T6419] usb 5-1: Product: syz [ 281.609525][ T6419] usb 5-1: Manufacturer: syz [ 281.615773][ T6419] usb 5-1: SerialNumber: syz [ 281.636502][ T6955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 281.717315][ T6955] EXT4-fs (loop2): 1 truncate cleaned up [ 281.734486][ T6955] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 281.980197][ T6948] loop1: detected capacity change from 0 to 32768 [ 282.217685][ T6948] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 282.350270][ T6970] loop5: detected capacity change from 0 to 512 [ 282.397603][ T26] audit: type=1800 audit(1731402946.293:36): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.600" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 282.436818][ T6970] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.488086][ T4165] ocfs2: Unmounting device (7,1) on (node local) [ 282.539829][ T6970] EXT4-fs (loop5): 1 truncate cleaned up [ 282.548570][ T6970] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 282.561572][ T6419] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 282.632288][ T6419] cdc_ncm 5-1:1.1: bind() failure [ 282.860233][ T6419] usb 5-1: USB disconnect, device number 5 [ 283.191080][ T6987] loop4: detected capacity change from 0 to 512 [ 283.265752][ T6987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.148231][ T6987] EXT4-fs (loop4): 1 truncate cleaned up [ 284.205843][ T6987] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 285.549022][ T7023] loop4: detected capacity change from 0 to 256 [ 285.819764][ T7028] loop3: detected capacity change from 0 to 256 [ 285.912445][ T7028] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 286.128382][ T7009] loop2: detected capacity change from 0 to 32768 [ 286.218538][ T7040] loop3: detected capacity change from 0 to 256 [ 286.320077][ T7040] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 286.347697][ T7009] XFS (loop2): Mounting V5 Filesystem [ 286.428136][ T7015] loop1: detected capacity change from 0 to 40427 [ 286.467453][ T7009] XFS (loop2): Ending clean mount [ 286.497287][ T26] audit: type=1800 audit(1731402950.393:37): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.629" name="file2" dev="loop3" ino=1048625 res=0 errno=0 [ 286.543022][ T7036] loop5: detected capacity change from 0 to 32768 [ 286.559485][ T7009] XFS (loop2): Quotacheck needed: Please wait. [ 286.569796][ T7015] F2FS-fs (loop1): invalid crc value [ 286.594462][ T7015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 286.622496][ T7036] XFS (loop5): Mounting V5 Filesystem [ 286.698108][ T7009] XFS (loop2): Quotacheck: Done. [ 286.755741][ T7015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.784802][ T7036] XFS (loop5): Ending clean mount [ 286.826032][ T7015] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xb4/0x740 [ 286.874367][ T4165] attempt to access beyond end of device [ 286.874367][ T4165] loop1: rw=2049, want=45112, limit=40427 [ 286.982291][ T7063] loop4: detected capacity change from 0 to 512 [ 287.024213][ T4164] XFS (loop2): Unmounting Filesystem [ 287.790765][ T7063] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.809757][ T26] audit: type=1800 audit(1731402951.703:38): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.628" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 287.843783][ T7063] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.905603][ T26] audit: type=1800 audit(1731402951.803:39): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.631" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 287.958375][ T7074] loop3: detected capacity change from 0 to 512 [ 288.050826][ T7074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.073391][ T7074] EXT4-fs (loop3): 1 truncate cleaned up [ 288.107087][ T7074] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 288.664551][ T5522] XFS (loop5): Unmounting Filesystem [ 288.799827][ T7084] loop3: detected capacity change from 0 to 512 [ 288.870926][ T7087] loop4: detected capacity change from 0 to 1024 [ 288.979739][ T7084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.044482][ T7084] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.223842][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 289.334924][ T7085] loop2: detected capacity change from 0 to 32768 [ 289.461880][ T7085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.633 (7085) [ 289.485884][ T7100] loop5: detected capacity change from 0 to 4096 [ 289.499746][ T7085] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 289.499786][ T7085] BTRFS info (device loop2): setting nodatacow, compression disabled [ 289.499814][ T7085] BTRFS info (device loop2): enabling auto defrag [ 289.499836][ T7085] BTRFS info (device loop2): doing ref verification [ 289.499851][ T7085] BTRFS info (device loop2): using free space tree [ 289.499865][ T7085] BTRFS info (device loop2): has skinny extents [ 289.544166][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.644'. [ 289.676480][ T7128] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.757320][ T26] audit: type=1800 audit(1731402953.653:40): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.642" name="bus" dev="loop5" ino=19 res=0 errno=0 [ 289.821600][ T4644] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 289.918075][ T7142] loop1: detected capacity change from 0 to 512 [ 290.184384][ T7142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.211953][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 290.305074][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 290.443673][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.575231][ T7142] EXT4-fs (loop1): 1 truncate cleaned up [ 290.582688][ T7142] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 290.591328][ T26] audit: type=1800 audit(1731402953.883:41): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.642" name="bus" dev="loop5" ino=19 res=0 errno=0 [ 290.602430][ T4644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 290.635935][ T4644] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 290.645722][ T4644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.775130][ T4644] usb 5-1: config 0 descriptor?? [ 291.159773][ T6817] usb 5-1: USB disconnect, device number 6 [ 291.202148][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 291.280289][ T7152] loop5: detected capacity change from 0 to 4096 [ 291.338112][ T7154] loop1: detected capacity change from 0 to 2048 [ 291.437983][ T7154] NILFS (loop1): invalid segment: Checksum error in segment payload [ 291.456833][ T7154] NILFS (loop1): trying rollback from an earlier position [ 291.473772][ T7155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.484998][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 291.508848][ T7154] NILFS (loop1): recovery complete [ 291.566950][ T7157] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.611613][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 291.635830][ T26] audit: type=1800 audit(1731402955.533:42): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.649" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 291.657817][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.678814][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.788247][ T7161] loop4: detected capacity change from 0 to 512 [ 291.848390][ T7163] loop5: detected capacity change from 0 to 1024 [ 291.861494][ T7161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.862139][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.884107][ T7161] EXT4-fs (loop4): 1 truncate cleaned up [ 291.890531][ T7161] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 291.901404][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.160961][ T7] usb 4-1: Product: syz [ 292.214994][ T7] usb 4-1: Manufacturer: syz [ 292.238929][ T7] usb 4-1: SerialNumber: syz [ 292.498903][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 292.569675][ T7158] loop2: detected capacity change from 0 to 32768 [ 292.671567][ T26] audit: type=1800 audit(1731402956.573:43): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 292.702127][ T26] audit: type=1800 audit(1731402956.593:44): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 292.734414][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.656'. [ 292.763355][ T26] audit: type=1800 audit(1731402956.593:45): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 292.812288][ T7] usb 4-1: 0:2 : does not exist [ 293.815092][ T7196] loop5: detected capacity change from 0 to 512 [ 293.871181][ T7196] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.925140][ T7196] EXT4-fs (loop5): 1 truncate cleaned up [ 293.930829][ T7196] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 294.191984][ T7] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 294.302807][ T7207] loop2: detected capacity change from 0 to 256 [ 294.323072][ T7204] loop4: detected capacity change from 0 to 512 [ 294.350264][ T7204] EXT4-fs (loop4): inline encryption not supported [ 294.494703][ T7] usb 4-1: USB disconnect, device number 8 [ 294.500511][ T7207] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 294.557999][ T7204] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 294.564115][ T26] audit: type=1800 audit(1731402958.453:46): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.657" name="file2" dev="loop2" ino=1048637 res=0 errno=0 [ 294.629193][ T7204] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 294.737036][ T7204] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.665: Corrupt directory, running e2fsck is recommended [ 294.775955][ T7204] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 294.784802][ T7204] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.665: corrupted in-inode xattr [ 294.827109][ T7204] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.665: couldn't read orphan inode 15 (err -117) [ 294.840802][ T7204] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,inlinecrypt,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 294.965056][ T7204] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 294.977703][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 294.987855][ T7204] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 294.998945][ T7204] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.665: Corrupt directory, running e2fsck is recommended [ 295.014072][ T7204] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.665: path /140/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 295.040283][ T7204] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 8: comm syz.4.665: path /140/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 295.097986][ T7223] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 295.165564][ T7201] loop1: detected capacity change from 0 to 32768 [ 295.176799][ T7223] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 295.273176][ T26] audit: type=1800 audit(1731402959.173:47): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.663" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 295.351839][ T26] audit: type=1800 audit(1731402959.173:48): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.663" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 295.756394][ T7230] loop2: detected capacity change from 0 to 512 [ 296.040973][ T26] audit: type=1800 audit(1731402959.173:49): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.663" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 296.170940][ T7230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.191757][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.203388][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.231396][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.260984][ T7230] EXT4-fs (loop2): 1 truncate cleaned up [ 296.272207][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.281262][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.291712][ T7] usb 4-1: config 0 descriptor?? [ 296.305838][ T7230] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 296.461911][ T7236] loop4: detected capacity change from 0 to 4096 [ 296.778837][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 296.840933][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 297.093163][ T1107] usb 4-1: USB disconnect, device number 9 [ 297.248390][ T7256] loop4: detected capacity change from 0 to 4096 [ 297.372789][ T7259] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.411751][ T6416] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 297.582289][ T7250] loop5: detected capacity change from 0 to 32768 [ 297.644645][ T7262] loop1: detected capacity change from 0 to 512 [ 297.688303][ T7250] XFS (loop5): Mounting V5 Filesystem [ 297.771599][ T6416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 297.832575][ T6416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.894639][ T6416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.956288][ T6416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 297.999252][ T7274] loop3: detected capacity change from 0 to 1024 [ 298.026050][ T6416] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 298.056814][ T6416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.118924][ T7250] XFS (loop5): Ending clean mount [ 298.145205][ T6416] usb 3-1: config 0 descriptor?? [ 298.175954][ T7262] EXT4-fs (loop1): 1 truncate cleaned up [ 298.211085][ T7262] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 298.255230][ T4266] hfsplus: b-tree write err: -5, ino 4 [ 298.263335][ T7264] loop4: detected capacity change from 0 to 40427 [ 298.319631][ T7264] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 298.337825][ T7264] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 298.370140][ T7264] F2FS-fs (loop4): invalid crc value [ 298.407588][ T7264] F2FS-fs (loop4): Found nat_bits in checkpoint [ 298.577742][ T5522] XFS (loop5): Unmounting Filesystem [ 298.585465][ T7264] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 298.593034][ T7264] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 298.697029][ T6416] thrustmaster 0003:044F:B653.0004: unbalanced delimiter at end of report description [ 298.735628][ T6416] thrustmaster 0003:044F:B653.0004: parse failed [ 298.748678][ T6416] thrustmaster: probe of 0003:044F:B653.0004 failed with error -22 [ 298.832240][ T154] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 298.842812][ T154] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 298.917335][ T4317] usb 3-1: USB disconnect, device number 5 [ 299.058905][ T7290] loop5: detected capacity change from 0 to 512 [ 299.139526][ T7290] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 299.181967][ T7290] EXT4-fs (loop5): 1 truncate cleaned up [ 299.189344][ T7290] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 299.297012][ T7293] loop3: detected capacity change from 0 to 16 [ 299.345659][ T7293] erofs: (device loop3): mounted with root inode @ nid 36. [ 299.415341][ T7293] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 299.597761][ T7293] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 299.674403][ T7293] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 25 of nid 36 [ 299.748625][ T7293] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 299.845994][ T7293] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 299.881514][ T7293] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 299.905642][ T7293] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 299.952214][ T7293] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 299.979298][ T7293] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 300.010953][ T7293] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 300.029342][ T7293] attempt to access beyond end of device [ 300.029342][ T7293] loop3: rw=524288, want=848, limit=16 [ 300.039568][ T7286] loop1: detected capacity change from 0 to 65536 [ 300.042006][ T7293] attempt to access beyond end of device [ 300.042006][ T7293] loop3: rw=524288, want=13478624056, limit=16 [ 300.065926][ T7293] attempt to access beyond end of device [ 300.065926][ T7293] loop3: rw=524288, want=13478624104, limit=16 [ 300.110554][ T7286] XFS (loop1): Mounting V5 Filesystem [ 300.141568][ T6416] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 300.311310][ T7286] XFS (loop1): Ending clean mount [ 300.381564][ T6416] usb 5-1: Using ep0 maxpacket: 16 [ 300.502375][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.584113][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.662561][ T6416] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 300.758240][ T6416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.974262][ T6416] usb 5-1: config 0 descriptor?? [ 301.265809][ T7286] loop1: detected capacity change from 65536 to 0 [ 301.330234][ T7325] loop5: detected capacity change from 0 to 2048 [ 301.354106][ T4433] loop: Write error at byte offset 9223372036871602175, length 4096. [ 301.362951][ C1] blk_update_request: I/O error, dev loop1, sector 32864 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 301.374602][ C1] blk_update_request: I/O error, dev loop1, sector 32864 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 301.379326][ C0] blk_update_request: I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 301.387349][ T150] XFS (loop1): log I/O error -5 [ 301.398339][ T4317] XFS (loop1): metadata I/O error in "xfs_read_agf+0x263/0x510" at daddr 0x1 len 1 error 5 [ 301.405919][ T150] XFS (loop1): Log I/O Error (0x2) detected at xlog_ioend_work+0xc2/0x120 (fs/xfs/xfs_log.c:1364). Shutting down filesystem. [ 301.427064][ T4165] XFS (loop1): Unmounting Filesystem [ 301.432947][ T150] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 301.447182][ T6416] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 301.472560][ T6416] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 301.508027][ T7325] NILFS (loop5): invalid segment: Checksum error in segment payload [ 301.549981][ T7325] NILFS (loop5): trying rollback from an earlier position [ 301.579766][ T7310] loop2: detected capacity change from 0 to 40427 [ 301.623882][ T7325] NILFS (loop5): recovery complete [ 301.631641][ T7326] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.659752][ T7310] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 301.667581][ T26] audit: type=1800 audit(1731402965.553:50): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.701" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 301.689085][ T6416] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 301.715416][ T6416] usb 5-1: USB disconnect, device number 7 [ 301.787381][ T7310] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 301.813554][ T7310] F2FS-fs (loop2): Found nat_bits in checkpoint [ 301.917107][ T7310] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 301.947174][ T7310] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.025045][ T7320] loop3: detected capacity change from 0 to 40427 [ 302.074397][ T7320] F2FS-fs (loop3): invalid crc value [ 302.108904][ T7320] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.200415][ T7335] loop1: detected capacity change from 0 to 2048 [ 302.201477][ T7320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 302.320222][ T7335] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.367594][ T7335] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.369492][ T26] audit: type=1800 audit(1731402966.263:51): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 302.672988][ T7348] loop1: detected capacity change from 0 to 64 [ 302.817900][ T26] audit: type=1800 audit(1731402966.713:52): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.706" name="bus" dev="loop1" ino=9 res=0 errno=0 [ 302.892087][ T7348] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 302.965380][ T7357] loop2: detected capacity change from 0 to 512 [ 303.412593][ T4165] Trying to free block not in datazone [ 303.465402][ T4165] Trying to free block not in datazone [ 303.471196][ T4165] Trying to free block not in datazone [ 303.471935][ T7357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.703: bg 0: block 5: invalid block bitmap [ 303.478411][ T4165] Trying to free block not in datazone [ 303.516549][ T4165] Trying to free block not in datazone [ 303.544323][ T4165] minix_free_block (loop1:6): bit already cleared [ 303.551707][ T4165] Trying to free block not in datazone [ 303.561447][ T4165] Trying to free block not in datazone [ 303.577245][ T7357] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 303.595117][ T7357] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.703: invalid indirect mapped block 3 (level 2) [ 303.615111][ T7357] EXT4-fs (loop2): 1 orphan inode deleted [ 303.628693][ T7357] EXT4-fs (loop2): 1 truncate cleaned up [ 303.667501][ T7357] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.805323][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.819569][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.857560][ T7344] loop4: detected capacity change from 0 to 32768 [ 303.929927][ T7370] loop2: detected capacity change from 0 to 512 [ 304.065532][ T7370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.085154][ T7370] EXT4-fs (loop2): 1 truncate cleaned up [ 304.090940][ T7370] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 304.755623][ T7385] loop2: detected capacity change from 0 to 2048 [ 304.884597][ T7385] NILFS (loop2): invalid segment: Checksum error in segment payload [ 304.907166][ T7385] NILFS (loop2): trying rollback from an earlier position [ 304.944832][ T7385] NILFS (loop2): recovery complete [ 304.975202][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.723'. [ 304.978344][ T7402] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.988541][ T26] audit: type=1800 audit(1731402968.893:53): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.718" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 305.132172][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 305.209759][ T7410] binder: 7409:7410 unknown command 0 [ 305.220585][ T7410] binder: 7409:7410 ioctl c0306201 200001c0 returned -22 [ 305.671604][ T7] usb 4-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 305.689130][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 305.699646][ T7] usb 4-1: config 1 has no interface number 0 [ 305.711185][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.723609][ T7] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 305.741606][ T7] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.863623][ T7421] loop2: detected capacity change from 0 to 512 [ 305.892084][ T6305] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 305.952148][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.961634][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.968333][ T7421] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.969635][ T7] usb 4-1: Product: syz [ 305.969655][ T7] usb 4-1: Manufacturer: syz [ 305.969671][ T7] usb 4-1: SerialNumber: syz [ 306.005646][ T7421] EXT4-fs (loop2): 1 truncate cleaned up [ 306.011320][ T7421] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 306.162843][ T6305] usb 6-1: Using ep0 maxpacket: 8 [ 306.461848][ T6305] usb 6-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice=37.6e [ 306.471855][ T6305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.481525][ T6305] usb 6-1: Product: syz [ 306.486413][ T6305] usb 6-1: Manufacturer: syz [ 306.491224][ T6305] usb 6-1: SerialNumber: syz [ 306.513791][ T6305] usb 6-1: config 0 descriptor?? [ 306.648438][ T7433] loop2: detected capacity change from 0 to 256 [ 306.951537][ T7] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 306.957581][ T7] cdc_ncm 4-1:1.1: bind() failure [ 306.976526][ T7434] loop4: detected capacity change from 0 to 32768 [ 306.982863][ T7] usb 4-1: USB disconnect, device number 10 [ 306.988157][ T7438] kvm: pic: non byte write [ 307.067450][ T7434] XFS (loop4): Mounting V5 Filesystem [ 307.129583][ T7434] XFS (loop4): Ending clean mount [ 307.199610][ T4175] XFS (loop4): Unmounting Filesystem [ 307.445442][ T7451] netlink: 'syz.1.737': attribute type 16 has an invalid length. [ 307.453929][ T7451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.737'. [ 307.463830][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.685193][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 307.738954][ T7465] loop4: detected capacity change from 0 to 256 [ 308.507634][ T6305] usb 6-1: USB disconnect, device number 4 [ 308.588558][ T4173] udevd[4173]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 308.599794][ T7474] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 308.624947][ T7477] loop3: detected capacity change from 0 to 512 [ 308.634364][ T4173] udevd[4173]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 308.651947][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.745287][ T7477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.769190][ T7477] EXT4-fs (loop3): 1 truncate cleaned up [ 308.782710][ T7480] loop2: detected capacity change from 0 to 512 [ 308.796910][ T7477] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 309.001505][ T7480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.749: bg 0: block 5: invalid block bitmap [ 309.067327][ T7480] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 309.079892][ T7480] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.749: invalid indirect mapped block 3 (level 2) [ 309.194608][ T7457] loop1: detected capacity change from 0 to 32768 [ 309.303205][ T7480] EXT4-fs (loop2): 1 orphan inode deleted [ 309.311544][ T7480] EXT4-fs (loop2): 1 truncate cleaned up [ 309.317562][ T7480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.356557][ T7457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.739 (7457) [ 309.418314][ T7480] EXT4-fs (loop2): shut down requested (2) [ 309.439390][ T7457] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 309.453302][ T7480] syz.2.749 (pid 7480) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 309.471210][ T7457] BTRFS info (device loop1): use zlib compression, level 3 [ 309.493348][ T7457] BTRFS info (device loop1): using free space tree [ 309.499877][ T7457] BTRFS info (device loop1): has skinny extents [ 309.747233][ T7511] loop5: detected capacity change from 0 to 1024 [ 309.755668][ T7457] BTRFS info (device loop1): enabling ssd optimizations [ 309.792643][ T7511] EXT4-fs (loop5): Test dummy encryption mode enabled [ 309.799508][ T7511] EXT4-fs (loop5): Ignoring removed orlov option [ 309.827746][ T7475] loop4: detected capacity change from 0 to 32768 [ 309.862295][ T6305] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 309.863618][ T7511] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 309.926467][ T7475] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.746 (7475) [ 309.987917][ T4173] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4173) [ 310.239072][ T7522] IPv6: Can't replace route, no match found [ 310.272281][ T6305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.321568][ T6305] usb 4-1: not running at top speed; connect to a high speed hub [ 310.413481][ T6305] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 310.444417][ T6305] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.475149][ T6305] usb 4-1: config 1 interface 0 has no altsetting 0 [ 310.498386][ T7526] Bluetooth: (null): Invalid header checksum [ 311.426783][ T7542] syz.4.765[7542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.426919][ T7542] syz.4.765[7542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.481609][ T6305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.627033][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.701709][ T7545] loop5: detected capacity change from 0 to 256 [ 311.826402][ T6305] usb 4-1: Product: syz [ 311.918169][ T6305] usb 4-1: Manufacturer: syz [ 311.971035][ T6305] usb 4-1: SerialNumber: syz [ 312.121764][ T7491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.405663][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 312.512174][ T6305] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 312.549228][ T6305] usb 4-1: USB disconnect, device number 11 [ 312.631941][ T7560] loop4: detected capacity change from 0 to 128 [ 312.678974][ T7540] loop1: detected capacity change from 0 to 32768 [ 312.725818][ T7560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.736537][ T7560] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.786705][ T7540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.764 (7540) [ 312.853245][ T7540] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 312.871665][ T7540] BTRFS info (device loop1): use no compression [ 312.878296][ T7560] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 312.893662][ T7540] BTRFS info (device loop1): turning on flush-on-commit [ 312.900626][ T7540] BTRFS info (device loop1): turning on sync discard [ 312.931552][ T7540] BTRFS info (device loop1): force clearing of disk cache [ 312.947240][ T7540] BTRFS info (device loop1): enabling auto defrag [ 312.948682][ T7566] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 312.958702][ T7540] BTRFS info (device loop1): turning off discard [ 312.981955][ T7540] BTRFS info (device loop1): using free space tree [ 312.996912][ T7540] BTRFS info (device loop1): has skinny extents [ 313.031392][ T7540] BTRFS info (device loop1): enabling ssd optimizations [ 313.047195][ T7540] BTRFS info (device loop1): clearing free space tree [ 313.057642][ T7540] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.074898][ T7540] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.116341][ T7540] BTRFS info (device loop1): creating free space tree [ 313.125741][ T7540] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.136105][ T7540] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.178116][ T7592] loop4: detected capacity change from 0 to 512 [ 313.189621][ T7592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.212406][ T7592] EXT4-fs (loop4): 1 truncate cleaned up [ 313.218072][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 313.411682][ T7556] dccp_close: ABORT with 1128 bytes unread [ 313.966632][ T7603] loop3: detected capacity change from 0 to 512 [ 314.070609][ T7603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.492668][ T7603] EXT4-fs (loop3): 1 truncate cleaned up [ 314.501004][ T7603] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 316.149248][ T7622] loop4: detected capacity change from 0 to 4096 [ 316.238799][ T7622] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 316.372537][ T7633] loop1: detected capacity change from 0 to 2048 [ 316.648609][ T4175] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 316.754848][ T4175] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 316.816728][ T4175] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 316.863574][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247358][ T7644] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 317.298366][ T7633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.307478][ T7646] loop5: detected capacity change from 0 to 512 [ 317.336358][ T7630] EXT4-fs (loop1): shut down requested (0) [ 317.383786][ T7646] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.396069][ T7650] loop4: detected capacity change from 0 to 512 [ 317.496679][ T7646] EXT4-fs (loop5): 1 truncate cleaned up [ 317.534748][ T7646] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 317.596121][ T7650] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 317.756785][ T7650] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.171191][ T7659] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 318.239580][ T7659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.272823][ T7661] loop5: detected capacity change from 0 to 512 [ 318.280851][ T7665] loop1: detected capacity change from 0 to 512 [ 318.314282][ T7659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.601728][ T7661] EXT4-fs (loop5): invalid first ino: 0 [ 319.086816][ T7665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.150015][ T7665] EXT4-fs (loop1): 1 truncate cleaned up [ 319.156486][ T7665] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 319.791509][ T7683] loop3: detected capacity change from 0 to 1024 [ 320.970210][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 322.071283][ T7718] device veth0_vlan left promiscuous mode [ 322.086711][ T7718] device veth0_vlan entered promiscuous mode [ 322.160890][ T7724] loop5: detected capacity change from 0 to 512 [ 322.308531][ T7728] overlayfs: failed to get inode (-116) [ 322.316333][ T7728] overlayfs: failed to look up (file0) for ino (-116) [ 322.330776][ T7724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 323.230766][ T7707] loop1: detected capacity change from 0 to 8 [ 323.237648][ T7724] EXT4-fs (loop5): 1 truncate cleaned up [ 323.247652][ T7724] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 323.308521][ T7707] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 323.782217][ T7707] cramfs: Error -5 while decompressing! [ 323.787889][ T7707] cramfs: ffffffff969962a8(26)->ffff888060e76000(4096) [ 323.794905][ T7707] cramfs: Error -3 while decompressing! [ 323.800457][ T7707] cramfs: ffffffff969962c2(26)->ffff88805d742000(4096) [ 323.808973][ T7707] cramfs: Error -3 while decompressing! [ 323.814922][ T7707] cramfs: ffffffff969962dc(16)->ffff88805e954000(4096) [ 323.822411][ T7707] cramfs: Error -5 while decompressing! [ 323.834235][ T7707] cramfs: ffffffff969962a8(26)->ffff888060e76000(4096) [ 325.313428][ T7774] loop5: detected capacity change from 0 to 128 [ 325.614968][ T7774] omfs: sysblock size (-58445445) is out of range [ 326.120604][ T7778] loop5: detected capacity change from 0 to 512 [ 326.229724][ T7778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 326.264281][ T7778] EXT4-fs (loop5): 1 truncate cleaned up [ 326.269966][ T7778] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 326.444903][ T7783] loop1: detected capacity change from 0 to 512 [ 326.520354][ T7783] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.651299][ T7783] EXT4-fs (loop1): 1 truncate cleaned up [ 326.668568][ T7783] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 327.453850][ T7765] loop4: detected capacity change from 0 to 40427 [ 327.519891][ T7765] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 327.540483][ T7765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 327.571047][ T7765] F2FS-fs (loop4): Found nat_bits in checkpoint [ 327.639410][ T7765] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 327.646695][ T7765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 328.536407][ T4175] attempt to access beyond end of device [ 328.536407][ T4175] loop4: rw=2049, want=45104, limit=40427 [ 329.490884][ T7806] loop1: detected capacity change from 0 to 32768 [ 329.618954][ T7806] XFS (loop1): Mounting V5 Filesystem [ 329.843478][ T7806] XFS (loop1): Ending clean mount [ 329.861182][ T7806] XFS (loop1): Quotacheck needed: Please wait. [ 329.934279][ T7819] loop5: detected capacity change from 0 to 32768 [ 329.972252][ T7819] XFS: ikeep mount option is deprecated. [ 330.021026][ T7806] XFS (loop1): Quotacheck: Done. [ 330.096809][ T7819] XFS (loop5): Mounting V5 Filesystem [ 330.224799][ T7819] XFS (loop5): Ending clean mount [ 330.269136][ T7819] XFS (loop5): Quotacheck needed: Please wait. [ 330.398139][ T7819] XFS (loop5): Quotacheck: Done. [ 330.579947][ T4165] XFS (loop1): Unmounting Filesystem [ 330.629151][ T26] audit: type=1804 audit(1731402994.523:54): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.832" name="/newroot/92/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 330.729125][ T26] audit: type=1804 audit(1731402994.563:55): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.832" name="/newroot/92/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 330.782534][ T26] audit: type=1804 audit(1731402994.663:56): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.832" name="/newroot/92/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 330.849576][ T7863] trusted_key: encrypted_key: insufficient parameters specified [ 330.866802][ T26] audit: type=1804 audit(1731402994.763:57): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.832" name="/newroot/92/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 330.946804][ T5522] XFS (loop5): Unmounting Filesystem [ 331.478948][ T7878] ip6t_rpfilter: unknown options [ 332.557425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 332.752150][ T7888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.220559][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 333.408423][ T7896] device bond1 entered promiscuous mode [ 333.632084][ T7897] device gretap1 entered promiscuous mode [ 333.644321][ T7897] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 333.665558][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 333.813546][ T7898] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 333.897809][ T7898] device gretap1 left promiscuous mode [ 333.944928][ T7898] bond1 (unregistering): Released all slaves [ 334.254511][ T7881] loop3: detected capacity change from 0 to 32768 [ 334.281920][ T7933] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 334.311282][ T7933] kvm: pic: non byte read [ 334.440244][ T7933] kvm: pic: level sensitive irq not supported [ 334.444441][ T7933] kvm: pic: non byte read [ 334.463651][ T7933] kvm: pic: level sensitive irq not supported [ 334.466416][ T7933] kvm: pic: non byte read [ 334.593987][ T7881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.841 (7881) [ 334.767693][ T7933] kvm: pic: level sensitive irq not supported [ 334.831289][ T7933] kvm: pic: non byte read [ 334.990645][ T7881] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 335.013145][ T7881] BTRFS info (device loop3): using free space tree [ 335.041785][ T6421] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 335.071512][ T7881] BTRFS info (device loop3): has skinny extents [ 335.401540][ T6421] usb 5-1: Using ep0 maxpacket: 8 [ 335.546885][ T7881] BTRFS error (device loop3): open_ctree failed [ 335.687965][ T6421] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.708056][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.719679][ T6421] usb 5-1: Product: syz [ 335.724068][ T6421] usb 5-1: Manufacturer: syz [ 335.728932][ T6421] usb 5-1: SerialNumber: syz [ 335.736529][ T6421] usb 5-1: config 0 descriptor?? [ 336.142127][ T6421] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.820999][ T7974] loop3: detected capacity change from 0 to 1024 [ 337.025661][ T7974] EXT4-fs (loop3): Unrecognized mount option "measure" or missing value [ 339.845198][ T6421] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 339.880045][ T6421] usb 5-1: USB disconnect, device number 8 [ 341.433619][ T8027] loop4: detected capacity change from 0 to 512 [ 342.015796][ T8029] loop5: detected capacity change from 0 to 128 [ 342.046400][ T8027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 342.257493][ T8029] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.269057][ T8027] EXT4-fs (loop4): 1 truncate cleaned up [ 342.281499][ T8027] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 342.310311][ T8029] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.191285][ T8049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 346.483670][ T8068] loop5: detected capacity change from 0 to 128 [ 346.599502][ T26] audit: type=1800 audit(1731403010.483:58): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.883" name="bus" dev="loop5" ino=1048641 res=0 errno=0 [ 346.975240][ T8050] loop3: detected capacity change from 0 to 40427 [ 347.944119][ T8076] ÿÿÿÿÿÿ: renamed from vlan0 [ 348.791084][ T8088] loop5: detected capacity change from 0 to 512 [ 348.911688][ T8088] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 348.920197][ T6422] Bluetooth: hci5: command 0x0405 tx timeout [ 348.933781][ T8095] loop4: detected capacity change from 0 to 16 [ 348.968013][ T8088] EXT4-fs (loop5): 1 truncate cleaned up [ 348.978705][ T8088] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 349.018205][ T8095] erofs: (device loop4): mounted with root inode @ nid 36. [ 349.679738][ T8104] attempt to access beyond end of device [ 349.679738][ T8104] loop4: rw=0, want=24, limit=16 [ 352.499991][ T8126] loop5: detected capacity change from 0 to 512 [ 352.511975][ T8126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.043651][ T8135] binder: 8125:8135 ioctl c0046209 9999999999999999 returned -22 [ 354.443160][ T8126] EXT4-fs (loop5): 1 truncate cleaned up [ 354.490514][ T8126] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 354.682925][ T4214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 356.005179][ T4214] usb 4-1: device not accepting address 12, error -71 [ 356.868663][ T8165] loop1: detected capacity change from 0 to 2048 [ 357.453257][ T8165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.084104][ T8192] syz.3.913 sent an empty control message without MSG_MORE. [ 361.661612][ T6422] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 362.561466][ T6422] usb 3-1: Using ep0 maxpacket: 8 [ 362.856349][ T6422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.868628][ T8226] loop1: detected capacity change from 0 to 128 [ 363.325464][ T6422] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.334474][ T6422] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 363.345635][ T6422] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 363.356886][ T6422] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 363.366020][ T6422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.484515][ T6422] usb 3-1: can't set config #1, error -71 [ 363.501662][ T6422] usb 3-1: USB disconnect, device number 6 [ 364.320318][ T8226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.365196][ T8226] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.541534][ T8261] ip6t_rpfilter: unknown options [ 366.184182][ T8265] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.221590][ T6422] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 367.458169][ T8267] ALSA: mixer_oss: invalid OSS volume '' [ 367.871431][ T6422] usb 3-1: Using ep0 maxpacket: 8 [ 367.941547][ T6422] usb 3-1: device descriptor read/all, error -71 [ 371.462993][ T8299] loop1: detected capacity change from 0 to 2048 [ 371.825768][ T8299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.952407][ T26] audit: type=1326 audit(1731403035.853:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990e441719 code=0x7ffc0000 [ 372.020006][ T8304] loop3: detected capacity change from 0 to 512 [ 372.047055][ T26] audit: type=1326 audit(1731403035.893:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f990e441719 code=0x7ffc0000 [ 372.069810][ T26] audit: type=1326 audit(1731403035.893:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f990e441753 code=0x7ffc0000 [ 372.102577][ T26] audit: type=1326 audit(1731403035.913:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f990e4401ff code=0x7ffc0000 [ 372.220773][ T26] audit: type=1326 audit(1731403035.913:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f990e4417a7 code=0x7ffc0000 [ 372.277150][ T26] audit: type=1326 audit(1731403035.913:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f990e4400b0 code=0x7ffc0000 [ 372.389053][ T26] audit: type=1326 audit(1731403035.913:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f990e44131b code=0x7ffc0000 [ 372.417543][ T26] audit: type=1326 audit(1731403035.963:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f990e4403aa code=0x7ffc0000 [ 372.459247][ T26] audit: type=1326 audit(1731403035.963:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f990e4403aa code=0x7ffc0000 [ 372.500884][ T8304] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.936: corrupted inode contents [ 372.551094][ T8304] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.936: mark_inode_dirty error [ 372.568822][ T26] audit: type=1326 audit(1731403036.043:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f990e43ffb7 code=0x7ffc0000 [ 372.611071][ T8304] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.936: corrupted inode contents [ 372.638978][ T8304] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.936: mark_inode_dirty error [ 372.699042][ T8304] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.936: Failed to acquire dquot type 0 [ 372.724278][ T8304] EXT4-fs (loop3): 1 orphan inode deleted [ 372.730039][ T8304] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 372.797531][ T8304] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.753185][ T8321] xt_connbytes: Forcing CT accounting to be enabled [ 373.760108][ T8321] xt_bpf: check failed: parse error [ 375.188401][ T8328] loop1: detected capacity change from 0 to 512 [ 375.427500][ T8328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 375.592582][ T8328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 375.615193][ T8328] System zones: 1-12 [ 375.682507][ T8328] EXT4-fs (loop1): 1 truncate cleaned up [ 375.723792][ T8328] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 376.005342][ T4433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.149412][ T4433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.162036][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 376.868333][ T4433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.036573][ T4433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.221999][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 377.251488][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.344891][ T7] usb 4-1: config 0 descriptor?? [ 377.383657][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 378.290928][ T4320] Bluetooth: hci2: command 0x0409 tx timeout [ 378.299667][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.360407][ T8358] loop1: detected capacity change from 0 to 512 [ 378.492382][ T8358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 378.569442][ T8358] EXT4-fs (loop1): 1 truncate cleaned up [ 378.588784][ T8358] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 379.874243][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 380.005016][ T8378] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 380.579150][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 380.702454][ T7] gspca_stv06xx: I2C: Read error writing address: -71 [ 380.746633][ T7] usb 4-1: USB disconnect, device number 14 [ 381.650697][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.750421][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.758698][ T8335] device bridge_slave_0 entered promiscuous mode [ 383.218854][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.882338][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 383.918292][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.997482][ T8335] device bridge_slave_1 entered promiscuous mode [ 384.676667][ T8429] loop5: detected capacity change from 0 to 512 [ 384.729774][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.785487][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.820338][ T8429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 385.003770][ T8429] EXT4-fs (loop5): 1 truncate cleaned up [ 385.009453][ T8429] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 385.101213][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.961'. [ 386.088758][ T8335] team0: Port device team_slave_0 added [ 386.183122][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 386.183167][ T26] audit: type=1326 audit(1731403050.083:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04e89a719 code=0x7ffc0000 [ 386.211936][ T6819] Bluetooth: hci2: command 0x0419 tx timeout [ 386.671748][ T7527] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 386.943848][ T26] audit: type=1326 audit(1731403050.233:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04e8990b0 code=0x7ffc0000 [ 387.186009][ T8444] tap0: tun_chr_ioctl cmd 1074025677 [ 387.192207][ T8444] tap0: linktype set to 780 [ 387.194980][ T26] audit: type=1326 audit(1731403050.263:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 387.225829][ T8335] team0: Port device team_slave_1 added [ 387.241951][ T7527] usb 2-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 387.257464][ T7527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.542287][ T26] audit: type=1326 audit(1731403050.273:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 387.626614][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.639864][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.744761][ T26] audit: type=1326 audit(1731403050.303:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 387.748862][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.786035][ T7527] usb 2-1: config 0 descriptor?? [ 387.854187][ T7527] ums-cypress 2-1:0.0: USB Mass Storage device detected [ 387.893013][ T26] audit: type=1326 audit(1731403050.323:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 388.011450][ T26] audit: type=1326 audit(1731403050.633:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 388.062241][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.081441][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.108371][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.129054][ T26] audit: type=1326 audit(1731403050.653:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 388.151681][ T26] audit: type=1326 audit(1731403050.883:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 388.179703][ T8481] Invalid ELF header magic: != ELF [ 388.506723][ T26] audit: type=1326 audit(1731403050.903:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04e89a31b code=0x7ffc0000 [ 389.398114][ T6421] usb 2-1: USB disconnect, device number 6 [ 389.419938][ T8335] device hsr_slave_0 entered promiscuous mode [ 389.438683][ T8335] device hsr_slave_1 entered promiscuous mode [ 389.467912][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.476743][ T8335] Cannot create hsr debugfs directory [ 390.566770][ T8501] loop1: detected capacity change from 0 to 512 [ 390.710041][ T8501] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.853682][ T8501] EXT4-fs (loop1): 1 truncate cleaned up [ 390.888655][ T8501] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 391.456576][ T8525] loop3: detected capacity change from 0 to 512 [ 391.478430][ T4433] device hsr_slave_0 left promiscuous mode [ 391.516916][ T4433] device hsr_slave_1 left promiscuous mode [ 391.534364][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.578437][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.697593][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.710630][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.723215][ T4433] device bridge_slave_1 left promiscuous mode [ 391.735159][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.904777][ T4433] device bridge_slave_0 left promiscuous mode [ 391.913441][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.902834][ T4433] device veth1_macvtap left promiscuous mode [ 393.115390][ T4433] device veth0_macvtap left promiscuous mode [ 393.131894][ T4433] device veth1_vlan left promiscuous mode [ 393.179893][ T8540] loop3: detected capacity change from 0 to 1024 [ 394.850855][ T8556] loop1: detected capacity change from 0 to 512 [ 394.992543][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 395.001422][ T8556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.059814][ T8556] EXT4-fs (loop1): 1 truncate cleaned up [ 395.066411][ T8556] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 395.091237][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 395.105535][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.111669][ T8563] loop3: detected capacity change from 0 to 512 [ 395.128400][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.291246][ T8563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.330415][ T8563] EXT4-fs (loop3): 1 truncate cleaned up [ 395.352325][ T8563] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 395.896167][ T4433] bond0 (unregistering): Released all slaves [ 395.939744][ T8569] [ 395.942098][ T8569] ====================================================== [ 395.949119][ T8569] WARNING: possible circular locking dependency detected [ 395.956133][ T8569] 5.15.171-syzkaller #0 Not tainted [ 395.961339][ T8569] ------------------------------------------------------ [ 395.968370][ T8569] syz.1.987/8569 is trying to acquire lock: [ 395.974248][ T8569] ffff888054997790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 395.982593][ T8569] [ 395.982593][ T8569] but task is already holding lock: [ 395.989933][ T8569] ffff8880791e8460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5fd/0x1000 [ 395.998614][ T8569] [ 395.998614][ T8569] which lock already depends on the new lock. [ 395.998614][ T8569] [ 396.008999][ T8569] [ 396.008999][ T8569] the existing dependency chain (in reverse order) is: [ 396.018010][ T8569] [ 396.018010][ T8569] -> #7 (sb_writers#3){.+.+}-{0:0}: [ 396.025377][ T8569] lock_acquire+0x1db/0x4f0 [ 396.030382][ T8569] lo_write_bvec+0x1a3/0x740 [ 396.035497][ T8569] loop_process_work+0x2309/0x2af0 [ 396.041128][ T8569] process_one_work+0x8a1/0x10c0 [ 396.046573][ T8569] worker_thread+0xaca/0x1280 [ 396.051764][ T8569] kthread+0x3f6/0x4f0 [ 396.056373][ T8569] ret_from_fork+0x1f/0x30 [ 396.061310][ T8569] [ 396.061310][ T8569] -> #6 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 396.070442][ T8569] lock_acquire+0x1db/0x4f0 [ 396.075457][ T8569] process_one_work+0x7f1/0x10c0 [ 396.080932][ T8569] worker_thread+0xaca/0x1280 [ 396.086148][ T8569] kthread+0x3f6/0x4f0 [ 396.090730][ T8569] ret_from_fork+0x1f/0x30 [ 396.095676][ T8569] [ 396.095676][ T8569] -> #5 ((null)){+.+.}-{0:0}: [ 396.102524][ T8569] lock_acquire+0x1db/0x4f0 [ 396.107531][ T8569] flush_workqueue+0x170/0x1610 [ 396.112885][ T8569] drain_workqueue+0xc5/0x390 [ 396.118073][ T8569] destroy_workqueue+0x7b/0xae0 [ 396.123443][ T8569] __loop_clr_fd+0x241/0xbe0 [ 396.128539][ T8569] blkdev_put+0x455/0x790 [ 396.133371][ T8569] deactivate_locked_super+0xa0/0x110 [ 396.139250][ T8569] cleanup_mnt+0x44e/0x500 [ 396.144171][ T8569] task_work_run+0x129/0x1a0 [ 396.149276][ T8569] exit_to_user_mode_loop+0x106/0x130 [ 396.155158][ T8569] exit_to_user_mode_prepare+0xb1/0x140 [ 396.161229][ T8569] syscall_exit_to_user_mode+0x5d/0x240 [ 396.167285][ T8569] do_syscall_64+0x47/0xb0 [ 396.172210][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.178616][ T8569] [ 396.178616][ T8569] -> #4 (&lo->lo_mutex){+.+.}-{3:3}: [ 396.186084][ T8569] lock_acquire+0x1db/0x4f0 [ 396.191110][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.196834][ T8569] mutex_lock_killable_nested+0x17/0x20 [ 396.202905][ T8569] lo_open+0x68/0x100 [ 396.207398][ T8569] blkdev_get_whole+0x94/0x390 [ 396.212671][ T8569] blkdev_get_by_dev+0x2bc/0xa50 [ 396.218115][ T8569] blkdev_open+0x138/0x2d0 [ 396.223032][ T8569] do_dentry_open+0x807/0xfb0 [ 396.228217][ T8569] path_openat+0x2705/0x2f20 [ 396.233307][ T8569] do_filp_open+0x21c/0x460 [ 396.238315][ T8569] do_sys_openat2+0x13b/0x4f0 [ 396.243498][ T8569] __x64_sys_openat+0x243/0x290 [ 396.248853][ T8569] do_syscall_64+0x3b/0xb0 [ 396.253776][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.260180][ T8569] [ 396.260180][ T8569] -> #3 (&disk->open_mutex){+.+.}-{3:3}: [ 396.267982][ T8569] lock_acquire+0x1db/0x4f0 [ 396.272996][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.278806][ T8569] mutex_lock_nested+0x17/0x20 [ 396.284084][ T8569] blkdev_get_by_dev+0x14d/0xa50 [ 396.289532][ T8569] swsusp_check+0xb1/0x2c0 [ 396.294473][ T8569] software_resume+0xc6/0x3c0 [ 396.299685][ T8569] resume_store+0xe3/0x130 [ 396.304625][ T8569] kernfs_fop_write_iter+0x3a2/0x4f0 [ 396.310419][ T8569] vfs_write+0xacd/0xe50 [ 396.315169][ T8569] ksys_write+0x1a2/0x2c0 [ 396.320010][ T8569] do_syscall_64+0x3b/0xb0 [ 396.324931][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.331339][ T8569] [ 396.331339][ T8569] -> #2 (system_transition_mutex/1){+.+.}-{3:3}: [ 396.339870][ T8569] lock_acquire+0x1db/0x4f0 [ 396.345183][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.350890][ T8569] mutex_lock_nested+0x17/0x20 [ 396.356167][ T8569] software_resume+0x7c/0x3c0 [ 396.361363][ T8569] resume_store+0xe3/0x130 [ 396.366309][ T8569] kernfs_fop_write_iter+0x3a2/0x4f0 [ 396.372102][ T8569] vfs_write+0xacd/0xe50 [ 396.376859][ T8569] ksys_write+0x1a2/0x2c0 [ 396.381698][ T8569] do_syscall_64+0x3b/0xb0 [ 396.386639][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.393043][ T8569] [ 396.393043][ T8569] -> #1 (&of->mutex){+.+.}-{3:3}: [ 396.400250][ T8569] lock_acquire+0x1db/0x4f0 [ 396.405269][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.410984][ T8569] mutex_lock_nested+0x17/0x20 [ 396.416252][ T8569] kernfs_seq_start+0x50/0x3b0 [ 396.421525][ T8569] seq_read_iter+0x3d0/0xd10 [ 396.426637][ T8569] vfs_read+0xa93/0xe10 [ 396.431299][ T8569] ksys_read+0x1a2/0x2c0 [ 396.436059][ T8569] do_syscall_64+0x3b/0xb0 [ 396.440981][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.447393][ T8569] [ 396.447393][ T8569] -> #0 (&p->lock){+.+.}-{3:3}: [ 396.454413][ T8569] validate_chain+0x1649/0x5930 [ 396.459770][ T8569] __lock_acquire+0x1295/0x1ff0 [ 396.465125][ T8569] lock_acquire+0x1db/0x4f0 [ 396.470130][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.475833][ T8569] mutex_lock_nested+0x17/0x20 [ 396.481111][ T8569] seq_read_iter+0xae/0xd10 [ 396.486136][ T8569] generic_file_splice_read+0x4ad/0x790 [ 396.492337][ T8569] splice_direct_to_actor+0x448/0xc10 [ 396.498238][ T8569] do_splice_direct+0x285/0x3d0 [ 396.503595][ T8569] do_sendfile+0x622/0x1000 [ 396.508642][ T8569] __se_sys_sendfile64+0x178/0x1e0 [ 396.514270][ T8569] do_syscall_64+0x3b/0xb0 [ 396.519196][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.525595][ T8569] [ 396.525595][ T8569] other info that might help us debug this: [ 396.525595][ T8569] [ 396.535800][ T8569] Chain exists of: [ 396.535800][ T8569] &p->lock --> (work_completion)(&worker->work) --> sb_writers#3 [ 396.535800][ T8569] [ 396.549426][ T8569] Possible unsafe locking scenario: [ 396.549426][ T8569] [ 396.556864][ T8569] CPU0 CPU1 [ 396.562222][ T8569] ---- ---- [ 396.567569][ T8569] lock(sb_writers#3); [ 396.571717][ T8569] lock((work_completion)(&worker->work)); [ 396.580126][ T8569] lock(sb_writers#3); [ 396.586801][ T8569] lock(&p->lock); [ 396.590606][ T8569] [ 396.590606][ T8569] *** DEADLOCK *** [ 396.590606][ T8569] [ 396.598904][ T8569] 1 lock held by syz.1.987/8569: [ 396.603825][ T8569] #0: ffff8880791e8460 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5fd/0x1000 [ 396.613105][ T8569] [ 396.613105][ T8569] stack backtrace: [ 396.619003][ T8569] CPU: 1 PID: 8569 Comm: syz.1.987 Not tainted 5.15.171-syzkaller #0 [ 396.627066][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.637116][ T8569] Call Trace: [ 396.640379][ T8569] [ 396.643297][ T8569] dump_stack_lvl+0x1e3/0x2d0 [ 396.647966][ T8569] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 396.653590][ T8569] ? print_circular_bug+0x12b/0x1a0 [ 396.658775][ T8569] check_noncircular+0x2f8/0x3b0 [ 396.663697][ T8569] ? add_chain_block+0x850/0x850 [ 396.668709][ T8569] ? lockdep_lock+0x11f/0x2a0 [ 396.673378][ T8569] ? reacquire_held_locks+0x660/0x660 [ 396.678734][ T8569] ? _find_first_zero_bit+0xcf/0xf0 [ 396.683920][ T8569] validate_chain+0x1649/0x5930 [ 396.688787][ T8569] ? mark_lock+0x98/0x340 [ 396.693100][ T8569] ? reacquire_held_locks+0x660/0x660 [ 396.698463][ T8569] ? mark_lock+0x98/0x340 [ 396.702780][ T8569] ? __lock_acquire+0x1295/0x1ff0 [ 396.707792][ T8569] ? look_up_lock_class+0x77/0x120 [ 396.712899][ T8569] ? register_lock_class+0x100/0x9a0 [ 396.718194][ T8569] ? is_dynamic_key+0x1f0/0x1f0 [ 396.723029][ T8569] ? mark_lock+0x98/0x340 [ 396.727350][ T8569] __lock_acquire+0x1295/0x1ff0 [ 396.732197][ T8569] lock_acquire+0x1db/0x4f0 [ 396.736686][ T8569] ? seq_read_iter+0xae/0xd10 [ 396.741355][ T8569] ? read_lock_is_recursive+0x10/0x10 [ 396.746729][ T8569] ? __might_sleep+0xc0/0xc0 [ 396.751309][ T8569] ? __lock_acquire+0x1295/0x1ff0 [ 396.756332][ T8569] __mutex_lock_common+0x1da/0x25a0 [ 396.761522][ T8569] ? seq_read_iter+0xae/0xd10 [ 396.766214][ T8569] ? seq_read_iter+0xae/0xd10 [ 396.770877][ T8569] ? mutex_lock_io_nested+0x60/0x60 [ 396.776065][ T8569] ? __lock_acquire+0x1ff0/0x1ff0 [ 396.781077][ T8569] ? ____kasan_kmalloc+0xd1/0xf0 [ 396.786003][ T8569] ? __kmalloc+0x168/0x300 [ 396.790421][ T8569] ? splice_direct_to_actor+0xa3b/0xc10 [ 396.795953][ T8569] mutex_lock_nested+0x17/0x20 [ 396.800719][ T8569] seq_read_iter+0xae/0xd10 [ 396.805211][ T8569] ? aa_file_perm+0x3af/0xf60 [ 396.809881][ T8569] ? iov_iter_pipe+0xc7/0x2e0 [ 396.814551][ T8569] generic_file_splice_read+0x4ad/0x790 [ 396.820097][ T8569] ? splice_shrink_spd+0xb0/0xb0 [ 396.825028][ T8569] ? common_file_perm+0x17d/0x1d0 [ 396.830053][ T8569] ? fsnotify_perm+0x442/0x590 [ 396.834830][ T8569] splice_direct_to_actor+0x448/0xc10 [ 396.840227][ T8569] ? do_splice_direct+0x3d0/0x3d0 [ 396.845244][ T8569] ? pipe_to_sendpage+0x350/0x350 [ 396.850273][ T8569] ? fsnotify_perm+0x64/0x590 [ 396.854937][ T8569] ? security_file_permission+0x75/0xa0 [ 396.860488][ T8569] do_splice_direct+0x285/0x3d0 [ 396.865345][ T8569] ? splice_direct_to_actor+0xc10/0xc10 [ 396.870898][ T8569] ? rcu_read_lock_any_held+0xb3/0x160 [ 396.876372][ T8569] do_sendfile+0x622/0x1000 [ 396.880875][ T8569] ? do_pwritev+0x360/0x360 [ 396.885407][ T8569] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 396.891378][ T8569] __se_sys_sendfile64+0x178/0x1e0 [ 396.896492][ T8569] ? __x64_sys_sendfile64+0xa0/0xa0 [ 396.901681][ T8569] ? syscall_enter_from_user_mode+0x2e/0x240 [ 396.907646][ T8569] ? lockdep_hardirqs_on+0x94/0x130 [ 396.912826][ T8569] ? syscall_enter_from_user_mode+0x2e/0x240 [ 396.918804][ T8569] do_syscall_64+0x3b/0xb0 [ 396.923196][ T8569] ? clear_bhb_loop+0x15/0x70 [ 396.927853][ T8569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.933742][ T8569] RIP: 0033:0x7fa04e89a719 [ 396.938146][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.957821][ T8569] RSP: 002b:00007fa04cd12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 396.966222][ T8569] RAX: ffffffffffffffda RBX: 00007fa04ea51f80 RCX: 00007fa04e89a719 [ 396.974191][ T8569] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 396.982146][ T8569] RBP: 00007fa04e90d616 R08: 0000000000000000 R09: 0000000000000000 [ 396.990105][ T8569] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.998062][ T8569] R13: 0000000000000000 R14: 00007fa04ea51f80 R15: 00007ffe49cf3a48 [ 397.006028][ T8569] [ 397.046184][ T5547] bridge0: port 3(syz_tun) entered disabled state [ 397.088607][ T5547] device syz_tun left promiscuous mode [ 397.094167][ T5547] bridge0: port 3(syz_tun) entered disabled state [ 397.174921][ T6780] bridge0: port 3(syz_tun) entered disabled state [ 397.203318][ T6780] device syz_tun left promiscuous mode [ 397.208827][ T6780] bridge0: port 3(syz_tun) entered disabled state [ 397.236775][ T8335] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.246813][ T8335] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.256148][ T8335] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.268461][ T8335] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.411273][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.467991][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.492040][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.514204][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.543788][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.561981][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.582623][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.589688][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.608183][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.638331][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.652825][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.661216][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.668307][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.721361][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.730061][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.752494][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.772097][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.791767][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.812761][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.823400][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.841710][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.865755][ T8335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.881951][ T8335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.904599][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.922709][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.934269][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.103385][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.110794][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.146420][ T8335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.321764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.341906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.367950][ T8335] device veth0_vlan entered promiscuous mode [ 398.377860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.387605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.402812][ T8335] device veth1_vlan entered promiscuous mode [ 398.409375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.425204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.433659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.477094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.492626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.501134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.515843][ T8335] device veth0_macvtap entered promiscuous mode [ 398.534475][ T8335] device veth1_macvtap entered promiscuous mode [ 398.558129][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.583425][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.601339][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.631335][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.652326][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.662337][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.687087][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.696668][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.709572][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.726184][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.737325][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.749437][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.759887][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.775372][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.788973][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.813265][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.827132][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.853023][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.864219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.884774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.906475][ T4433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.921268][ T8335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.930074][ T8335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.947739][ T8335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.956493][ T8335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.997700][ T8335] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 399.013432][ T4433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.049685][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.054368][ T8335] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 399.065822][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.100291][ T4433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.121502][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.146011][ T4433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.164784][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.177348][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.186949][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.304317][ T4433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.345979][ T4433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.398089][ T4433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.460831][ T4433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.615797][ T4433] tipc: Disabling bearer [ 399.627869][ T4433] tipc: Left network mode [ 400.352444][ T4433] bond0: (slave wlan1): Releasing backup interface [ 400.653141][ T4433] device hsr_slave_0 left promiscuous mode [ 400.663208][ T4433] device hsr_slave_1 left promiscuous mode [ 400.669461][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.693265][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.700995][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.716959][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.741570][ T4433] device bridge_slave_1 left promiscuous mode [ 400.747742][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.758712][ T4433] device bridge_slave_0 left promiscuous mode [ 400.765092][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.780263][ T4433] device hsr_slave_0 left promiscuous mode [ 400.786591][ T4433] device hsr_slave_1 left promiscuous mode [ 400.796003][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.803685][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.811253][ T4433] device bridge_slave_1 left promiscuous mode [ 400.820365][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.828817][ T4433] device bridge_slave_0 left promiscuous mode [ 400.837540][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.850557][ T4433] device veth1_macvtap left promiscuous mode [ 400.856803][ T4433] device veth0_macvtap left promiscuous mode [ 400.863148][ T4433] device veth1_vlan left promiscuous mode [ 400.868905][ T4433] device veth0_vlan left promiscuous mode [ 400.875747][ T4433] device veth1_macvtap left promiscuous mode [ 400.881860][ T4433] device veth0_macvtap left promiscuous mode [ 400.887885][ T4433] device veth1_vlan left promiscuous mode [ 400.894199][ T4433] device veth0_vlan left promiscuous mode [ 401.079922][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 401.091131][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 401.104507][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.120716][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.183948][ T4433] bond0 (unregistering): Released all slaves [ 401.308291][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 401.320958][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 401.338162][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.354087][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.426771][ T4433] bond0 (unregistering): Released all slaves