last executing test programs: 3m3.10929759s ago: executing program 1 (id=2861): openat$tun(0xffffffffffffff9c, 0x0, 0x658b00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") unlink(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@reiserfs_2={0x8, 0x2, {0xe}}, 0x0) 3m0.061200678s ago: executing program 1 (id=2866): r0 = syz_io_uring_setup(0x1eaa, &(0x7f00000001c0)={0x0, 0xe613, 0x2, 0xffffffff, 0x97}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r0, 0x1682, 0x0, 0xb, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x149a82, 0x0) signalfd(r1, &(0x7f0000000040)={[0x4]}, 0x8) write$cgroup_int(r1, &(0x7f0000000000)=0x68e0000000, 0x12) 2m59.647802979s ago: executing program 1 (id=2870): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$eJzs3U1oHGUYB/Bn9oOYZJGoF0FQQUQkEOJN8BIvCgEJ4kFQISLiRUkETfC268mLF88iOXkJpbemPZZeQi8thZ7SNof00tKGHhoK/YAp+xXSdttsupuZNvP7wWZmknfmeQfm/74T2GECKKyJiJiJiHJETEZENSKSvQ3ebX8mOpsro+vzEWn61a2k1a693dbdbzwiGhHxcUScKSXxcyViee3brTsbn3/w91L1/f/XvhnN9CQ7trc2v9j5b+6vE7MfLZ+/eGMuiZmoPXJew5f0+F0liXj9MIq9IJJK3j2gH1/+cfxSM/dvRMR7rfzfTdsiHuyu9ZLW/7l54a2s+wsMV5pWm3NgIwUKpxQRtc5Nams9SqWpqfY9/OXyWOmXxd9+n/xpcWnhx7xHKmBYahGbn50aOTneWk9KU538Xyu38w8cVfXOcvVK8+dOOd/eAMO0f6Cb8//k9/UPQ/6hcA6U/1ey6ROQjU7+W8l+LP/X8+oTkI0Dzf9P+xoA8FLy/z8U1zPzX82nT0A2zP9QXPIPxSX/UFzyD8W1N/8AQLGkI30+KNzo7gAcFTkPPwAAAAAAAAAAAAAAAAAAQA8ro+vz3U9WNc/+G7H9aURUetUvt95H3H352NjtpNlsV9LebSDfvTPgAQZ0LOenr1+9mm/9c2/nW7++ENH4MyKmK5Unr7+kc/09v9f2+Xv1hwELDOiTrw/ryLW+Wt1fPaz6/ZndiDjdHH+me40/pXiztew9/tSG8JqEX+8NeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy8zAAAP//JS12Fg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2m59.138683124s ago: executing program 1 (id=2874): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '\xbe{!'}}], [{@obj_type={'obj_type', 0x3d, '+'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '+\xd9/#}\\'}}, {@fsname={'fsname', 0x3d, '{.]](\xe6@-(&-'}}]}}) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2m58.766820351s ago: executing program 1 (id=2880): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x14000, 0xd6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) landlock_restrict_self(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x34, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 2m56.312079575s ago: executing program 0 (id=2887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000000)={0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x880019, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getpid() sendmmsg$unix(r1, 0x0, 0x0, 0x8000) 2m55.147916847s ago: executing program 0 (id=2896): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=']) 2m54.805733081s ago: executing program 0 (id=2897): rseq(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x204050, &(0x7f0000000100)=ANY=[], 0x1, 0x6cb, &(0x7f0000000880)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffa9) 2m54.577233353s ago: executing program 0 (id=2898): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@sys_immutable}, {@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@fat=@errors_continue}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@fat=@discard}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 2m54.321402327s ago: executing program 0 (id=2901): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) 2m53.953833101s ago: executing program 1 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m53.906973832s ago: executing program 0 (id=2903): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[], 0x9) creat(&(0x7f0000000000)='./file1\x00', 0x14c) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 2m53.330138103s ago: executing program 32 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m53.053097652s ago: executing program 33 (id=2903): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[], 0x9) creat(&(0x7f0000000000)='./file1\x00', 0x14c) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 2m28.38834576s ago: executing program 2 (id=2964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200400c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 2m27.188976498s ago: executing program 2 (id=2968): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000000)=ANY=[], 0x1, 0x613, &(0x7f00000002c0)="$eJzs3U9oHNcdB/DvrFey1gVXSWzHlECFDWmpqK0/KK16iVtK0SGUkB56FrYcC6+VIClFCaWo/9JrD7kW0oNuPRV6N7Tn9parjoFCLjkJelCZ2VlpVa3U9Z9o1/bnY9689/bNvPnNb2ZntbuYDfDCWppO82GKLE2/tVX2d3fm27s78+fr4XaSst1Imp0qxVrS/FNyK52SsZ7pit65Wz3tT1YX3/nsy93PO71mXar1G0eneBzbdclUknN1fdwpu9nfP3G+2yfON6jiIDNlwq6X9fYTTQhPx/4x3SvzP4NsXny10QFnoei8bh59JMlkciHJRP13QOq7Q+PsI3y6vP4CAADwIrj2cfaylYvDjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeJfXv/xd1aXTbUym6v/8/Xj+Wuv2MKY70Hg4tDgAAAAAAAAB4er65l71s5WK3v19U3/lfqzqXquXX8kE2spL13MhWlrOZzaxnNslkz0TjW8ubm+uzA2w513fLubM5XgAAAAAAAAB4Tv0mS4ff/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCgoknOdqiqXuu3JNJpJJpKMl+ttJ//qtp9lD4cdAAAAAJyBr+9lL1u52O3vF9V7/ivV+/6JfJC1bGY1m2lnJXeqzwI67/obuzvz7d2d+QdlOT7vD794pDCqGdP57KH/nq9Wa7RyN6vVIzdyO++lnTtpVFuWrnbj6R/Xr8uYijc7igEju1PX5fp/rOvRMFllZOwgIzN1HsrlS6dn4pSz0xhgT7NpHHzyc+kRcv7mgEd2oa7LXH880jmfK6++853Pwq6cnonkW3/7y8/vtdfu37u7MT06h/SY6kxsN+tMzPc8D199oTIxU2Xi8kF/KT/JzzKdqbyd9azmF1nOZlYylR9XreX6ei6Xk6dn6taR3tv/L5Lx+rx07qKPFtO1atuLWc1P817uZCVvVP/mMpvvZSELWew5w5dPifuL+lnfeLRn/fVv141Wkj/U9Wgo8/pST15777mT1djRu3A3Sy+fnKXiMe+NzW/UjXIfvz3hfj0c/5uJ2Z5MvHL6df7n/XK50V67v35v+f0B9/d6XZep/P1IvUqU18vL5cmqekevjnLslb5js9XYpYOxxrGxywdjfZ+p6939L1ZrX+k701w19mrfsflq7GrPWL+/twAYeRe+c2G89e/WP1uftn7Xutd6a+JH579//rXxjP1j7AfNmXOvN14r/ppP86vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDj2/jwo/vL7fbK+pAbRf1DPqMSj8bxRnm9PM0JMzEax6XR9+wAz7mbmw/ev7nx4UffXX2w/O7KuytrYwsLizOLC2/M37y72l6Z6SyHHSXwVTh80R92JAAAAAAAAAAAAMCgzuK/Ewz7GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBn29J0mg9TZHbmxkzZ392Zb5el2z5cs5mkkaT4ZVL8PbmVTslkz3TFSfv5ZHXxnc++3P38cK5md/3Gadv10Tj+0HZdMpXkXF0/gSPz3X7i+YqDIywTdr2bOBi2/wYAAP//FNsLog==") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='\x00', 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) 2m26.840088463s ago: executing program 2 (id=2971): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x20589c, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="245bc455a37aca9c1165880ac862dc534e8955dd18ad392ca9b65f3df1565697fe7a14c0dd750dd9a21ad7698c70b9c0d7ea659dc5c81122be3731dc27ff5ff184123c94672a51a7a67c4d3e37bf46ff3702650256412757b964afe9d4ddb729ce42d379a4846693379df81fd13d7fc7876c0dad43c15152a0371ab9d2e1c7901569a99f0ce11eeea753f3a6fe7c46ea4b32e1a1c8df8bd493ea32eb1940550f4bfe4d3e685e87f524d737501c92111227b5c6bd23be5ffa68a447f9da63077c6bfabe292ad202609fcd1f44e3392438711d7473b5bdd02c40d94d1d8cba"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r1, r0, 0x0, 0x578410ed) 2m26.410855633s ago: executing program 2 (id=2972): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="185b0000000000000000008f82ffffefffffff0000380cdca33e1a83db490777000000"], &(0x7f0000000040)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000600)=[{0x2, 0x2, 0xb, 0x7972}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) timer_create(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044810}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x24001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) getpid() syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x10400, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRES16=r3], 0x3, 0x3e2, &(0x7f0000000840)="$eJzs3M9u3EQcwPFx/sASpAqpok3THKaUQzh0aztko1UPyHhnN9N6bWvGWyUnFJGkipoURItEcyKXABI8RK88BM/CC1Q8Ash/tiTZJFvyb0P1/UjVzNo/z/zGXc1oHY0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQTthyXc8RkY57y/J4Ycsk3RPO99v75EBxQr9COPk/UauJ6fLQ9PV/T39cNnKz/HRT1PKiJnY+vPHRg+sTY/3rT0joUjx/ufN0dWtr/btRJ3Lh/jzyaEfF2ia6G3SU1DaRzUbDvb/UtrKtI2VXbKa6MjQqyBIj58LPpNdszktVX0l6cacVRKp/cPGe77oN+bCeqsDYJL7/sG7DJR1FOu4UMfnpPGYx/yI+0pnMVNCVcmNza31+WOp5kPc2Qf6wIN/1fc/zfa+x0FxYdN2JgQPuIWIgYvRfWozWOc/gwOn9Xa3/AAAAAADg3eUUz9jz3/+TxXN4R7R1pNxRpwUAAAAAAM5R8Zf/m3kxmdemhcPvfwAAAAAA3jU/D91jZ9P3nT/+EsZMOrvp8qfOdpDHBdvj5XXjh1vM2jPOtaqRomhMVJ9CNevcKoNu9aNfV8XGsDycc0hA/CpmypiZtbJc658pe5lq60jVwyR64IkguDaWqeXs+2ebP4hi+L/E3WuO2NjcWq9//c3WWpHLbt7K7na1gWJgH8UJubx4s+/x6BFPFg9iqn6nyn7d/eMfKy8f+w997onbZcztqbKcOjj+Wt6nVz9u9FUW3hlHvidmy5jZubt5cXfuiCz8YVn4+7M41b14iyzmh2Uxf8YsAGBUNvatQrXq2MH1f2DdPcUsdzmr+564U8bcmSkm1omZI2Z0d9iM7p5xdft94B0Ix62xeb+/HVpVX+UXvDq2Xxv5Tn4Lx19sfytuPH+5c29ze/XJ+pP1Z74/33A/d90FX0wWw6gK1h4AwBGUee1MZT85xuj0K6/Z9IJsSUmThI+k0a2OkjrOlAmXgrijZGqSLAmTKK881i1lpe2laWIy2U6MTBOrl4s3v8jq1S9WdYM406FNIxVYJcMkzoIwky1tQ5n2voy0XVKmuNimKtRtHQaZTmJpk54JVV1Kq9S+QN1ScabbOq/GMjW6G5gV+TiJel0lW8qGRqdZUjbY70vH7cR0i2bro77ZAABcEW/eYHeBlVGPEQAAHHTqVfq9C0oIAAAAAAAAAAAAAAAAAAAAAAAMuIz9f5db+eJqpPF0tbrDP569wfGrMJz/feWD6j/kXFseFyMf1wVVRjgpAbgU/wQAAP//S0ucQg==") 2m25.545929568s ago: executing program 2 (id=2974): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 2m25.396651715s ago: executing program 2 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./control\x00', 0x105) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000964) rmdir(&(0x7f0000000100)='./control\x00') mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) 2m10.202106511s ago: executing program 34 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./control\x00', 0x105) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000964) rmdir(&(0x7f0000000100)='./control\x00') mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) 1m17.794011113s ago: executing program 4 (id=3186): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000500)=""/181, 0xb5}], 0x5}, 0x0) 1m16.669239383s ago: executing program 4 (id=3189): socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m15.926326083s ago: executing program 4 (id=3195): add_key(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mlockall(0x7) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) 1m14.578310309s ago: executing program 4 (id=3203): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./mnt\x00', 0x800080, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000019080)=ANY=[@ANYBLOB="02000000000000000102030000000008490a0b0c0d0e0f10111207000000000000001b1c1d1e1f20212223242565e7c6189a0c30262728292a2b2c2d2e2f3031323c3d3e3f40000000000000000000"], 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @a}, 0x40, r1, '\x00', @b}) keyctl$setperm(0x5, r1, 0x3000101) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@nojournal_checksum}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000019100)='./bus\x00', 0x1, 0x0, 0x1, 0x0, &(0x7f0000000040)) rmdir(&(0x7f0000000380)='./bus\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$pid(0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1m13.248790715s ago: executing program 4 (id=3207): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a5c000000060a0b040000000000000000"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 1m10.4977194s ago: executing program 4 (id=3218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)=0x4) close(0xffffffffffffffff) 1m9.45325781s ago: executing program 35 (id=3218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)=0x4) close(0xffffffffffffffff) 4.924440213s ago: executing program 8 (id=3537): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 4.199280351s ago: executing program 7 (id=3540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4008400) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="240000000000000017010000"], 0x28, 0x2000c000}}], 0x2, 0x88) 3.965393887s ago: executing program 7 (id=3543): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) 3.765260812s ago: executing program 7 (id=3546): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 3.149325888s ago: executing program 3 (id=3554): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 2.939380749s ago: executing program 3 (id=3558): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0xe0) 2.938236639s ago: executing program 8 (id=3559): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x5, 0xffffffff}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 2.737174622s ago: executing program 6 (id=3560): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000004000000510400000000000000ae0e36da8bff70423b74f7fe0699f1640c3d0656", @ANYRES32], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@gettaction={0x28, 0x32, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x28}}, 0xc8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x91000404}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$netlink(r0, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r5, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) close(r6) 2.650574381s ago: executing program 3 (id=3561): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c300000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xdf, &(0x7f0000000000)=""/223, 0x0, 0x43}, 0x94) 2.048551439s ago: executing program 5 (id=3562): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 2.000319829s ago: executing program 8 (id=3563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 1.889144513s ago: executing program 8 (id=3564): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) unshare(0x8040480) unshare(0x2a020480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001fc0)='7', 0x1}], 0x1, 0x0, 0x0, 0x20800}, 0x20040000) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/125, 0x7d}, 0x40000000) 1.845890013s ago: executing program 3 (id=3565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1a, 0x80000, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 1.694341513s ago: executing program 5 (id=3566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.674603086s ago: executing program 6 (id=3567): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {0x0}, {&(0x7f0000000500)=""/181, 0xb5}], 0x5}, 0x0) 1.509286681s ago: executing program 7 (id=3568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 1.507579021s ago: executing program 6 (id=3569): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x160}, 0x1, 0x7}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0xa333, 0x2]}, &(0x7f0000000080)=0x44) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000240)={0xbe, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a48000000060a0b040000000000000000020000001400048010000180080001006e617400040002800900010073797a30000000000900020073797a32000740c5000000140000001100010000000000000000000000000a00000000002d726264288d0f2e3bd81f90d2ee782f3f42debb3d3dc89e5ef43e15e3e9719f10dc1b335d40a0f2cd58210e01c9f992c1e80a34992b85fc34501fcb51751ae086d689"], 0x70}, 0x1, 0x0, 0x0, 0x20044849}, 0x2044041) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 1.397496839s ago: executing program 5 (id=3570): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) 1.326639937s ago: executing program 7 (id=3571): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x14000, 0xd6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) landlock_restrict_self(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x34, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 1.217140104s ago: executing program 3 (id=3572): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 1.216679116s ago: executing program 5 (id=3573): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt(r0, 0x3, 0x1ff, 0x0, 0x0) 1.192627302s ago: executing program 6 (id=3574): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', 0x0}) unshare(0x24040400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 1.075038108s ago: executing program 5 (id=3575): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) 969.373196ms ago: executing program 6 (id=3576): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 912.671763ms ago: executing program 8 (id=3577): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x3e}], 0x10}}], 0x1, 0x4000000) 877.88481ms ago: executing program 3 (id=3578): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 797.581788ms ago: executing program 5 (id=3579): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000500)=""/181, 0xb5}], 0x4}, 0x0) 795.836389ms ago: executing program 8 (id=3580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 745.615321ms ago: executing program 6 (id=3581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 0s ago: executing program 7 (id=3582): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3f, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0x6, 0x7, 0x20, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x9, 0x2, 0xc, 0xfffb, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @alu={0x7, 0x0, 0xc, 0x2, 0x8, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40800) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) kernel console output (not intermixed with test programs): -fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.021041][T16238] loop2: detected capacity change from 0 to 1024 [ 1052.116345][T16238] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1052.231748][T16238] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1052.312567][ T30] audit: type=1800 audit(1762549439.664:234): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2672" name="bus" dev="loop1" ino=1436 res=0 errno=0 [ 1052.796925][T16238] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1052.803427][T16238] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2673: Freeing blocks not in datazone - block = 0, count = 4096 [ 1053.031433][T16238] EXT4-fs (loop2): 1 orphan inode deleted [ 1053.069741][T16238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1053.805293][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.362960][T16262] loop4: detected capacity change from 0 to 4096 [ 1054.431326][T16265] loop0: detected capacity change from 0 to 4096 [ 1054.447453][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.454246][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.483944][T16262] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1054.503846][T16265] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1054.615060][T16262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1054.624952][T16265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1054.656824][T16262] System zones: 0-5 [ 1054.662307][T16265] System zones: 0-5 [ 1054.728777][T16265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.769965][T16262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.142735][T16282] loop2: detected capacity change from 0 to 4096 [ 1056.307671][T16282] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1057.208866][T16282] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1057.223914][T16282] System zones: 0-5 [ 1057.237718][T16282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.488421][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.826572][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.233173][T16302] loop0: detected capacity change from 0 to 256 [ 1058.406554][T16302] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 1058.459868][T16302] exFAT-fs (loop0): failed to load alloc-bitmap [ 1058.513981][T16302] exFAT-fs (loop0): failed to recognize exfat type [ 1058.611743][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1059.849213][T16314] loop4: detected capacity change from 0 to 4096 [ 1059.856664][T16318] 9p: Bad value for 'wfdno' [ 1060.007884][T16314] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1060.207723][T16314] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1060.225635][T16314] System zones: 0-5 [ 1060.284166][T16314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.086378][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.225076][T15317] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1061.475907][T15317] usb 4-1: Using ep0 maxpacket: 32 [ 1061.483198][T15317] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1061.503892][T15317] usb 4-1: config 0 has no interface number 0 [ 1061.543824][T15317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1061.553575][T15317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.263911][T15317] usb 4-1: Product: syz [ 1062.274124][T15317] usb 4-1: Manufacturer: syz [ 1062.278774][T15317] usb 4-1: SerialNumber: syz [ 1062.304895][T15317] usb 4-1: config 0 descriptor?? [ 1062.340889][T15317] smsc95xx v2.0.0 [ 1062.756821][T15317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1062.814131][T15317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1062.872546][T16344] loop0: detected capacity change from 0 to 512 [ 1062.946272][T16344] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2703: inode has both inline data and extents flags [ 1062.996473][T16344] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2703: couldn't read orphan inode 15 (err -117) [ 1063.035578][T15317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1063.048850][T15317] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1063.125871][T16344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.132494][T16357] overlayfs: failed to resolve './file0/file1': -2 [ 1064.521732][ T5879] usb 4-1: USB disconnect, device number 77 [ 1064.742137][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.012001][T16362] loop2: detected capacity change from 0 to 4096 [ 1065.047246][ T5879] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1065.134410][T16362] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1065.169854][T16364] loop0: detected capacity change from 0 to 4096 [ 1065.204077][T16364] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1065.234748][T16364] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1065.253336][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 1065.253373][T16364] System zones: 0-5 [ 1065.256569][T16364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.262602][T16362] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1065.307968][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1065.314058][T16362] System zones: 0-5 [ 1065.462549][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1065.473769][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.476138][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1065.503309][T16362] [ 1065.989244][ T5879] usb 4-1: Product: syz [ 1065.993494][ T5879] usb 4-1: Manufacturer: syz [ 1066.005731][T16362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.013812][ T5879] usb 4-1: SerialNumber: syz [ 1066.036513][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.043876][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1066.081538][ T5879] usb 4-1: config 0 descriptor?? [ 1066.111176][ T5879] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1066.143905][ T5879] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1066.185394][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1066.272395][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1066.302401][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.333365][ T10] usb 2-1: Product: syz [ 1066.458605][ T10] usb 2-1: Manufacturer: syz [ 1067.060009][ T10] usb 2-1: SerialNumber: syz [ 1067.072446][ T10] usb 2-1: config 0 descriptor?? [ 1067.083974][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1067.093239][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1067.170862][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.199477][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.321907][ T5879] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1067.771685][T16383] loop4: detected capacity change from 0 to 4096 [ 1067.802998][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1067.834252][T16383] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1067.846778][T16383] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1067.855353][T16383] System zones: 0-5 [ 1067.866539][T16383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.993141][ T5879] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1068.029805][ T5879] em28xx 4-1:0.0: board has no eeprom [ 1068.296306][ T5879] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1068.343830][ T5879] em28xx 4-1:0.0: dvb set to bulk mode. [ 1068.354297][T15317] em28xx 4-1:0.0: Binding DVB extension [ 1068.376542][ T5879] usb 4-1: USB disconnect, device number 78 [ 1069.028786][ T5879] em28xx 4-1:0.0: Disconnecting em28xx [ 1069.169995][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1069.179209][ T10] em28xx 2-1:0.0: board has no eeprom [ 1069.232764][T15317] em28xx 4-1:0.0: Registering input extension [ 1069.244774][ T5879] em28xx 4-1:0.0: Closing input extension [ 1069.245571][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1069.266999][ T5879] em28xx 4-1:0.0: Freeing device [ 1069.293524][T16393] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1069.323914][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 1069.344976][ T5886] em28xx 2-1:0.0: Binding DVB extension [ 1069.379542][ T10] usb 2-1: USB disconnect, device number 68 [ 1069.388590][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.431352][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 1069.625058][ T5886] em28xx 2-1:0.0: Registering input extension [ 1069.680523][ T10] em28xx 2-1:0.0: Closing input extension [ 1069.749464][ T10] em28xx 2-1:0.0: Freeing device [ 1069.853853][ T5879] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1069.897613][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1069.962395][T16407] loop2: detected capacity change from 0 to 2048 [ 1070.041576][T16407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.043803][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 1070.094190][ T5879] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1070.115552][ T5879] usb 4-1: config 0 has no interface number 0 [ 1070.118075][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1070.158796][ T5879] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1071.434497][ T30] audit: type=1800 audit(1762549458.214:235): pid=16413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2720" name="bus" dev="loop2" ino=1436 res=0 errno=0 [ 1071.477132][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.573823][ T5879] usb 4-1: Product: syz [ 1071.593863][ T5879] usb 4-1: Manufacturer: syz [ 1071.598519][ T5879] usb 4-1: SerialNumber: syz [ 1071.631868][ T5879] usb 4-1: config 0 descriptor?? [ 1071.677677][ T5879] smsc95xx v2.0.0 [ 1072.015952][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'. [ 1072.088893][ T5879] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1072.184960][ T5879] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1072.433046][T16428] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1072.440580][ T5879] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1072.472131][ T5879] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1072.593962][T16433] 9p: Bad value for 'wfdno' [ 1072.743274][T16431] loop1: detected capacity change from 0 to 2048 [ 1072.832501][T16437] loop2: detected capacity change from 0 to 4096 [ 1072.873634][T16437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1072.891643][T16431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1072.919633][T16437] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1072.963883][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1072.991781][T16437] System zones: 0-5 [ 1073.029472][T16437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.223834][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1073.264696][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1073.280803][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1073.290775][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.298884][ T43] usb 1-1: Product: syz [ 1073.303284][ T43] usb 1-1: Manufacturer: syz [ 1073.308032][ T43] usb 1-1: SerialNumber: syz [ 1073.316618][ T43] usb 1-1: config 0 descriptor?? [ 1073.327030][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1073.426116][ T43] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1073.513017][ T30] audit: type=1800 audit(1762549460.864:236): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2722" name="bus" dev="loop1" ino=1436 res=0 errno=0 [ 1073.902762][ T5879] usb 4-1: USB disconnect, device number 79 [ 1074.349872][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1075.480377][ T43] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1075.500999][ T43] em28xx 1-1:0.0: board has no eeprom [ 1075.521133][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.623919][ T43] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1075.647741][T16458] loop4: detected capacity change from 0 to 128 [ 1075.653945][ T43] em28xx 1-1:0.0: dvb set to bulk mode. [ 1075.659943][ T793] em28xx 1-1:0.0: Binding DVB extension [ 1075.693073][T16458] hpfs: Unknown parameter 'eˆV±äoasrw' [ 1075.704590][ T43] usb 1-1: USB disconnect, device number 82 [ 1075.751351][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 1076.345841][ T793] em28xx 1-1:0.0: Registering input extension [ 1076.354521][ T43] em28xx 1-1:0.0: Closing input extension [ 1076.408714][ T43] em28xx 1-1:0.0: Freeing device [ 1076.712535][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 1078.059778][T16492] loop2: detected capacity change from 0 to 1024 [ 1078.093929][T16492] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1078.124997][T16492] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1078.133310][T16492] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1078.147375][T16497] loop1: detected capacity change from 0 to 128 [ 1078.274587][T16492] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2744: Freeing blocks not in datazone - block = 0, count = 4096 [ 1078.323639][T16492] EXT4-fs (loop2): 1 orphan inode deleted [ 1078.349226][T16492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1078.531088][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.242761][T16515] loop4: detected capacity change from 0 to 4096 [ 1079.319017][T16515] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1079.377474][T16515] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1079.414003][T16515] System zones: 0-5 [ 1079.449343][T16515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.478114][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.696092][T16539] loop2: detected capacity change from 0 to 4096 [ 1080.724277][T16539] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1080.756628][T16539] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1080.891111][T16539] System zones: 0-5 [ 1080.944848][T16539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.830292][T16555] tipc: Enabling of bearer rejected, failed to enable media [ 1082.855122][T16555] syzkaller0: entered promiscuous mode [ 1082.860596][T16555] syzkaller0: entered allmulticast mode [ 1082.968263][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.463870][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1083.562793][T16565] loop2: detected capacity change from 0 to 512 [ 1083.639856][T16565] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2765: inode has both inline data and extents flags [ 1083.739618][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.766045][T16569] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1083.787417][T16565] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2765: couldn't read orphan inode 15 (err -117) [ 1083.810178][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.890294][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1083.905242][T16565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.923810][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1083.954559][ T10] usb 2-1: SerialNumber: syz [ 1084.168380][T16569] Bluetooth: MGMT ver 1.23 [ 1084.848693][ T10] usb 2-1: 0:2 : does not exist [ 1084.871917][ T10] usb 2-1: unit 255 not found! [ 1084.875330][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.970128][ T10] usb 2-1: USB disconnect, device number 69 [ 1085.080931][ T8298] udevd[8298]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.196847][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 1086.103083][T16590] loop4: detected capacity change from 0 to 1024 [ 1086.110893][T16588] loop3: detected capacity change from 0 to 256 [ 1086.144016][T16590] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1086.194296][T16588] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 1086.207650][T16590] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1086.214179][T16588] exFAT-fs (loop3): failed to load alloc-bitmap [ 1086.233248][T16590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1086.246134][T16588] exFAT-fs (loop3): failed to recognize exfat type [ 1086.256508][T16590] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2770: Freeing blocks not in datazone - block = 0, count = 4096 [ 1086.464780][T16590] EXT4-fs (loop4): 1 orphan inode deleted [ 1087.225390][T16590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1087.476773][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.689269][T16612] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 1087.713661][T16613] loop2: detected capacity change from 0 to 512 [ 1087.797079][T16612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1087.845216][T16610] loop0: detected capacity change from 0 to 2048 [ 1087.877099][T16610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1087.892616][T16613] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2779: inode has both inline data and extents flags [ 1087.926161][T16613] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2779: couldn't read orphan inode 15 (err -117) [ 1087.971381][T16612] vlan3: entered allmulticast mode [ 1087.996675][T16612] team0: entered allmulticast mode [ 1088.001830][T16612] team_slave_0: entered allmulticast mode [ 1088.006149][T16613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.015408][T16612] team_slave_1: entered allmulticast mode [ 1088.102830][T16612] vlan2: entered allmulticast mode [ 1088.120479][T16612] dummy0: entered allmulticast mode [ 1088.254682][T16612] bond3: (slave vlan3): making interface the new active one [ 1088.298884][T16612] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 1088.744641][T16622] overlayfs: failed to resolve './file1': -2 [ 1089.184884][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.567033][ T30] audit: type=1800 audit(1762549476.894:237): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2778" name="bus" dev="loop0" ino=1436 res=0 errno=0 [ 1089.894183][ T43] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1090.054641][T16633] loop4: detected capacity change from 0 to 256 [ 1090.074063][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1090.089043][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.124965][T16633] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 1090.132788][ T43] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1090.173080][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1090.192507][ T43] usb 3-1: Product: syz [ 1090.192810][T16633] exFAT-fs (loop4): failed to load alloc-bitmap [ 1090.211626][ T43] usb 3-1: Manufacturer: syz [ 1090.224109][T16633] exFAT-fs (loop4): failed to recognize exfat type [ 1090.232420][T16620] loop1: detected capacity change from 0 to 32768 [ 1090.239154][ T43] usb 3-1: SerialNumber: syz [ 1090.243072][ T43] usb 3-1: config 0 descriptor?? [ 1090.304118][T16620] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2781 (16620) [ 1090.351666][T16620] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1090.436639][T16620] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm [ 1091.404347][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1091.404807][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1091.532073][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1091.611228][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1091.664590][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1091.708167][T16620] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1091.857440][T16620] BTRFS error (device loop1): open_ctree failed: -12 [ 1091.976891][T16661] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1092.816518][ T5886] usb 3-1: USB disconnect, device number 69 [ 1092.986290][T16669] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2791'. [ 1096.253237][T16749] Driver unsupported XDP return value 0 on prog (id 690) dev N/A, expect packet loss! [ 1096.883191][ T5841] Bluetooth: hci4: connection err: -111 [ 1098.042004][ T5841] Bluetooth: Fragment is too long (len 14, expected 2) [ 1098.296338][T16795] loop4: detected capacity change from 0 to 512 [ 1098.350093][T16795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.364162][T16795] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.076971][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.370508][T16810] loop4: detected capacity change from 0 to 512 [ 1099.387334][T16810] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1099.836523][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.848487][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.857760][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.866730][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.876714][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.415080][T16816] loop3: detected capacity change from 0 to 4096 [ 1100.538745][T16812] lo speed is unknown, defaulting to 1000 [ 1100.560788][T16822] loop0: detected capacity change from 0 to 128 [ 1100.585807][T16822] EXT4-fs: Ignoring removed oldalloc option [ 1100.612786][T16822] EXT4-fs: Mount option(s) incompatible with ext2 [ 1100.621877][T16812] wg1 speed is unknown, defaulting to 1000 [ 1100.653485][T16826] loop3: detected capacity change from 0 to 1024 [ 1100.681471][T16826] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1100.833659][ T2890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.836927][T16826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.886472][ T5143] Bluetooth: hci5: command tx timeout [ 1104.487469][T16833] loop1: detected capacity change from 0 to 512 [ 1104.642662][T16839] loop2: detected capacity change from 0 to 256 [ 1104.651456][T16839] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1104.662337][T16839] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1104.671861][T16833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.739099][T16839] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1104.755413][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.770756][ T2890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.777177][T16833] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.839595][T16833] EXT4-fs error (device loop1): ext4_nfs_get_inode:1541: inode #14: comm syz.1.2861: invalid fast symlink length 39 [ 1104.872972][T16833] EXT4-fs (loop1): Remounting filesystem read-only [ 1104.879708][T16839] exFAT-fs (loop2): failed to load alloc-bitmap [ 1104.899948][T16839] exFAT-fs (loop2): failed to recognize exfat type [ 1104.929038][ T5143] Bluetooth: hci5: command tx timeout [ 1104.990940][T16846] loop3: detected capacity change from 0 to 1024 [ 1105.028453][ T2890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.050266][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.306436][T16848] loop0: detected capacity change from 0 to 4096 [ 1105.337950][T16848] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1105.384192][T16848] UDF-fs: Scanning with blocksize 512 failed [ 1105.416123][ T2890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.449600][T16848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1105.507399][T16858] capability: warning: `syz.1.2870' uses deprecated v2 capabilities in a way that may be insecure [ 1105.577264][ T30] audit: type=1800 audit(1762549492.924:238): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2867" name="ext4" dev="loop0" ino=1347 res=0 errno=0 [ 1105.606951][T16858] loop1: detected capacity change from 0 to 128 [ 1105.664009][T16858] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1105.720733][T16858] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1105.772522][T16861] binder: 16860:16861 ioctl c0306201 2000000003c0 returned -22 [ 1105.835065][T16812] chnl_net:caif_netlink_parms(): no params data found [ 1105.851706][T16861] loop2: detected capacity change from 0 to 512 [ 1105.892737][T16861] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 1105.909304][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1105.925619][ T5820] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1106.091816][T16868] loop1: detected capacity change from 0 to 128 [ 1106.288903][ T2890] bridge_slave_1: left allmulticast mode [ 1106.311682][ T2890] bridge_slave_1: left promiscuous mode [ 1106.347645][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.352027][T16882] loop0: detected capacity change from 0 to 512 [ 1106.364057][ T793] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1106.391957][T16882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.421554][T16882] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.447736][ T2890] bridge_slave_0: left allmulticast mode [ 1106.466778][ T2890] bridge_slave_0: left promiscuous mode [ 1106.476516][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.516300][ T793] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1106.530259][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.542194][ T793] usb 3-1: config 0 descriptor?? [ 1106.550906][ T793] cp210x 3-1:0.0: cp210x converter detected [ 1107.240249][ T5143] Bluetooth: hci5: command tx timeout [ 1107.256475][T16893] loop3: detected capacity change from 0 to 512 [ 1107.561802][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.751057][T16895] loop3: detected capacity change from 0 to 1024 [ 1107.758167][T16897] loop0: detected capacity change from 0 to 2048 [ 1107.770098][T16872] loop2: detected capacity change from 0 to 256 [ 1107.835217][T16897] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1107.854398][T16895] EXT4-fs: Ignoring removed mblk_io_submit option [ 1107.861139][T16895] EXT4-fs: Ignoring removed orlov option [ 1107.894531][T16897] UDF-fs: Scanning with blocksize 512 failed [ 1107.913471][T16897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1107.953204][T16895] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1107.999026][T16895] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1108.019744][T16895] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 1108.083871][T16895] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1108.102885][ T793] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1108.111023][ T793] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1108.138160][ T793] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1108.253814][ T30] audit: type=1804 audit(1762549495.504:239): pid=16897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2884" name="/newroot/580/file1/bus" dev="loop0" ino=830 res=1 errno=0 [ 1108.733243][ T793] usb 3-1: USB disconnect, device number 70 [ 1108.809449][T16904] loop3: detected capacity change from 0 to 256 [ 1108.831800][ T793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1108.874509][ T793] cp210x 3-1:0.0: device disconnected [ 1108.885535][T16904] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 1108.957458][T16904] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1108.995538][T16904] exFAT-fs (loop3): failed to load alloc-bitmap [ 1109.017244][T16904] exFAT-fs (loop3): failed to recognize exfat type [ 1109.148220][T16912] loop2: detected capacity change from 0 to 2048 [ 1109.227385][T16912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.252210][T16912] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.291848][T16912] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #16: comm syz.2.2889: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 1109.323375][T16912] EXT4-fs (loop2): Remounting filesystem read-only [ 1109.330295][ T5143] Bluetooth: hci5: command tx timeout [ 1109.367680][ T2890] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1109.451750][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.479893][ T5143] Bluetooth: Wrong link type (-57) [ 1109.622620][ T5143] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1109.905523][T16930] loop2: detected capacity change from 0 to 8 [ 1109.968773][T16932] loop0: detected capacity change from 0 to 128 [ 1110.013466][T16932] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1110.079543][T16932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.177732][T16932] 9p: Bad value for 'cache' [ 1110.225193][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.256426][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.283405][ T2890] bond0 (unregistering): Released all slaves [ 1110.345460][ T2890] bond1 (unregistering): Released all slaves [ 1110.362529][T16936] loop0: detected capacity change from 0 to 1024 [ 1110.375609][ T2890] bond2 (unregistering): Released all slaves [ 1110.590070][T16940] loop0: detected capacity change from 0 to 128 [ 1110.813208][ T2890] bond3 (unregistering): (slave vlan3): Releasing active interface [ 1110.823110][ T2890] bond3 (unregistering): Released all slaves [ 1110.907883][ T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1111.075173][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1111.093677][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1111.109103][T16812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.134553][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.145194][ T43] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1111.168044][T16812] bridge_slave_0: entered allmulticast mode [ 1111.173901][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.182272][ T43] usb 4-1: Product: syz [ 1111.196718][T16812] bridge_slave_0: entered promiscuous mode [ 1111.216315][ T43] usb 4-1: Manufacturer: syz [ 1111.221160][ T43] usb 4-1: SerialNumber: syz [ 1111.224416][ T2890] tipc: Left network mode [ 1111.232625][T16812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.244252][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.261811][T16812] bridge_slave_1: entered allmulticast mode [ 1111.266090][ T43] usb 4-1: config 0 descriptor?? [ 1111.284330][T16812] bridge_slave_1: entered promiscuous mode [ 1111.296123][ T43] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1111.328038][ T43] usb 4-1: Detected FT232R [ 1111.514150][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1111.642967][T16812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.690363][T16812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.764398][ T43] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1111.959367][T10031] usb 4-1: USB disconnect, device number 80 [ 1112.002677][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.005777][T16812] team0: Port device team_slave_0 added [ 1112.022616][T10031] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1112.022611][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.023251][T10031] ftdi_sio 4-1:0.0: device disconnected [ 1112.054656][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.074357][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.083425][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.167450][T16812] team0: Port device team_slave_1 added [ 1112.341687][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1112.367527][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1112.368379][T16812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.386844][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1112.402883][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.432751][T16968] loop2: detected capacity change from 0 to 16 [ 1112.456166][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1112.462637][T16812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.468707][T16968] erofs (device loop2): mounted with root inode @ nid 36. [ 1112.485906][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.540777][T16812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.552582][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.579899][T16812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.679138][ T2890] hsr_slave_0: left promiscuous mode [ 1112.688046][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.696420][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.712557][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.720885][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.742211][ T2890] veth1_macvtap: left promiscuous mode [ 1112.748425][ T2890] veth0_macvtap: left promiscuous mode [ 1112.754350][ T2890] veth1_vlan: left promiscuous mode [ 1112.759790][ T2890] veth0_vlan: left promiscuous mode [ 1112.898313][T16976] xt_TCPMSS: Only works on TCP SYN packets [ 1113.000902][ T2890] vlan2 (unregistering): left allmulticast mode [ 1113.008114][ T2890] dummy0 (unregistering): left allmulticast mode [ 1113.019079][ T2890] team0 (unregistering): Port device vlan2 removed [ 1113.233955][T10827] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1113.386424][ T2890] team_slave_1 (unregistering): left allmulticast mode [ 1113.387518][T10827] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1113.406010][T10827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.406672][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 1113.416710][T10827] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1113.439879][T10827] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1113.449641][T10827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.458361][T10827] usb 4-1: Product: syz [ 1113.462564][T10827] usb 4-1: Manufacturer: syz [ 1113.467880][T10827] usb 4-1: SerialNumber: syz [ 1113.475922][T10827] usb 4-1: config 0 descriptor?? [ 1113.486544][T10827] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1113.509768][ T2890] team_slave_0 (unregistering): left allmulticast mode [ 1113.514727][T10827] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1113.525865][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 1113.719649][T10827] usb 4-1: USB disconnect, device number 81 [ 1114.023833][T16973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1114.026028][T16956] lo speed is unknown, defaulting to 1000 [ 1114.037878][T16973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1114.102600][T16956] wg1 speed is unknown, defaulting to 1000 [ 1114.193569][T16812] hsr_slave_0: entered promiscuous mode [ 1114.203969][ T5841] Bluetooth: hci0: command tx timeout [ 1114.226250][T16812] hsr_slave_1: entered promiscuous mode [ 1114.233197][T16812] debugfs: 'hsr0' already exists in 'hsr' [ 1114.247918][T16812] Cannot create hsr debugfs directory [ 1114.284048][T16965] lo speed is unknown, defaulting to 1000 [ 1114.420259][T16965] wg1 speed is unknown, defaulting to 1000 [ 1115.185546][ T5841] Bluetooth: hci2: command tx timeout [ 1115.871767][T16993] loop2: detected capacity change from 0 to 128 [ 1115.892848][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.901698][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.926180][T16993] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1115.961448][T16993] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1116.023461][T16993] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.208590][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1116.283975][ T5841] Bluetooth: hci0: command tx timeout [ 1116.374363][ T2890] IPVS: stop unused estimator thread 0... [ 1116.425186][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 1116.761469][T17014] loop2: detected capacity change from 0 to 256 [ 1116.774824][T17014] exfat: Invalid uid '0x00000000ffffffff' [ 1116.930714][ T2890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.014754][T17016] loop2: detected capacity change from 0 to 1024 [ 1117.084975][T17016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.218019][ T2890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.236076][T17021] loop3: detected capacity change from 0 to 16 [ 1117.243972][ T5841] Bluetooth: hci2: command tx timeout [ 1117.255616][T17021] erofs (device loop3): mounted with root inode @ nid 36. [ 1117.299065][T17021] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1117.333967][T17021] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1117.338220][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.511680][T17028] loop3: detected capacity change from 0 to 1024 [ 1117.574922][T17029] loop2: detected capacity change from 0 to 512 [ 1117.604589][ T2890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.631878][ T30] audit: type=1326 audit(1762549504.984:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1117.723937][ T30] audit: type=1326 audit(1762549505.014:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1117.760081][T17029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.810390][ T30] audit: type=1326 audit(1762549505.014:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1117.833252][ T30] audit: type=1326 audit(1762549505.014:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1117.853663][T17029] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.859437][ T30] audit: type=1326 audit(1762549505.014:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1117.909034][ T30] audit: type=1326 audit(1762549505.014:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1118.011869][ T30] audit: type=1326 audit(1762549505.064:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9aa25c1f85 code=0x7ffc0000 [ 1118.037877][ T30] audit: type=1326 audit(1762549505.074:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1118.105533][ T2890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.127553][ T30] audit: type=1326 audit(1762549505.074:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17026 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1118.183129][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.194582][ T30] audit: type=1326 audit(1762549505.254:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9aa258f6c9 code=0x7ffc0000 [ 1118.276226][T16965] chnl_net:caif_netlink_parms(): no params data found [ 1118.347764][T16956] chnl_net:caif_netlink_parms(): no params data found [ 1118.364423][ T5841] Bluetooth: hci0: command tx timeout [ 1118.507012][T17048] loop2: detected capacity change from 0 to 2048 [ 1118.918511][T16812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1119.963387][ T5841] Bluetooth: hci2: command tx timeout [ 1120.444376][ T5841] Bluetooth: hci0: command tx timeout [ 1120.562774][T17072] loop3: detected capacity change from 0 to 16 [ 1120.616635][T16812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1120.665165][T17072] erofs (device loop3): mounted with root inode @ nid 36. [ 1120.697968][T16812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1120.727739][T16812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1121.057328][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.074113][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.081693][T16965] bridge_slave_0: entered allmulticast mode [ 1121.231213][T17084] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 1121.246991][T17084] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 1121.579331][T16965] bridge_slave_0: entered promiscuous mode [ 1121.590659][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.598113][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.605481][T16965] bridge_slave_1: entered allmulticast mode [ 1121.613399][T16965] bridge_slave_1: entered promiscuous mode [ 1121.634075][T16956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.641453][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.649508][T16956] bridge_slave_0: entered allmulticast mode [ 1121.658970][T16956] bridge_slave_0: entered promiscuous mode [ 1121.668842][T16956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.676617][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.684552][T16956] bridge_slave_1: entered allmulticast mode [ 1121.696516][T16956] bridge_slave_1: entered promiscuous mode [ 1122.041734][T17096] loop2: detected capacity change from 0 to 1024 [ 1122.046061][ T5841] Bluetooth: hci2: command tx timeout [ 1122.071382][T17096] hfsplus: failed to load root directory [ 1122.098253][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.068315][T17096] Bluetooth: MGMT ver 1.23 [ 1123.501240][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.341880][T17105] loop2: detected capacity change from 0 to 256 [ 1124.431568][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1124.432808][ T30] audit: type=1800 audit(1762549511.784:261): pid=17105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2929" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 1124.483633][ T2890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.567930][T16956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.571193][T17102] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 1124.681096][T16965] team0: Port device team_slave_0 added [ 1124.703279][T16956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.759842][ T2890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.782471][T16965] team0: Port device team_slave_1 added [ 1124.935161][ T2890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.955578][T16956] team0: Port device team_slave_0 added [ 1124.962575][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.971311][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.022349][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.042686][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.053000][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.080290][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.107560][T16956] team0: Port device team_slave_1 added [ 1125.310660][ T2890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.507404][T16956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.541957][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.582008][T17125] loop2: detected capacity change from 0 to 512 [ 1125.657048][T16956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.670360][T17125] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1125.680393][T16956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.699294][T17125] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1125.708263][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.712616][T17125] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1125.786869][T17125] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 1125.798418][T17125] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1126.411039][T16956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.578271][T17125] loop2: detected capacity change from 0 to 1024 [ 1126.726916][T16965] hsr_slave_0: entered promiscuous mode [ 1126.767972][T16965] hsr_slave_1: entered promiscuous mode [ 1126.804989][T16965] debugfs: 'hsr0' already exists in 'hsr' [ 1126.821195][T16965] Cannot create hsr debugfs directory [ 1127.666742][T16956] hsr_slave_0: entered promiscuous mode [ 1127.675802][T16956] hsr_slave_1: entered promiscuous mode [ 1127.682143][T16956] debugfs: 'hsr0' already exists in 'hsr' [ 1127.688066][T16956] Cannot create hsr debugfs directory [ 1127.873950][ T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1127.942097][T16812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.036831][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1128.054598][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.075185][ T43] usb 3-1: config 0 descriptor?? [ 1128.104954][ T43] cp210x 3-1:0.0: cp210x converter detected [ 1128.230727][ T2890] bridge_slave_1: left allmulticast mode [ 1128.237130][ T2890] bridge_slave_1: left promiscuous mode [ 1128.243815][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.255935][ T2890] bridge_slave_0: left allmulticast mode [ 1128.261673][ T2890] bridge_slave_0: left promiscuous mode [ 1128.269206][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.330575][ T2890] bridge_slave_1: left allmulticast mode [ 1128.336561][ T2890] bridge_slave_1: left promiscuous mode [ 1128.342588][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.359664][ T2890] bridge_slave_0: left allmulticast mode [ 1128.380144][ T2890] bridge_slave_0: left promiscuous mode [ 1128.388652][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.595580][ T43] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1128.608339][T17142] loop2: detected capacity change from 0 to 256 [ 1129.306436][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1129.490799][ T43] usb 3-1: USB disconnect, device number 71 [ 1129.504654][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1129.594571][ T43] cp210x 3-1:0.0: device disconnected [ 1129.622912][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.634186][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.645857][ T2890] bond0 (unregistering): Released all slaves [ 1129.664771][ T2890] bond1 (unregistering): Released all slaves [ 1129.681107][ T2890] bond2 (unregistering): Released all slaves [ 1129.695708][ T2890] bond3 (unregistering): Released all slaves [ 1129.831103][ T2890] bond4 (unregistering): (slave vlan2): Releasing backup interface [ 1129.840874][ T2890] bond4 (unregistering): Released all slaves [ 1129.963165][ T2890] bond5 (unregistering): Released all slaves [ 1129.977089][ T2890] bond6 (unregistering): Released all slaves [ 1130.190916][ T2890] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1130.199756][ T2890] gretap1 (unregistering): left allmulticast mode [ 1130.424152][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.436024][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.446718][ T2890] bond0 (unregistering): Released all slaves [ 1130.461794][ T2890] bond1 (unregistering): Released all slaves [ 1130.475551][ T2890] bond2 (unregistering): Released all slaves [ 1130.488386][ T2890] bond3 (unregistering): Released all slaves [ 1130.507975][ T2890] bond4 (unregistering): Released all slaves [ 1130.521657][ T2890] bond5 (unregistering): Released all slaves [ 1130.537466][ T2890] bond6 (unregistering): Released all slaves [ 1130.612193][T16812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.705092][T17157] lo speed is unknown, defaulting to 1000 [ 1130.775853][T17157] wg1 speed is unknown, defaulting to 1000 [ 1130.782401][ T2890] tipc: Left network mode [ 1130.803487][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.810804][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.017330][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.024611][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.114755][ T2890] tipc: Left network mode [ 1131.351649][T16965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1131.460918][T16965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1132.999185][T16965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1133.063279][T16965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1133.528559][T16956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1133.608053][T16956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1133.708622][T16956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1133.903515][T16956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1134.617604][ T2890] hsr_slave_0: left promiscuous mode [ 1134.627059][ T2890] hsr_slave_1: left promiscuous mode [ 1134.635746][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.645330][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.655674][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.663297][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.690266][ T2890] hsr_slave_0: left promiscuous mode [ 1134.697338][ T2890] hsr_slave_1: left promiscuous mode [ 1134.704361][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.711957][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.734780][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.768203][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.836798][ T2890] veth1_macvtap: left promiscuous mode [ 1134.842727][ T2890] veth0_macvtap: left promiscuous mode [ 1134.849913][T17218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1134.850820][ T2890] veth1_vlan: left promiscuous mode [ 1134.856898][T17218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1134.872228][T17218] vhci_hcd vhci_hcd.0: Device attached [ 1134.875576][ T2890] veth0_vlan: left promiscuous mode [ 1134.895065][ T2890] veth1_macvtap: left promiscuous mode [ 1134.900865][ T2890] veth0_macvtap: left promiscuous mode [ 1134.907456][ T2890] veth1_vlan: left promiscuous mode [ 1134.913152][ T2890] veth0_vlan: left promiscuous mode [ 1134.940397][T17220] vhci_hcd: connection closed [ 1134.943522][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1134.966827][ T36] vhci_hcd vhci_hcd.2: release socket [ 1134.989678][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1135.054233][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1135.235043][T17225] loop3: detected capacity change from 0 to 256 [ 1135.407458][T17227] loop3: detected capacity change from 0 to 512 [ 1135.484458][T17227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.521651][T17227] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.547207][T17232] loop2: detected capacity change from 0 to 512 [ 1135.635678][T17232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.651456][T17232] ext4 filesystem being mounted at /601/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.674912][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.591723][T17244] loop3: detected capacity change from 0 to 1024 [ 1136.687701][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.101226][ T2890] team_slave_1 (unregistering): left allmulticast mode [ 1137.113935][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 1137.736682][ T2890] team_slave_0 (unregistering): left allmulticast mode [ 1137.746419][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 1137.932147][T17257] loop2: detected capacity change from 0 to 1024 [ 1138.478836][T17268] loop2: detected capacity change from 0 to 512 [ 1138.748019][T17271] loop2: detected capacity change from 0 to 136 [ 1138.756793][T17271] iso9660: Unknown parameter 'ÿ' [ 1139.659706][T17277] loop2: detected capacity change from 0 to 2048 [ 1139.687430][T17277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.834508][T10827] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1140.008332][T10827] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1140.023921][T10827] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1140.032412][T10827] usb 4-1: Product: syz [ 1140.037518][T10827] usb 4-1: Manufacturer: syz [ 1140.042154][T10827] usb 4-1: SerialNumber: syz [ 1140.077899][T10827] usb 4-1: config 0 descriptor?? [ 1140.092036][T10827] ch341 4-1:0.0: ch341-uart converter detected [ 1140.688427][ T2890] team_slave_1 (unregistering): left allmulticast mode [ 1140.698871][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 1140.759951][ T2890] team_slave_0 (unregistering): left allmulticast mode [ 1140.769021][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 1141.102105][T10827] ch341-uart ttyUSB0: failed to read break control: -71 [ 1141.119753][T10827] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1141.140151][T10827] usb 4-1: USB disconnect, device number 82 [ 1141.162629][T10827] ch341 4-1:0.0: device disconnected [ 1141.516825][ T793] lo speed is unknown, defaulting to 1000 [ 1141.522973][ T793] syz2: Port: 1 Link DOWN [ 1141.676059][T16812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.830450][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.918746][T16965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.019423][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.026820][ T7843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.059721][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.067209][ T7843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.320589][T16956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.502918][T16956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.530135][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.537523][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.598253][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.605776][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.018637][ T2890] IPVS: stop unused estimator thread 0... [ 1143.041805][T16812] veth0_vlan: entered promiscuous mode [ 1143.051467][ T2890] IPVS: stop unused estimator thread 0... [ 1143.120002][T16812] veth1_vlan: entered promiscuous mode [ 1143.262275][T16965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.332250][T16812] veth0_macvtap: entered promiscuous mode [ 1143.388006][T16812] veth1_macvtap: entered promiscuous mode [ 1143.503391][T16812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.566623][T16812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.627601][ T5955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.674359][ T5955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.701017][ T5955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.741662][ T5955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.895180][T16956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.228421][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.263878][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.461550][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.479557][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.657729][T16965] veth0_vlan: entered promiscuous mode [ 1144.794216][T16965] veth1_vlan: entered promiscuous mode [ 1144.852147][T17344] loop4: detected capacity change from 0 to 512 [ 1144.960726][T17344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 1144.969915][T16965] veth0_macvtap: entered promiscuous mode [ 1144.994503][T17344] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1145.004953][T17344] EXT4-fs warning (device loop4): ext4_enable_quotas:7181: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1145.033090][T17344] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1145.040381][T17344] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.2854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1145.065177][T17344] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2854: couldn't read orphan inode 13 (err -117) [ 1145.080372][T16965] veth1_macvtap: entered promiscuous mode [ 1145.080423][T17344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1145.112276][T17344] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2854: bg 0: block 248: padding at end of block bitmap is not set [ 1146.531155][T16956] veth0_vlan: entered promiscuous mode [ 1146.606179][T16965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.675216][T16956] veth1_vlan: entered promiscuous mode [ 1146.688743][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.689503][T16965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.814814][ T7843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.863951][ T7843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.883393][ T7843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.978543][ T7843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.292510][T17358] loop4: detected capacity change from 0 to 1024 [ 1147.357970][T17358] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1147.537707][T17358] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1147.565835][T17358] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1147.600841][T17358] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2983: Freeing blocks not in datazone - block = 0, count = 4096 [ 1147.688692][T17358] EXT4-fs (loop4): 1 orphan inode deleted [ 1147.719612][T17358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1147.771526][T16956] veth0_macvtap: entered promiscuous mode [ 1147.838001][T16956] veth1_macvtap: entered promiscuous mode [ 1147.969597][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.004199][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.048325][T16956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.077407][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.079767][T16956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.180621][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.214326][ T5955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.233307][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.266815][ T7858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.305768][ T7858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.973800][ T7858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.413990][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.421877][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.615665][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.623649][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.324065][T17388] loop4: detected capacity change from 0 to 512 [ 1152.479283][T17388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.574039][T17388] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.731516][T17400] loop5: detected capacity change from 0 to 1024 [ 1152.740934][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.900151][ T30] audit: type=1800 audit(1762549796.250:262): pid=17400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2904" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1152.942378][T17404] loop4: detected capacity change from 0 to 256 [ 1152.993455][T17404] vfat: Unknown parameter 'ÿ0x0000000000000000' [ 1153.297118][T17407] Bluetooth: MGMT ver 1.23 [ 1153.395347][T17407] loop5: detected capacity change from 0 to 512 [ 1153.962264][T17407] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2992: invalid indirect mapped block 4294967295 (level 1) [ 1154.109726][T17407] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2992: invalid indirect mapped block 4294967295 (level 1) [ 1154.158624][T17407] EXT4-fs (loop5): 2 truncates cleaned up [ 1154.185806][T17407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.310976][T17420] loop6: detected capacity change from 0 to 512 [ 1154.400736][T17420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.514064][T17420] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.532171][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.771504][T16965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.044441][T17440] loop6: detected capacity change from 0 to 128 [ 1155.102328][T17440] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1155.155903][T17440] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1155.326295][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1155.346448][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1155.355559][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1155.421051][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1155.454210][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1155.542177][T17452] loop4: detected capacity change from 0 to 1024 [ 1155.613884][ T30] audit: type=1326 audit(1762549798.950:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1155.673932][ T30] audit: type=1326 audit(1762549798.950:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1155.758567][T17447] wg1 speed is unknown, defaulting to 1000 [ 1155.860868][ T30] audit: type=1326 audit(1762549798.950:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1155.909461][ T7714] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1156.025771][ T30] audit: type=1326 audit(1762549798.950:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1156.155050][ T30] audit: type=1326 audit(1762549799.010:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1156.252205][T17462] loop5: detected capacity change from 0 to 1024 [ 1156.282141][ T30] audit: type=1326 audit(1762549799.010:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1156.335371][ T30] audit: type=1326 audit(1762549799.010:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17454 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d417c1f85 code=0x7ffc0000 [ 1156.345018][T17462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.363199][ T30] audit: type=1326 audit(1762549799.010:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1156.491154][ T30] audit: type=1326 audit(1762549799.010:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4178f6c9 code=0x7ffc0000 [ 1156.559892][T17462] EXT4-fs: Ignoring removed bh option [ 1157.475096][T17462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.564193][ T5841] Bluetooth: hci4: command tx timeout [ 1157.619783][T17477] warning: `syz.4.3009' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1157.878621][T17483] kvm: pic: non byte write [ 1157.879134][T17482] loop3: detected capacity change from 0 to 2048 [ 1157.909522][T17447] chnl_net:caif_netlink_parms(): no params data found [ 1157.995712][T17482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1158.296913][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.805073][ T5841] Bluetooth: hci4: command tx timeout [ 1159.870075][T17506] loop5: detected capacity change from 0 to 1024 [ 1159.885062][T17506] EXT4-fs: Ignoring removed orlov option [ 1160.077024][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.098123][T17506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.110029][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.154075][T17447] bridge_slave_0: entered allmulticast mode [ 1160.195629][T17447] bridge_slave_0: entered promiscuous mode [ 1160.229694][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.254031][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.282595][T17447] bridge_slave_1: entered allmulticast mode [ 1160.309636][T17447] bridge_slave_1: entered promiscuous mode [ 1160.323877][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1160.417905][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.533863][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.566879][T17447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.628133][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.664629][T17447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.677265][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1160.713887][ T10] usb 4-1: Product: syz [ 1160.718299][ T10] usb 4-1: SerialNumber: syz [ 1162.383814][ T5841] Bluetooth: hci4: command tx timeout [ 1162.623112][T17447] team0: Port device team_slave_0 added [ 1162.676725][T17447] team0: Port device team_slave_1 added [ 1163.551128][ T10] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1163.604056][T17447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.614475][ T10] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1163.634513][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.705055][T17447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.783947][T17447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.791218][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.819794][ T10] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1163.866452][ T10] usb 4-1: USB disconnect, device number 83 [ 1163.874843][ T10] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1163.923948][T17447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.948916][T17529] wg1 speed is unknown, defaulting to 1000 [ 1164.444100][ T5841] Bluetooth: hci4: command tx timeout [ 1164.446001][T17447] hsr_slave_0: entered promiscuous mode [ 1164.464563][T17538] loop4: detected capacity change from 0 to 512 [ 1164.506564][T17447] hsr_slave_1: entered promiscuous mode [ 1164.554250][T17447] debugfs: 'hsr0' already exists in 'hsr' [ 1164.562133][T17447] Cannot create hsr debugfs directory [ 1164.610401][T17538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.693968][T17538] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1164.892508][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1164.892531][ T30] audit: type=1800 audit(1762549808.240:274): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3014" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1164.960694][T17550] loop3: detected capacity change from 0 to 2048 [ 1165.025203][T17550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.060101][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.473957][ T792] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1165.488268][ T5879] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1165.507968][ T5879] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1165.700840][ T792] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1165.710710][T17561] fido_id[17561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1165.764850][ T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.790286][ T792] usb 6-1: config 0 has no interface number 0 [ 1165.813002][ T792] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1165.863537][ T792] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.939443][ T792] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1165.962680][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.991342][ T792] usb 6-1: Product: syz [ 1166.009771][ T792] usb 6-1: Manufacturer: syz [ 1166.020233][ T792] usb 6-1: SerialNumber: syz [ 1166.041484][ T792] usb 6-1: config 0 descriptor?? [ 1166.141755][T17447] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1166.169909][T17447] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1166.183533][T17571] loop6: detected capacity change from 0 to 1024 [ 1166.199510][T17447] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1166.235317][T17447] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1166.742939][T17580] hfsplus: invalid extended attribute record [ 1167.234830][ T5957] hfsplus: b-tree write err: -5, ino 4 [ 1167.550234][T17586] loop3: detected capacity change from 0 to 1024 [ 1167.642134][T17447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.739830][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.791983][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.799418][ T7843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.889445][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.896968][ T7843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.947127][ T5879] usb 6-1: USB disconnect, device number 2 [ 1170.479107][T17447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.616715][T17447] veth0_vlan: entered promiscuous mode [ 1171.689082][T17447] veth1_vlan: entered promiscuous mode [ 1171.851805][T17447] veth0_macvtap: entered promiscuous mode [ 1171.888138][T17447] veth1_macvtap: entered promiscuous mode [ 1172.009376][T17447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.387440][T17447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.453891][ T7843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.496262][ T7843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.534794][T17651] loop3: detected capacity change from 0 to 16 [ 1173.564287][T17651] erofs (device loop3): mounted with root inode @ nid 36. [ 1173.588017][ T7843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.643852][ T7843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.754487][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1173.884882][T17651] wg1 speed is unknown, defaulting to 1000 [ 1174.045558][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.086689][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.104299][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3049'. [ 1174.274018][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.303756][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.727308][T17671] loop7: detected capacity change from 0 to 1024 [ 1175.735425][ T7714] hfsplus: b-tree write err: -5, ino 4 [ 1176.164641][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1176.694761][T17696] loop4: detected capacity change from 0 to 512 [ 1176.726639][T17696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1176.812152][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1176.827561][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1176.838400][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1176.849938][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1176.860209][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1176.871909][T17696] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3060: bad orphan inode 131083 [ 1176.906021][T17696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.970378][T17696] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3060: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1177.003281][T17696] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem [ 1177.121687][T17704] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.3060: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1177.711840][T17698] wg1 speed is unknown, defaulting to 1000 [ 1177.727618][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.743997][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.795937][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.943887][ T5143] Bluetooth: hci6: command tx timeout [ 1180.985980][T17745] netlink: 203340 bytes leftover after parsing attributes in process `syz.7.3071'. [ 1181.003993][ T5143] Bluetooth: hci6: command tx timeout [ 1181.159636][T17753] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1181.315624][ T2890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.383360][T17698] chnl_net:caif_netlink_parms(): no params data found [ 1182.039150][ T2890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.458204][ T5143] Bluetooth: hci6: command tx timeout [ 1183.952230][ T2890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.068099][T17789] tipc: Failed to remove unknown binding: 66,1,1/0:1625151267/1625151269 [ 1184.168342][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1184.186607][ T2890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.258840][T17789] tipc: Failed to remove unknown binding: 66,1,1/0:1625151267/1625151269 [ 1184.294099][T17789] tipc: Failed to remove unknown binding: 66,1,1/0:1625151267/1625151269 [ 1184.632247][T17801] Bluetooth: MGMT ver 1.23 [ 1184.654538][T17698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.704347][T17698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.733339][T17698] bridge_slave_0: entered allmulticast mode [ 1184.752312][T17698] bridge_slave_0: entered promiscuous mode [ 1184.881434][T17698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.902586][T17698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.954896][T17698] bridge_slave_1: entered allmulticast mode [ 1184.963511][T17698] bridge_slave_1: entered promiscuous mode [ 1185.086980][T17814] loop5: detected capacity change from 0 to 1024 [ 1185.307668][T17814] hfsplus: invalid extended attribute record [ 1185.435907][ T7843] hfsplus: b-tree write err: -5, ino 4 [ 1185.457893][T17698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.473592][T17698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.483787][ T5841] Bluetooth: hci6: command tx timeout [ 1185.514480][T17821] gretap0: entered promiscuous mode [ 1185.542426][T17821] vlan2: entered promiscuous mode [ 1185.942858][T17698] team0: Port device team_slave_0 added [ 1186.032699][ T2890] bridge_slave_1: left allmulticast mode [ 1186.057859][ T2890] bridge_slave_1: left promiscuous mode [ 1186.080536][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.114223][ T2890] bridge_slave_0: left allmulticast mode [ 1186.131216][ T2890] bridge_slave_0: left promiscuous mode [ 1186.151114][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.684436][ T5143] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1186.686474][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 1187.065867][ T2890] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1187.094046][ T2890] gretap1 (unregistering): left allmulticast mode [ 1187.712600][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.727029][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.739148][ T2890] bond0 (unregistering): Released all slaves [ 1187.974472][ T2890] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1187.986106][ T2890] bond1 (unregistering): Released all slaves [ 1188.007047][ T2890] bond2 (unregistering): Released all slaves [ 1188.034778][ T2890] bond3 (unregistering): Released all slaves [ 1188.265835][ T2890] bond4 (unregistering): Released all slaves [ 1188.291488][ T2890] bond5 (unregistering): Released all slaves [ 1188.322646][T17698] team0: Port device team_slave_1 added [ 1188.794578][T17881] loop5: detected capacity change from 0 to 512 [ 1188.832993][T17881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1188.880247][T17698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.891539][T17881] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3102: bad orphan inode 131083 [ 1188.921867][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.960150][T17698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.975095][T17698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.982459][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.985033][T17881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.010720][T17698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.167418][T17881] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.3102: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1189.242296][ T5879] hid-generic 0005:07C0:5508.0019: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1189.274495][T17881] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 1189.501875][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.518438][T17901] loop4: detected capacity change from 0 to 1024 [ 1189.555824][T17901] EXT4-fs: Ignoring removed orlov option [ 1189.561539][T17901] EXT4-fs: Ignoring removed i_version option [ 1189.569557][ T2890] hsr_slave_0: left promiscuous mode [ 1189.605734][ T2890] hsr_slave_1: left promiscuous mode [ 1189.620963][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.641036][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.659778][T17901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.703382][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.725486][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.921773][ T2890] veth1_macvtap: left promiscuous mode [ 1190.030720][ T2890] veth0_macvtap: left promiscuous mode [ 1190.620364][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.282354][ T2890] team_slave_1 (unregistering): left allmulticast mode [ 1192.295275][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 1192.379961][ T2890] team_slave_0 (unregistering): left allmulticast mode [ 1192.388891][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 1193.452321][T17698] hsr_slave_0: entered promiscuous mode [ 1193.459893][T17698] hsr_slave_1: entered promiscuous mode [ 1193.467143][T17698] debugfs: 'hsr0' already exists in 'hsr' [ 1193.473131][T17698] Cannot create hsr debugfs directory [ 1193.698855][T17948] netlink: 'syz.6.3118': attribute type 8 has an invalid length. [ 1193.787555][T17950] loop4: detected capacity change from 0 to 512 [ 1193.854931][T17950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1193.934323][T17950] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3119: bad orphan inode 131083 [ 1194.015833][T17950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.137116][T17950] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3119: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1194.224066][T17950] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem [ 1194.398093][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.102880][T17989] loop7: detected capacity change from 0 to 512 [ 1195.125437][T17989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.139728][T17989] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.141928][T17987] tipc: Started in network mode [ 1195.169257][T17987] tipc: Node identity 86b93b39694f, cluster identity 4711 [ 1195.189690][T17987] tipc: Enabled bearer , priority 0 [ 1195.212828][T17993] syzkaller0: entered promiscuous mode [ 1195.253079][T17993] syzkaller0: entered allmulticast mode [ 1196.188625][T17447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.267172][T17987] tipc: Resetting bearer [ 1196.325805][T17986] tipc: Resetting bearer [ 1196.372803][T17986] tipc: Disabling bearer [ 1196.763422][T18018] loop5: detected capacity change from 0 to 4096 [ 1196.817323][T18018] EXT4-fs: Ignoring removed nobh option [ 1196.852445][T18018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1196.896986][T18018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.956993][T17698] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1196.977152][T18031] loop7: detected capacity change from 0 to 1024 [ 1196.989379][T17698] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1197.017739][T17698] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1197.159285][T17698] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1197.243390][T18037] loop4: detected capacity change from 0 to 1024 [ 1197.334807][T18035] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3136: corrupted inode contents [ 1197.352335][T18040] hfsplus: invalid extended attribute record [ 1197.441904][T18035] EXT4-fs error (device loop5): ext4_dirty_inode:6521: inode #15: comm syz.5.3136: mark_inode_dirty error [ 1197.491374][T18035] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3136: corrupted inode contents [ 1197.587848][T18035] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.3136: mark_inode_dirty error [ 1197.614408][T18035] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3136: corrupted inode contents [ 1198.361027][T18049] loop6: detected capacity change from 0 to 512 [ 1198.455492][T18051] hfsplus: invalid extended attribute record [ 1198.458506][T17775] hfsplus: b-tree write err: -5, ino 4 [ 1198.493846][T18035] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.3136: mark_inode_dirty error [ 1198.572770][T17698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.581175][T18049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.604963][T17775] hfsplus: b-tree write err: -5, ino 4 [ 1198.611800][T18035] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3136: corrupted inode contents [ 1198.621484][T18049] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.671336][T17698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.690256][T18035] EXT4-fs error (device loop5): ext4_truncate:4641: inode #15: comm syz.5.3136: mark_inode_dirty error [ 1198.715565][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.722929][T17775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.763182][T18035] EXT4-fs error (device loop5): ext4_evict_inode:264: comm syz.5.3136: couldn't truncate inode 15 (err -117) [ 1198.975389][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.222809][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.230407][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.687393][ T793] hid-generic 0005:0458:5508.001A: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1199.698288][T17698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1199.717288][T16965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.741574][T18074] loop5: detected capacity change from 0 to 512 [ 1199.809534][T18074] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1199.891660][T18074] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3146: bad orphan inode 131083 [ 1199.979297][T18074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.755779][T18074] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.3146: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1201.841696][T18074] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 1202.100173][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.299999][T17698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.424561][T18112] loop5: detected capacity change from 0 to 512 [ 1202.509348][T18112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.543906][T18112] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.010520][T17698] veth0_vlan: entered promiscuous mode [ 1203.272198][T17698] veth1_vlan: entered promiscuous mode [ 1203.553124][T17698] veth0_macvtap: entered promiscuous mode [ 1203.578889][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.633427][T18133] cgroup: Unknown subsys name 'cpuset' [ 1203.678220][T17698] veth1_macvtap: entered promiscuous mode [ 1203.756117][T18133] loop7: detected capacity change from 0 to 1024 [ 1203.802501][T17698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.850746][T17698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.956892][T18133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.052964][T17775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.106697][T17775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.132312][T17775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.201846][T17775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.296718][T17447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.520903][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.553556][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.663352][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.708076][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.379024][T18177] loop4: detected capacity change from 0 to 512 [ 1205.480727][T18177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.618685][T18177] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.663125][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3174'. [ 1206.626190][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.823481][T18200] loop7: detected capacity change from 0 to 512 [ 1206.938077][T18200] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1207.005984][T18200] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.3179: bad orphan inode 131083 [ 1207.098523][T18200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.207466][T18200] EXT4-fs error (device loop7): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.7.3179: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1207.322934][T18200] EXT4-fs error (device loop7) in ext4_delete_entry:2739: Corrupt filesystem [ 1207.397520][T18222] loop6: detected capacity change from 0 to 4096 [ 1207.639567][T18222] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1207.777143][T18222] UDF-fs: Scanning with blocksize 512 failed [ 1208.305912][T18230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3187'. [ 1208.390956][T18222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.614820][T18237] team_slave_0: entered promiscuous mode [ 1208.621680][T18237] team_slave_1: entered promiscuous mode [ 1208.655056][T18237] vlan2: entered promiscuous mode [ 1208.660477][T18237] team0: entered promiscuous mode [ 1208.711215][ T30] audit: type=1800 audit(1762549852.030:275): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3184" name="file0" dev="loop6" ino=1347 res=0 errno=0 [ 1208.877228][T18244] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 13: comm syz.7.3179: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1209.321324][T17447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.069674][T18279] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1210.251616][T18284] bridge_slave_0: left allmulticast mode [ 1210.273361][T18289] netlink: 'syz.6.3202': attribute type 1 has an invalid length. [ 1210.319843][T18284] bridge_slave_0: left promiscuous mode [ 1210.332975][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.368285][T18284] bridge_slave_1: left allmulticast mode [ 1210.379883][T18284] bridge_slave_1: left promiscuous mode [ 1210.403425][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.441704][T18284] bond0: (slave bond_slave_0): Releasing backup interface [ 1210.478207][T18284] bond0: (slave bond_slave_1): Releasing backup interface [ 1210.531928][T18284] team0: Port device team_slave_0 removed [ 1210.589366][T18284] team0: Port device team_slave_1 removed [ 1210.599570][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.611681][T18284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.622659][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.627193][T18296] loop4: detected capacity change from 0 to 512 [ 1210.631670][T18284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.652918][T18284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1210.716630][T18296] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1210.769213][T18296] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3203: bad orphan inode 131083 [ 1210.803075][T18296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.859323][T18296] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3203: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1210.883347][T18292] bond1: (slave bridge2): making interface the new active one [ 1210.894809][T18292] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1210.936218][T18296] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem [ 1211.814393][T16812] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /51/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1211.923271][T18310] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 1212.157331][T18307] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.3203: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1212.159774][T18310] ip6t_rpfilter: unknown options [ 1212.408148][T16812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.239792][T17775] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.557465][T17775] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.976201][T17775] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.989975][T18374] loop7: detected capacity change from 0 to 512 [ 1217.433816][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1217.449268][T18374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.454000][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.472895][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.492246][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.493895][T18374] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.515335][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1218.560125][T17775] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.624232][T17447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.730170][T18382] wg1 speed is unknown, defaulting to 1000 [ 1219.024825][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3229'. [ 1219.564778][ T5841] Bluetooth: hci3: command tx timeout [ 1219.629597][T17775] bridge_slave_1: left allmulticast mode [ 1219.676767][T18413] loop5: detected capacity change from 0 to 16 [ 1219.678518][T17775] bridge_slave_1: left promiscuous mode [ 1219.702983][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.736230][T18413] erofs (device loop5): mounted with root inode @ nid 36. [ 1219.782074][T17775] bridge_slave_0: left allmulticast mode [ 1219.807450][T17775] bridge_slave_0: left promiscuous mode [ 1219.813537][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.190465][T18436] loop5: detected capacity change from 0 to 512 [ 1220.349295][T18436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.394006][T18429] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3234'. [ 1220.458103][T18436] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.654014][ T5841] Bluetooth: hci3: command tx timeout [ 1221.695372][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.723891][ T5841] Bluetooth: hci3: command tx timeout [ 1224.308206][T17775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.335984][T17775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.377561][T17775] bond0 (unregistering): Released all slaves [ 1224.775536][T18476] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1224.962458][T18489] loop3: detected capacity change from 0 to 16 [ 1224.988644][T18489] erofs (device loop3): mounted with root inode @ nid 36. [ 1225.019817][T18480] team_slave_0: entered promiscuous mode [ 1225.025727][T18480] team_slave_1: entered promiscuous mode [ 1225.052348][T18480] vlan2: entered promiscuous mode [ 1225.064518][T18480] team0: entered promiscuous mode [ 1225.297231][T18492] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1226.420449][ T5841] Bluetooth: hci3: command tx timeout [ 1226.869538][T18496] bridge_slave_0: left allmulticast mode [ 1226.983798][T18496] bridge_slave_0: left promiscuous mode [ 1226.989731][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.072114][T18496] bridge_slave_1: left allmulticast mode [ 1227.110046][T18496] bridge_slave_1: left promiscuous mode [ 1227.129668][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.181242][T18496] bond0: (slave bond_slave_0): Releasing backup interface [ 1227.216047][T18496] bond0: (slave bond_slave_1): Releasing backup interface [ 1227.267983][T18496] team0: Port device team_slave_0 removed [ 1227.305561][T18496] team0: Port device team_slave_1 removed [ 1227.313153][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.332958][T18496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.356137][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.364357][T18496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.375475][T18496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1227.404380][T18382] chnl_net:caif_netlink_parms(): no params data found [ 1228.672393][T17775] hsr_slave_0: left promiscuous mode [ 1228.680510][T17775] hsr_slave_1: left promiscuous mode [ 1228.701241][T17775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.727596][T17775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.747150][T17775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.768220][T17775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.842508][T17775] veth1_macvtap: left promiscuous mode [ 1228.858330][T17775] veth0_macvtap: left promiscuous mode [ 1228.877154][T17775] veth1_vlan: left promiscuous mode [ 1228.897608][T17775] veth0_vlan: left promiscuous mode [ 1229.919555][T18550] loop3: detected capacity change from 0 to 1024 [ 1230.045404][T18550] EXT4-fs: Ignoring removed orlov option [ 1230.561749][T18550] EXT4-fs: Ignoring removed i_version option [ 1230.612089][T18550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.302754][T17698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.494206][T18572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.796763][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3265'. [ 1233.874660][T18598] netlink: 'syz.7.3265': attribute type 4 has an invalid length. [ 1234.056326][T17775] team_slave_1 (unregistering): left promiscuous mode [ 1234.075539][T17775] team0 (unregistering): Port device team_slave_1 removed [ 1234.173261][T17775] team_slave_0 (unregistering): left promiscuous mode [ 1234.185526][T17775] team0 (unregistering): Port device team_slave_0 removed [ 1235.338891][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.353970][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.361293][T18382] bridge_slave_0: entered allmulticast mode [ 1235.386973][T18382] bridge_slave_0: entered promiscuous mode [ 1235.407352][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.423995][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.441901][T18382] bridge_slave_1: entered allmulticast mode [ 1235.461815][T18382] bridge_slave_1: entered promiscuous mode [ 1235.619479][T18382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.727457][T18593] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.733876][T18593] Bluetooth: hci2: command 0x0401 tx timeout [ 1235.782207][T18382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.834734][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1238.556226][T18382] team0: Port device team_slave_0 added [ 1238.781555][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.788103][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.826780][T18382] team0: Port device team_slave_1 added [ 1239.080366][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3273'. [ 1239.130661][T18647] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1239.176997][T18382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.195578][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.302653][T18382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.360292][T18382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.388528][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.483900][T18382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.589431][T18656] loop5: detected capacity change from 0 to 1024 [ 1239.597373][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1239.868429][T18656] hfsplus: invalid extended attribute record [ 1240.001144][ T2890] hfsplus: b-tree write err: -5, ino 4 [ 1240.135726][T18382] hsr_slave_0: entered promiscuous mode [ 1240.142883][T18382] hsr_slave_1: entered promiscuous mode [ 1240.179284][T18382] debugfs: 'hsr0' already exists in 'hsr' [ 1240.210816][T18382] Cannot create hsr debugfs directory [ 1242.422504][T18685] loop6: detected capacity change from 0 to 16 [ 1242.544222][T18685] erofs (device loop6): mounted with root inode @ nid 36. [ 1242.615650][T18691] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1245.713873][T18696] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 1245.912538][T18382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1245.957002][T18382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1246.022129][T18382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1246.074591][T18382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1246.552375][T18382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.648175][T18382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.692420][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.699844][T17775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.759425][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.766777][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.978793][T18382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.073346][T18382] veth0_vlan: entered promiscuous mode [ 1250.150324][T18382] veth1_vlan: entered promiscuous mode [ 1250.258189][T18382] veth0_macvtap: entered promiscuous mode [ 1250.327317][T18382] veth1_macvtap: entered promiscuous mode [ 1250.380034][T18382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.469217][T18382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.542618][ T2890] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.590531][ T2890] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.612421][ T2890] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.641826][ T2890] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.851495][T18809] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 1250.854779][T18805] wg1 speed is unknown, defaulting to 1000 [ 1252.139169][T17775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.184261][T17775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.413963][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.427169][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.206756][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1256.244666][T18847] wg1 speed is unknown, defaulting to 1000 [ 1258.990255][T18889] loop7: detected capacity change from 0 to 4096 [ 1259.003263][T18889] EXT4-fs: Ignoring removed nobh option [ 1259.027373][T18889] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1259.065274][T18889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.634139][T18908] EXT4-fs error (device loop7): ext4_do_update_inode:5636: inode #15: comm syz.7.3349: corrupted inode contents [ 1259.649735][T18908] EXT4-fs error (device loop7): ext4_dirty_inode:6521: inode #15: comm syz.7.3349: mark_inode_dirty error [ 1259.667058][T18908] EXT4-fs error (device loop7): ext4_do_update_inode:5636: inode #15: comm syz.7.3349: corrupted inode contents [ 1259.680809][T18908] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3349: mark_inode_dirty error [ 1259.697448][T18908] EXT4-fs error (device loop7): ext4_do_update_inode:5636: inode #15: comm syz.7.3349: corrupted inode contents [ 1259.711253][T18908] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3349: mark_inode_dirty error [ 1259.723316][T18908] EXT4-fs error (device loop7): ext4_do_update_inode:5636: inode #15: comm syz.7.3349: corrupted inode contents [ 1259.736488][T18908] EXT4-fs error (device loop7): ext4_truncate:4641: inode #15: comm syz.7.3349: mark_inode_dirty error [ 1259.762717][T18908] EXT4-fs error (device loop7): ext4_evict_inode:264: comm syz.7.3349: couldn't truncate inode 15 (err -117) [ 1261.383263][T18926] loop5: detected capacity change from 0 to 1024 [ 1261.415237][T18926] EXT4-fs: Ignoring removed orlov option [ 1261.421121][T18926] EXT4-fs: Ignoring removed i_version option [ 1261.470684][T18926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.483732][T18915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1262.227223][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.373092][T18933] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1263.101540][T18947] loop8: detected capacity change from 0 to 4096 [ 1263.116323][T17447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.160401][T18947] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1263.217081][T18947] UDF-fs: Scanning with blocksize 512 failed [ 1263.275420][T18947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1263.384421][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3371'. [ 1263.487484][ T30] audit: type=1800 audit(1762549906.840:276): pid=18947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3368" name="file0" dev="loop8" ino=1347 res=0 errno=0 [ 1263.512817][T18963] netlink: 'syz.7.3371': attribute type 4 has an invalid length. [ 1263.874280][T18971] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1264.234747][T18980] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 1265.124522][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1265.286301][T19023] netlink: 'syz.6.3394': attribute type 4 has an invalid length. [ 1266.402984][T19054] Bluetooth: MGMT ver 1.23 [ 1266.461902][T19058] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3407'. [ 1266.501869][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3409'. [ 1266.969930][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'. [ 1267.278253][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3421'. [ 1268.126860][T19121] loop5: detected capacity change from 0 to 4096 [ 1268.189008][T19121] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1268.215337][T19121] UDF-fs: Scanning with blocksize 512 failed [ 1268.295580][T19121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1268.328914][T10827] IPVS: starting estimator thread 0... [ 1268.493792][T19133] IPVS: using max 25 ests per chain, 60000 per kthread [ 1269.329733][T19167] trusted_key: syz.6.3450 sent an empty control message without MSG_MORE. [ 1269.382050][T19163] loop5: detected capacity change from 0 to 4096 [ 1269.425205][T19163] EXT4-fs: Ignoring removed nobh option [ 1269.464364][T19163] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1269.526792][T19163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.593401][T19177] loop6: detected capacity change from 0 to 4096 [ 1269.637303][T19177] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1269.684677][T19177] UDF-fs: Scanning with blocksize 512 failed [ 1269.854089][T19177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.978263][T19185] loop8: detected capacity change from 0 to 1024 [ 1269.995967][T19185] EXT4-fs: Ignoring removed orlov option [ 1270.002059][T19185] EXT4-fs: Ignoring removed i_version option [ 1270.106800][T19193] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3448: corrupted inode contents [ 1270.119891][T19193] EXT4-fs error (device loop5): ext4_dirty_inode:6521: inode #15: comm syz.5.3448: mark_inode_dirty error [ 1270.135479][T19193] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3448: corrupted inode contents [ 1270.149342][T19193] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.3448: mark_inode_dirty error [ 1270.166673][T19193] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3448: corrupted inode contents [ 1270.190729][T19185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.194439][T19193] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.3448: mark_inode_dirty error [ 1270.219595][T19193] EXT4-fs error (device loop5): ext4_do_update_inode:5636: inode #15: comm syz.5.3448: corrupted inode contents [ 1270.238643][T19193] EXT4-fs error (device loop5): ext4_truncate:4641: inode #15: comm syz.5.3448: mark_inode_dirty error [ 1270.252150][T19193] EXT4-fs error (device loop5): ext4_evict_inode:264: comm syz.5.3448: couldn't truncate inode 15 (err -117) [ 1270.931874][T18382] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.339943][T19215] vlan2: entered promiscuous mode [ 1271.644993][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1271.712589][T19224] netlink: 'syz.6.3473': attribute type 1 has an invalid length. [ 1271.720906][T19224] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3473'. [ 1272.599983][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.182274][T19261] netlink: 'syz.6.3487': attribute type 1 has an invalid length. [ 1273.202939][T19261] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3487'. [ 1273.830402][T19276] tipc: Enabled bearer , priority 0 [ 1273.859602][T19276] syzkaller0: entered promiscuous mode [ 1273.876105][T19276] syzkaller0: entered allmulticast mode [ 1274.007276][T19275] tipc: Resetting bearer [ 1274.098379][T19275] tipc: Disabling bearer [ 1274.812066][T19313] xt_hashlimit: size too large, truncated to 1048576 [ 1275.274521][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1275.329093][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3512'. [ 1275.675609][T19334] loop6: detected capacity change from 0 to 512 [ 1275.735013][T19334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1275.783880][T19334] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3513: bad orphan inode 131083 [ 1275.870081][T19334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.988458][T19334] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.3513: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1276.094578][T19334] EXT4-fs error (device loop6) in ext4_delete_entry:2739: Corrupt filesystem [ 1277.365555][T16965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.419827][T19357] loop3: detected capacity change from 0 to 1024 [ 1277.848130][T19368] tipc: Started in network mode [ 1277.853421][T19368] tipc: Node identity bab00348be6f, cluster identity 4711 [ 1277.868980][T19368] tipc: Enabled bearer , priority 0 [ 1277.901519][T19368] syzkaller0: entered promiscuous mode [ 1277.914076][T19368] syzkaller0: entered allmulticast mode [ 1277.921558][T19370] hfsplus: invalid extended attribute record [ 1278.170687][T19367] tipc: Resetting bearer [ 1278.313250][T19367] tipc: Disabling bearer [ 1278.910703][T19390] loop8: detected capacity change from 0 to 512 [ 1278.952538][T19390] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1279.041225][T19390] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.3533: bad orphan inode 131083 [ 1279.116917][T19390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.149014][T19390] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.8.3533: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1279.211337][T19390] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 1280.135008][T18382] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.923300][T17239] hfsplus: b-tree write err: -5, ino 4 [ 1281.807055][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 1282.072747][T19447] loop5: detected capacity change from 0 to 512 [ 1282.176994][T19447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.213932][T19447] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.066097][T16956] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.270942][T19459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1285.003824][ T31] INFO: task syz.2.2975:17278 blocked for more than 144 seconds. [ 1285.011667][ T31] Not tainted syzkaller #0 [ 1285.018413][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1285.027562][ T31] task:syz.2.2975 state:D stack:28744 pid:17278 tgid:17276 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 1285.043071][ T31] Call Trace: [ 1285.046822][ T31] [ 1285.049900][ T31] __schedule+0x1848/0x4ec0 [ 1285.063761][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.068798][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.104070][ T31] ? __pfx___schedule+0x10/0x10 [ 1285.109029][ T31] ? schedule+0x91/0x360 [ 1285.138317][ T31] schedule+0x165/0x360 [ 1285.142659][ T31] schedule_preempt_disabled+0x13/0x30 [ 1285.164925][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1285.181147][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1285.193731][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1285.215937][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.227196][ T31] ? filename_create+0x1f8/0x3c0 [ 1285.253870][ T31] ? mnt_get_write_access+0x66/0x280 [ 1285.261839][ T31] down_write_nested+0x1b5/0x200 [ 1285.285370][ T31] ? __pfx_down_write_nested+0x10/0x10 [ 1285.301341][ T31] filename_create+0x1f8/0x3c0 [ 1285.311470][ T31] ? __pfx_filename_create+0x10/0x10 [ 1285.322698][ T31] do_mkdirat+0xa0/0x650 [ 1285.331726][ T31] ? __pfx_do_mkdirat+0x10/0x10 [ 1285.341890][ T31] ? getname_flags+0x1e5/0x540 [ 1285.362142][ T31] __x64_sys_mkdir+0x6c/0x80 [ 1285.372557][ T31] do_syscall_64+0xfa/0xfa0 [ 1285.382419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.402626][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1285.407582][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.417681][ T31] RIP: 0033:0x7f73f838f6c9 [ 1285.422432][ T31] RSP: 002b:00007f73f65f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1285.445022][ T31] RAX: ffffffffffffffda RBX: 00007f73f85e6090 RCX: 00007f73f838f6c9 [ 1285.453233][ T31] RDX: 0000000000000000 RSI: 0000000000000105 RDI: 0000200000000500 [ 1285.491667][ T31] RBP: 00007f73f8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1285.511923][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.522041][ T31] R13: 00007f73f85e6128 R14: 00007f73f85e6090 R15: 00007fff40ba4af8 [ 1285.542333][ T31] [ 1285.552454][ T31] INFO: task syz.2.2975:17279 blocked for more than 145 seconds. [ 1285.573731][ T31] Not tainted syzkaller #0 [ 1285.592032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1285.611738][ T31] task:syz.2.2975 state:D stack:28744 pid:17279 tgid:17276 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 1285.633699][ T31] Call Trace: [ 1285.643754][ T31] [ 1285.646840][ T31] __schedule+0x1848/0x4ec0 [ 1285.661728][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.666808][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.682106][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.687259][ T31] ? __pfx___schedule+0x10/0x10 [ 1285.702614][ T31] ? schedule+0x91/0x360 [ 1285.712748][ T31] schedule+0x165/0x360 [ 1285.722873][ T31] schedule_preempt_disabled+0x13/0x30 [ 1285.732998][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1285.743137][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1285.763403][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1285.769827][ T31] ? __lock_acquire+0xab9/0xd20 [ 1285.783729][ T31] ? do_rmdir+0x1b2/0x550 [ 1285.793768][ T31] ? mnt_get_write_access+0x66/0x280 [ 1285.807455][ T31] down_write_nested+0x1b5/0x200 [ 1285.822794][ T31] ? __pfx_down_write_nested+0x10/0x10 [ 1285.828500][ T31] do_rmdir+0x1b2/0x550 [ 1285.832711][ T31] ? __pfx_do_rmdir+0x10/0x10 [ 1285.843849][ T31] ? strncpy_from_user+0x150/0x2c0 [ 1285.849238][ T31] ? getname_flags+0x1e5/0x540 [ 1285.873774][ T31] __x64_sys_rmdir+0x47/0x50 [ 1285.878649][ T31] do_syscall_64+0xfa/0xfa0 [ 1285.883385][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.900018][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1285.910146][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.923749][ T31] RIP: 0033:0x7f73f838f6c9 [ 1285.928226][ T31] RSP: 002b:00007f73f65d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1285.953739][ T31] RAX: ffffffffffffffda RBX: 00007f73f85e6180 RCX: 00007f73f838f6c9 [ 1285.972279][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1285.982454][ T31] RBP: 00007f73f8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1286.002720][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.022943][ T31] R13: 00007f73f85e6218 R14: 00007f73f85e6180 R15: 00007fff40ba4af8 [ 1286.043527][ T31] [ 1286.053819][ T31] INFO: task syz.2.2975:17280 blocked for more than 145 seconds. [ 1286.061596][ T31] Not tainted syzkaller #0 [ 1286.106817][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1286.131659][ T31] task:syz.2.2975 state:D stack:25808 pid:17280 tgid:17276 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 1286.170919][ T31] Call Trace: [ 1286.182288][ T31] [ 1286.193097][ T31] __schedule+0x1848/0x4ec0 [ 1286.203893][ T31] ? __lock_acquire+0xab9/0xd20 [ 1286.215841][ T31] ? __lock_acquire+0xab9/0xd20 [ 1286.220958][ T31] ? __pfx___schedule+0x10/0x10 [ 1286.243725][ T31] ? schedule+0x91/0x360 [ 1286.248148][ T31] schedule+0x165/0x360 [ 1286.252518][ T31] schedule_preempt_disabled+0x13/0x30 [ 1286.283775][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 1286.289610][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 1286.313911][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1286.320348][ T31] down_read+0x98/0x2e0 [ 1286.333686][ T31] lookup_slow+0x46/0x70 [ 1286.338515][ T31] walk_component+0x2d2/0x400 [ 1286.343320][ T31] ? path_lookupat+0x156/0x430 [ 1286.363715][ T31] path_lookupat+0x163/0x430 [ 1286.368820][ T31] filename_lookup+0x212/0x570 [ 1286.384755][ T31] ? __pfx_filename_lookup+0x10/0x10 [ 1286.390260][ T31] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1286.413696][ T31] ? kmem_cache_alloc_noprof+0x3ce/0x700 [ 1286.419762][ T31] ? getname_kernel+0x146/0x2f0 [ 1286.434945][ T31] ? getname_kernel+0x20e/0x2f0 [ 1286.440335][ T31] kern_path+0x35/0x50 [ 1286.453696][ T31] unix_find_other+0x183/0xad0 [ 1286.458929][ T31] ? __pfx_unix_find_other+0x10/0x10 [ 1286.473685][ T31] ? skb_set_owner_w+0x26c/0x3e0 [ 1286.478825][ T31] ? sock_wmalloc+0xca/0x130 [ 1286.483466][ T31] unix_stream_connect+0x429/0x1010 [ 1286.497310][ T31] p9_fd_create_unix+0x210/0x400 [ 1286.502704][ T31] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 1286.508336][ T31] p9_client_create+0x400/0xc50 [ 1286.513321][ T31] ? __pfx_p9_client_create+0x10/0x10 [ 1286.518947][ T31] v9fs_session_init+0x46/0xdf0 [ 1286.524059][ T31] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1286.529661][ T31] ? v9fs_get_tree+0xa4/0xa60 [ 1286.534729][ T31] v9fs_get_tree+0xb7/0xa60 [ 1286.539371][ T31] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1286.547117][ T31] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1286.552390][ T31] vfs_get_tree+0x92/0x2b0 [ 1286.556895][ T31] do_new_mount+0x302/0xa10 [ 1286.561534][ T31] ? apparmor_capable+0x137/0x1b0 [ 1286.566788][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 1286.572054][ T31] ? ns_capable+0x8a/0xf0 [ 1286.576734][ T31] ? kmem_cache_free+0x19b/0x690 [ 1286.581987][ T31] __se_sys_mount+0x313/0x410 [ 1286.608035][ T31] ? rcu_is_watching+0x15/0xb0 [ 1286.613058][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 1286.633681][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1286.638622][ T31] ? __x64_sys_mount+0x20/0xc0 [ 1286.643442][ T31] do_syscall_64+0xfa/0xfa0 [ 1286.653720][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.670319][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1286.680461][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.690871][ T31] RIP: 0033:0x7f73f838f6c9 [ 1286.700989][ T31] RSP: 002b:00007f73f61b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1286.720055][ T31] RAX: ffffffffffffffda RBX: 00007f73f85e6270 RCX: 00007f73f838f6c9 [ 1286.738405][ T31] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000080 [ 1286.753724][ T31] RBP: 00007f73f8411f91 R08: 0000200000000200 R09: 0000000000000000 [ 1286.771504][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.785726][ T31] R13: 00007f73f85e6308 R14: 00007f73f85e6270 R15: 00007fff40ba4af8 [ 1286.803842][ T31] [ 1286.810976][ T31] [ 1286.810976][ T31] Showing all locks held in the system: [ 1286.833943][ T31] 1 lock held by khungtaskd/31: [ 1286.838859][ T31] #0: ffffffff8df3b720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1286.872855][ T31] 2 locks held by getty/5580: [ 1286.883722][ T31] #0: ffff88814e2dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1286.903904][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1286.923726][ T31] 4 locks held by syz.2.2975/17277: [ 1286.939488][ T31] 2 locks held by syz.2.2975/17278: [ 1286.953711][ T31] #0: ffff888054928420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1286.973700][ T31] #1: ffff88805607a230 (&type->i_mutex_dir_key#12/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 [ 1286.993727][ T31] 2 locks held by syz.2.2975/17279: [ 1287.003891][ T31] #0: ffff888054928420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1287.024086][ T31] #1: ffff88805607a230 (&type->i_mutex_dir_key#12/1){+.+.}-{4:4}, at: do_rmdir+0x1b2/0x550 [ 1287.043720][ T31] 1 lock held by syz.2.2975/17280: [ 1287.049270][ T31] #0: ffff88805607a230 (&type->i_mutex_dir_key#13){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 1287.059813][ T31] 3 locks held by syz.3.3578/19509: [ 1287.065390][ T31] [ 1287.070060][ T31] ============================================= [ 1287.070060][ T31] [ 1287.079420][ T31] NMI backtrace for cpu 1 [ 1287.079439][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1287.079461][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1287.079472][ T31] Call Trace: [ 1287.079479][ T31] [ 1287.079486][ T31] dump_stack_lvl+0x189/0x250 [ 1287.079548][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1287.079573][ T31] ? __pfx__printk+0x10/0x10 [ 1287.079602][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1287.079676][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1287.079696][ T31] ? __pfx__printk+0x10/0x10 [ 1287.079717][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1287.079747][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1287.079766][ T31] watchdog+0xfa9/0xff0 [ 1287.079822][ T31] ? watchdog+0x1f4/0xff0 [ 1287.079851][ T31] kthread+0x711/0x8a0 [ 1287.079880][ T31] ? __pfx_watchdog+0x10/0x10 [ 1287.079903][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.079919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.079939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1287.079959][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.079975][ T31] ret_from_fork+0x599/0xb30 [ 1287.080002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1287.080033][ T31] ? __switch_to_asm+0x39/0x70 [ 1287.080050][ T31] ? __switch_to_asm+0x33/0x70 [ 1287.080064][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.080086][ T31] ret_from_fork_asm+0x1a/0x30 [ 1287.080116][ T31] [ 1287.080153][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1287.232266][ C0] NMI backtrace for cpu 0 [ 1287.232287][ C0] CPU: 0 UID: 0 PID: 2890 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1287.232307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1287.232319][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1287.232373][ C0] RIP: 0010:__dequeue_entity+0x822/0xc60 [ 1287.232396][ C0] Code: eb 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 81 fc 91 00 48 89 5c 24 10 4d 89 3e 4d 85 f6 0f 85 5a 01 00 00 eb 36 <43> 80 3c 26 00 74 08 48 89 df e8 5f fc 91 00 48 89 2b 4d 89 fe 48 [ 1287.232410][ C0] RSP: 0018:ffffc9000b067368 EFLAGS: 00000046 [ 1287.232424][ C0] RAX: ffff888030799f10 RBX: ffff88806ab4e820 RCX: dffffc0000000000 [ 1287.232437][ C0] RDX: 0000000000000001 RSI: ffff888030799f00 RDI: ffff888030799f18 [ 1287.232448][ C0] RBP: 0000000000000000 R08: ffffffff8f7da977 R09: 1ffffffff1efb52e [ 1287.232459][ C0] R10: dffffc0000000000 R11: ffffffff81952160 R12: dffffc0000000000 [ 1287.232472][ C0] R13: ffff88806ab4e811 R14: 1ffff1100d569d04 R15: ffff88806ab4e810 [ 1287.232484][ C0] FS: 0000000000000000(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 1287.232498][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1287.232510][ C0] CR2: 00007f72003b4198 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1287.232526][ C0] Call Trace: [ 1287.232536][ C0] [ 1287.232548][ C0] ? update_load_avg+0x572/0x1880 [ 1287.232570][ C0] set_next_entity+0x100/0x690 [ 1287.232595][ C0] set_next_task_fair+0x62/0x1d0 [ 1287.232613][ C0] __schedule+0x3845/0x4ec0 [ 1287.232647][ C0] ? __pfx___schedule+0x10/0x10 [ 1287.232666][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 1287.232694][ C0] ? smp_call_function_many_cond+0xd33/0x12d0 [ 1287.232714][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1287.232736][ C0] ? preempt_schedule+0xae/0xc0 [ 1287.232756][ C0] preempt_schedule_common+0x83/0xd0 [ 1287.232777][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1287.232809][ C0] preempt_schedule+0xae/0xc0 [ 1287.232828][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1287.232845][ C0] ? perf_event_text_poke+0x13d/0x190 [ 1287.232881][ C0] ? __kvmalloc_node_noprof+0x18d/0x910 [ 1287.232898][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1287.232922][ C0] preempt_schedule_thunk+0x16/0x30 [ 1287.232942][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 1287.232959][ C0] on_each_cpu_cond_mask+0x7a/0x80 [ 1287.232977][ C0] smp_text_poke_batch_finish+0xb44/0x1130 [ 1287.233010][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1287.233036][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1287.233058][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1287.233074][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 1287.233098][ C0] static_key_disable+0x1a/0x20 [ 1287.233119][ C0] toggle_allocation_gate+0x1a1/0x240 [ 1287.233137][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1287.233154][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1287.233174][ C0] ? process_one_work+0x868/0x15d0 [ 1287.233194][ C0] ? process_one_work+0x868/0x15d0 [ 1287.233212][ C0] process_one_work+0x94a/0x15d0 [ 1287.233230][ C0] ? __lock_acquire+0xab9/0xd20 [ 1287.233259][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1287.233282][ C0] ? assign_work+0x3a1/0x410 [ 1287.233303][ C0] worker_thread+0x9b0/0xee0 [ 1287.233334][ C0] kthread+0x711/0x8a0 [ 1287.233350][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1287.233369][ C0] ? __pfx_kthread+0x10/0x10 [ 1287.233384][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.233402][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1287.233422][ C0] ? __pfx_kthread+0x10/0x10 [ 1287.233437][ C0] ret_from_fork+0x599/0xb30 [ 1287.233456][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1287.233479][ C0] ? __switch_to_asm+0x39/0x70 [ 1287.233494][ C0] ? __switch_to_asm+0x33/0x70 [ 1287.233508][ C0] ? __pfx_kthread+0x10/0x10 [ 1287.233522][ C0] ret_from_fork_asm+0x1a/0x30 [ 1287.233546][ C0] [ 1287.726258][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1287.733614][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1287.743206][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1287.753367][ T31] Call Trace: [ 1287.756748][ T31] [ 1287.759790][ T31] dump_stack_lvl+0x99/0x250 [ 1287.764519][ T31] ? __asan_memcpy+0x40/0x70 [ 1287.769237][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1287.774755][ T31] ? __pfx__printk+0x10/0x10 [ 1287.779529][ T31] vpanic+0x237/0x6d0 [ 1287.783842][ T31] ? __pfx_vpanic+0x10/0x10 [ 1287.788726][ T31] ? preempt_schedule+0xae/0xc0 [ 1287.794580][ T31] panic+0xb9/0xc0 [ 1287.798328][ T31] ? __pfx_panic+0x10/0x10 [ 1287.802933][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1287.807984][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1287.813453][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1287.819723][ T31] watchdog+0xfe8/0xff0 [ 1287.824091][ T31] ? watchdog+0x1f4/0xff0 [ 1287.828467][ T31] kthread+0x711/0x8a0 [ 1287.832559][ T31] ? __pfx_watchdog+0x10/0x10 [ 1287.837260][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.841870][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.847187][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1287.852858][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.857562][ T31] ret_from_fork+0x599/0xb30 [ 1287.862327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1287.867690][ T31] ? __switch_to_asm+0x39/0x70 [ 1287.872470][ T31] ? __switch_to_asm+0x33/0x70 [ 1287.878140][ T31] ? __pfx_kthread+0x10/0x10 [ 1287.883106][ T31] ret_from_fork_asm+0x1a/0x30 [ 1287.888084][ T31] [ 1287.891773][ T31] Kernel Offset: disabled [ 1287.896188][ T31] Rebooting in 86400 seconds..