last executing test programs: 3m54.339455045s ago: executing program 3 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3m53.761482847s ago: executing program 3 (id=128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 3m52.975493127s ago: executing program 32 (id=128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 3m32.649683106s ago: executing program 4 (id=217): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) 3m31.817953554s ago: executing program 5 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x40) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7f80, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m31.509462569s ago: executing program 4 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 3m31.23512709s ago: executing program 5 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) 3m30.121600172s ago: executing program 4 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x10000000000ac6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 3m29.833831971s ago: executing program 5 (id=232): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x1, @link_local}, 0xc3471d722124d373) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) 3m29.651747148s ago: executing program 4 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200001, &(0x7f00000001c0)={[{@noinit_itable}, {@nobarrier}]}, 0xff, 0x270, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m29.181413499s ago: executing program 4 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000d0f000/0x1000)=nil, 0x1000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 3m28.82940016s ago: executing program 5 (id=238): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f0000001380)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="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"], 0x1, 0x1a4, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 3m28.325498657s ago: executing program 4 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3m27.457076034s ago: executing program 33 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3m27.451705908s ago: executing program 5 (id=246): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x4810, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUbEQQ3ZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT8xrykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE8YP//83uIKcmNLAkKYQxpikxibWtuXMnBBmfja3BQotySeYQo9yLJ0pYXFAqOrkT0vNtw6JbjO2PXVgO8Nz+DjPmoI+QaPjEgxOCwX/y4CMSWhoKNNYy7TUdsGXIo2/El6rjZ0yGNztmZbBApSlAUSuhPJkwXoSkld46GhqGqUkJzRskkhIciswfMmwdQ/naoEGBqRoU2FgYNjOCItbCLgGY4yCUTAKRsEoGAWjYBSMglEwCkbBKBgRABAAAP//cSSaOg==") socket$packet(0x11, 0x3, 0x300) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xfffffffffffffffe, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 3m25.708661856s ago: executing program 5 (id=255): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="3f2cdd47fdae", 0x6}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$unix(r2, &(0x7f0000000200)=""/178, 0xb2, 0x0, 0x0, 0x0) 3m25.124965582s ago: executing program 34 (id=255): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="3f2cdd47fdae", 0x6}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$unix(r2, &(0x7f0000000200)=""/178, 0xb2, 0x0, 0x0, 0x0) 2m26.84725461s ago: executing program 2 (id=472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10043) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 2m26.400412329s ago: executing program 2 (id=476): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) listen(r0, 0x5) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.801587242s ago: executing program 2 (id=479): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT, @ANYRES8], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x188080, &(0x7f0000000180)={[{@delalloc}, {@orlov}, {@jqfmt_vfsv1}, {@nomblk_io_submit}]}, 0x1, 0x4a6, &(0x7f0000000580)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m21.877363531s ago: executing program 2 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x80) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f0000000140)='./file0\x00', 0xf4, 0x0) 2m20.796174476s ago: executing program 2 (id=490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000002c0)={r3}) 2m18.600233409s ago: executing program 2 (id=495): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZONi2pmyZtQJVqNRIgIhI7lgvmQkAI+VChqhw4W4nTWNmkxXYrt0LU4fXaQ/+AcvAFcULiHqlw4AK33pC5VULi0gvmtGjGs+v1+iXrtvE65fOJZp9n5pnnmd/zm53ZFyvaAP+35i6n+SBF5i6/vFqub6xPtzfWp+9260lOJVlLmkkaSYr/dDqdD5PrSdEbphgod3l/cfbVjz7Z+HhrrVkv1f6Ng/oNqPdbG9i81t02keREXX4GO8a78ZnHK3qRX09yqS5h5E4m6ezw078+2Wvp09qr9+kjiRF4tIqt183Ur8c948mZ+kIv3wd0X3kbRx/hcE4Nud/gOwgAAAB43AzzGfipzWxmtTh7BOEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF8La9u//F/XS6NYnUnR//3+s3pa6fry8cLjdHzyqOAAAAAAAAADgSPyzenxhM5tZzdnu1k5R/c3/xWrlfPX4RN7MchaylCtZzXxWspKlTCUZ7xtubHV+ZWVpaoie1/bsee0h4Z6qy9bnMXcAAAAAAAAA+ML5Rea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHQZGc2CpS3O/bPJ5GM8npJGPlhrXk79364+zBqAMAAACAI/DUZjazmrPd9U6R80merb4DOJ03cy8rWcxK2lnIzep7ga1P/Y2N9en2xvr03XLZPe73/n2oMKoRs/Xdw95Hvljt0cqtt7p9buT1tHMzjapn6WIdT3ePgbjulzEV360NGdnNuixn/l5d7vLuoSa7n0N+mTJeZeRkbmWxytFkHVuZjae7Z2bvM3TIszN4pKk0esGeHzjSwCQ+Vc7P1GU5n9/sl/ORGMzEtb5n37MH5zz52p/+8JPJun58pjScE3XZqR5buzMx3ZeJ54bJxO32vTu3by1fftwysctklYkLvfW5/DA/zuVM5JUsZTFvZT4rWchEflDV5uuTX/Rd8vtk6vqOtVceFslY/QzdOlmHi+nFqu/ZLOZHeT03s5CXqn/XMpVvZSYzme07wxcOPsPVVd/Y56rvfGnP4C99va60kvy2Lve0b8OjUub16b689t9zx6u2/i3bWTo3RJYOeW9sfqWulMf4ZV0eD4OZmOrLxDMHZ+J31W1luX3vztLt+TeGO9y59+pKeR39+ljdUsvny7nyZFVrO58dZdszvT135qtsO9/r19jVdqHXVl2pRXPfK3Wsfg+3e6RrVdtze7ZNV20X+9pavbYrvfdbABx7Z75xZqz1r9bfWh+0ftW63Xr59PdPffvU82M5+eeT32lOnvhq4/nij/kgP9/+/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx6y2+/c2e+3V5YGqh0Op1392k66krzIaHuqmTiH0+UHbpbOuk1dX/O7Ahn8eUnk5HncOSV/3Y6nXpLsc8+v//LsUlUp3YsUjeiyujuScDRuLpy942ry2+/883Fu/OvLby2cG92ZmZ2cnbmpemrtxbbC5Nbj6OOEngUtl/0Rx0JAAAAAAAAAAAAMKyj+O8Eo54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hibu5zmgxSZmrwyWa5vrE+3y6Vb396zmaSRpPhZUnyYXM/WkvG+4Yr9jvP+4uyrH32y8fH2WM3u/o2D+g1nrV4ykeTEVnn/8xrvRl0eqDhoCkVvhmXCLnUTB6P2vwAAAP//pfYHBg==") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x74) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m17.880527999s ago: executing program 35 (id=495): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZONi2pmyZtQJVqNRIgIhI7lgvmQkAI+VChqhw4W4nTWNmkxXYrt0LU4fXaQ/+AcvAFcULiHqlw4AK33pC5VULi0gvmtGjGs+v1+iXrtvE65fOJZp9n5pnnmd/zm53ZFyvaAP+35i6n+SBF5i6/vFqub6xPtzfWp+9260lOJVlLmkkaSYr/dDqdD5PrSdEbphgod3l/cfbVjz7Z+HhrrVkv1f6Ng/oNqPdbG9i81t02keREXX4GO8a78ZnHK3qRX09yqS5h5E4m6ezw078+2Wvp09qr9+kjiRF4tIqt183Ur8c948mZ+kIv3wd0X3kbRx/hcE4Nud/gOwgAAAB43AzzGfipzWxmtTh7BOEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF8La9u//F/XS6NYnUnR//3+s3pa6fry8cLjdHzyqOAAAAAAAAADgSPyzenxhM5tZzdnu1k5R/c3/xWrlfPX4RN7MchaylCtZzXxWspKlTCUZ7xtubHV+ZWVpaoie1/bsee0h4Z6qy9bnMXcAAAAAAAAA+ML5Rea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHQZGc2CpS3O/bPJ5GM8npJGPlhrXk79364+zBqAMAAACAI/DUZjazmrPd9U6R80merb4DOJ03cy8rWcxK2lnIzep7ga1P/Y2N9en2xvr03XLZPe73/n2oMKoRs/Xdw95Hvljt0cqtt7p9buT1tHMzjapn6WIdT3ePgbjulzEV360NGdnNuixn/l5d7vLuoSa7n0N+mTJeZeRkbmWxytFkHVuZjae7Z2bvM3TIszN4pKk0esGeHzjSwCQ+Vc7P1GU5n9/sl/ORGMzEtb5n37MH5zz52p/+8JPJun58pjScE3XZqR5buzMx3ZeJ54bJxO32vTu3by1fftwysctklYkLvfW5/DA/zuVM5JUsZTFvZT4rWchEflDV5uuTX/Rd8vtk6vqOtVceFslY/QzdOlmHi+nFqu/ZLOZHeT03s5CXqn/XMpVvZSYzme07wxcOPsPVVd/Y56rvfGnP4C99va60kvy2Lve0b8OjUub16b689t9zx6u2/i3bWTo3RJYOeW9sfqWulMf4ZV0eD4OZmOrLxDMHZ+J31W1luX3vztLt+TeGO9y59+pKeR39+ljdUsvny7nyZFVrO58dZdszvT135qtsO9/r19jVdqHXVl2pRXPfK3Wsfg+3e6RrVdtze7ZNV20X+9pavbYrvfdbABx7Z75xZqz1r9bfWh+0ftW63Xr59PdPffvU82M5+eeT32lOnvhq4/nij/kgP9/+/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx6y2+/c2e+3V5YGqh0Op1392k66krzIaHuqmTiH0+UHbpbOuk1dX/O7Ahn8eUnk5HncOSV/3Y6nXpLsc8+v//LsUlUp3YsUjeiyujuScDRuLpy942ry2+/883Fu/OvLby2cG92ZmZ2cnbmpemrtxbbC5Nbj6OOEngUtl/0Rx0JAAAAAAAAAAAAMKyj+O8Eo54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hibu5zmgxSZmrwyWa5vrE+3y6Vb396zmaSRpPhZUnyYXM/WkvG+4Yr9jvP+4uyrH32y8fH2WM3u/o2D+g1nrV4ykeTEVnn/8xrvRl0eqDhoCkVvhmXCLnUTB6P2vwAAAP//pfYHBg==") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x74) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m6.269373371s ago: executing program 7 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m5.879599662s ago: executing program 7 (id=832): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.683793461s ago: executing program 7 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x1c) 1m3.713467467s ago: executing program 7 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m2.074772129s ago: executing program 7 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x82) 1m0.405981898s ago: executing program 7 (id=853): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b52, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a008ffea0904c81e010103f70909050803ed0104060902210725"], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 44.534853281s ago: executing program 36 (id=853): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b52, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a008ffea0904c81e010103f70909050803ed0104060902210725"], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 14.84525795s ago: executing program 8 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 12.454539957s ago: executing program 1 (id=1050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 9.681894486s ago: executing program 9 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 8.116387789s ago: executing program 9 (id=1058): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/22, 0x16}, 0x10002) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x4798c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 6.707011293s ago: executing program 8 (id=1060): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$igmp6(0xa, 0x3, 0x2) fchdir(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f00000000c0)=""/44, 0x2c) getdents(r2, &(0x7f0000000040)=""/44, 0x2c) getdents64(r2, 0x0, 0x0) 6.670636319s ago: executing program 1 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 6.613584593s ago: executing program 9 (id=1062): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = socket(0x29, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r2, &(0x7f0000000300)='n\x00', 0x2, 0x800) setregid(0xffffffffffffffff, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x22a, &(0x7f00000005c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 5.250407158s ago: executing program 1 (id=1066): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.089401182s ago: executing program 9 (id=1067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.08708445s ago: executing program 8 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 5.021880292s ago: executing program 0 (id=1070): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r2, 0xb) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x10, 0x3, 0x100000001}) 4.503381347s ago: executing program 1 (id=1071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 4.341356364s ago: executing program 6 (id=1072): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) preadv2(r1, 0x0, 0x0, 0x80, 0x1ff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 4.284408904s ago: executing program 8 (id=1073): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.199911418s ago: executing program 0 (id=1074): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.926639293s ago: executing program 0 (id=1075): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket(0x2a, 0x3, 0xff) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x35, {0x35, 0xa, "054dcc72601f40a3f903adc904847ed5d4208f88220121d97b28e18903145856140724afc18a0d60d687fbaf30b6f85d3be58f"}}, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000480)={0x0, 0xf, 0xde, {0x5, 0xf, 0xde, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x5, 0xc}, @generic={0x94, 0x10, 0x1, "a837787ff65b61db62df7409a99898a08367aec1f975d201e7118d6164b033d794e6ac35c72bd1e3fe32e0f9881c869dc4940da61b54f6213ade58afb246d622654fd68e3b7c9d98dffc1da6619b28660b34246c4ab02691dc4aad0300830d8d386be75a2a8b51b3a8eb55e2d6732fc395e515778501bbf84a4a64d782b13a122021687e99145d588b13edfcb25c45a36a"}, @generic={0x3e, 0x10, 0x4, "f3458789402e1eca658f6bbe59e6b57a81607732e613df3bafa5e23693fc27e4219f58124a7c7cad23045ec586ab5679bf5bfdfee64a39290964c1"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1, 0x6, 0x5, "31a5d16f", "f84ff656"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0x21, 0x8, 0x53, 0x1, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000300)={0x20, 0x14, 0x10, "3c9992f8e3426102dfd17f3273ed3add"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0xb, 0x2, "7485"}, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "40c6"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x1ab}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x4d}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) 3.441640589s ago: executing program 8 (id=1076): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='task\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/uts\x00') 3.254016642s ago: executing program 3 (id=921): syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) 3.251388722s ago: executing program 6 (id=1077): fsopen(0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000200)='net/nfsfs\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 2.905374494s ago: executing program 3 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0xee2, &(0x7f0000000f40)="$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") open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r0, 0x2088002) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) 2.869209996s ago: executing program 0 (id=1079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0xb}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) close_range(r0, r1, 0x0) 2.797181012s ago: executing program 1 (id=1080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0xb8) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x11, 0x148, 0x0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@local, @remote, 0xffffffff, 0x0, 'pimreg\x00', 'veth0_vlan\x00', {}, {}, 0x21, 0x1, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x7, 0x5, 0x0, 0x5, 0x5], 0x5}, {0x1, [0x0, 0x0, 0x2, 0x0, 0x0, 0x6], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) getdents(r2, 0x0, 0x48) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000002280)=ANY=[@ANYRES16=r4, @ANYRES32=r0], 0xfd14) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 2.487166404s ago: executing program 8 (id=1081): socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) epoll_create1(0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x7}, 0x0, 0x0) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 2.476325541s ago: executing program 6 (id=1082): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2.470500113s ago: executing program 0 (id=1083): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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") open(0x0, 0xa1ff, 0x88) open(0x0, 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) truncate(&(0x7f0000000080)='./file1\x00', 0xf60) r0 = open(0x0, 0x64842, 0x86) pwritev2(r0, 0x0, 0x0, 0x7800, 0x0, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) 1.949308557s ago: executing program 6 (id=1084): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 1.9331741s ago: executing program 3 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_io_uring_setup(0x6a26, &(0x7f00000003c0)={0x0, 0x2117, 0x8, 0x3, 0x306}, 0x0, 0x0) 1.900108095s ago: executing program 0 (id=1086): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mlockall(0x3) brk(0x55555ede5ffe) 1.599355077s ago: executing program 6 (id=1087): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$setperm(0x5, 0x0, 0x4010) 1.483799214s ago: executing program 1 (id=1088): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x158) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 1.47221643s ago: executing program 9 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1.085486574s ago: executing program 9 (id=1090): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000140)) 842.15261ms ago: executing program 6 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 0s ago: executing program 3 (id=1092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vice number 5 using dummy_hcd [ 122.694619][ T29] audit: type=1800 audit(1740668182.182:68): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.155" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 122.801389][ T5899] usb 5-1: device descriptor read/64, error -71 [ 122.907649][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.926237][ T5899] usb usb5-port1: attempt power cycle [ 123.310841][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.500206][ T5899] usb 5-1: device descriptor read/8, error -71 [ 123.575488][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.575532][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.575553][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.668116][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.669139][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.884046][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 123.981689][ T6552] loop1: detected capacity change from 0 to 8 [ 124.074083][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.279069][ T5899] usb 5-1: device descriptor read/8, error -71 [ 124.424877][ T5899] usb usb5-port1: unable to enumerate USB device [ 124.436954][ T6559] vivid-000: disconnect [ 124.472553][ T6555] vivid-000: reconnect [ 124.703826][ T6566] loop2: detected capacity change from 0 to 512 [ 124.711351][ T6566] EXT4-fs: Ignoring removed i_version option [ 124.760520][ T6566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.794303][ T6566] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.814954][ T6570] loop4: detected capacity change from 0 to 256 [ 124.833001][ T6570] exfat: Invalid uid '0x00000000ffffffff' [ 124.854095][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.002092][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 125.007283][ T6565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.044173][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 125.076493][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 125.166473][ T5906] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 125.198428][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.220134][ T5906] usb 6-1: Product: syz [ 125.251046][ T5906] usb 6-1: Manufacturer: syz [ 125.255996][ T5906] usb 6-1: SerialNumber: syz [ 125.274948][ T5906] usb 6-1: config 0 descriptor?? [ 125.303780][ T6563] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.323123][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 125.384824][ T5906] hub 6-1:0.0: bad descriptor, ignoring hub [ 125.390824][ T5906] hub 6-1:0.0: probe with driver hub failed with error -5 [ 125.447452][ T5906] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 125.526523][ T6587] loop2: detected capacity change from 0 to 128 [ 125.608068][ T6587] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.678749][ T5906] usb 6-1: USB disconnect, device number 2 [ 125.684730][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 125.721741][ T6587] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.756610][ T6587] ext2 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.900868][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 125.988881][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.618505][ T6628] loop1: detected capacity change from 0 to 256 [ 127.643760][ T6628] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 127.813340][ T6633] process 'syz.0.187' launched './file2' with NULL argv: empty string added [ 127.836757][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 128.027141][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 129.248166][ T6664] loop1: detected capacity change from 0 to 1024 [ 129.269740][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.308774][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.337808][ T6437] bridge_slave_0: entered allmulticast mode [ 129.351732][ T6664] EXT4-fs: Ignoring removed orlov option [ 129.374953][ T6664] EXT4-fs (loop1): Test dummy encryption mode enabled [ 129.401947][ T6664] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 129.419886][ T6437] bridge_slave_0: entered promiscuous mode [ 129.548314][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.590562][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.634276][ T6437] bridge_slave_1: entered allmulticast mode [ 129.641601][ T6437] bridge_slave_1: entered promiscuous mode [ 129.671777][ T6664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.957602][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.023153][ T6673] netlink: 13 bytes leftover after parsing attributes in process `syz.1.190'. [ 130.024576][ T6675] dccp_close: ABORT with 214 bytes unread [ 130.055387][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 130.170483][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.345452][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.362624][ T6437] team0: Port device team_slave_0 added [ 130.440593][ T6437] team0: Port device team_slave_1 added [ 130.754779][ T6688] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 130.762967][ T6688] netlink: 244 bytes leftover after parsing attributes in process `syz.1.199'. [ 130.773421][ T6688] NCSI netlink: No device for ifindex 0 [ 131.276071][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.286521][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.372447][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.415280][ T6661] loop4: detected capacity change from 0 to 32768 [ 131.477701][ T6661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.193 (6661) [ 131.550864][ T6661] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.603531][ T6661] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 131.622767][ T6661] BTRFS info (device loop4): using free-space-tree [ 131.669246][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.712179][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.741941][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.164954][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 132.476766][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.488807][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.689413][ T6661] BTRFS error (device loop4): open_ctree failed: -4 [ 132.708123][ T6437] hsr_slave_0: entered promiscuous mode [ 132.774953][ T6437] hsr_slave_1: entered promiscuous mode [ 132.814744][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.884226][ T6437] Cannot create hsr debugfs directory [ 133.128470][ T6740] syz.0.208 uses obsolete (PF_INET,SOCK_PACKET) [ 134.217436][ T54] Bluetooth: hci2: command 0x040f tx timeout [ 134.425853][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.702070][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 134.778322][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 134.841988][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.992840][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.048497][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.064422][ T5906] usb 2-1: Product: syz [ 135.076126][ T5906] usb 2-1: Manufacturer: syz [ 135.081435][ T5906] usb 2-1: SerialNumber: syz [ 135.098481][ T5906] usb 2-1: config 0 descriptor?? [ 135.124600][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 135.179918][ T5906] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 135.557152][ T6437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.567231][ T6773] loop4: detected capacity change from 0 to 2048 [ 135.610422][ T6437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.650972][ T6773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.708262][ T6437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.724218][ T6773] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.741840][ T5906] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 135.773511][ T5906] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 135.783487][ T6437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.897117][ T6787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.993595][ T6770] block nbd4: shutting down sockets [ 136.200788][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.262035][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.326796][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.387579][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.389356][ T5906] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 136.394802][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.408730][ T6799] loop0: detected capacity change from 0 to 256 [ 136.419455][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.426641][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.497678][ T6799] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 136.608067][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.705299][ T5906] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 136.724357][ T5906] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 136.750417][ T5906] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 136.792185][ T5906] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 136.900790][ T5906] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 137.101463][ T5906] usb 2-1: USB disconnect, device number 3 [ 137.873028][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.270005][ T6831] veth1: entered promiscuous mode [ 138.271128][ T6837] loop4: detected capacity change from 0 to 128 [ 138.289799][ T6837] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 138.328818][ T6837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 138.407602][ T6843] batadv_slave_1: entered promiscuous mode [ 138.482486][ T6831] lo: entered promiscuous mode [ 138.537615][ T6829] lo: left promiscuous mode [ 138.556480][ T5837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.567241][ T6829] batadv_slave_1: left promiscuous mode [ 138.634286][ T6829] veth1: left promiscuous mode [ 139.072639][ T6864] loop5: detected capacity change from 0 to 16 [ 139.108659][ T6437] veth0_vlan: entered promiscuous mode [ 139.316356][ T6437] veth1_vlan: entered promiscuous mode [ 139.371662][ T6864] erofs (device loop5): mounted with root inode @ nid 36. [ 139.740046][ T6873] loop0: detected capacity change from 0 to 8 [ 139.759089][ T3505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.227496][ T3505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.444370][ T6878] vivid-004: disconnect [ 140.453104][ T6876] vivid-004: reconnect [ 140.633409][ T3505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.741987][ T6437] veth0_macvtap: entered promiscuous mode [ 140.797060][ T6437] veth1_macvtap: entered promiscuous mode [ 141.163014][ T3505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.362562][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.407686][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.419276][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.419915][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.443985][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.454743][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.465883][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.473695][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.481430][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.538243][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.617409][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.704031][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.753996][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.794013][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.844294][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.882788][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.913337][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.981212][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.061088][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.101961][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.120570][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.141777][ T6905] loop2: detected capacity change from 0 to 512 [ 142.148472][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.163975][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.212407][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.234138][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.244673][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.256212][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.489101][ T6905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.518218][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.550532][ T6437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.574228][ T6905] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.621332][ T6437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.660794][ T6437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.682125][ T6437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.310296][ T6927] loop1: detected capacity change from 0 to 2048 [ 143.341817][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.432213][ T3505] bridge_slave_1: left allmulticast mode [ 143.452211][ T3505] bridge_slave_1: left promiscuous mode [ 143.484161][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.505475][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.576310][ T5143] Bluetooth: hci3: command tx timeout [ 143.598436][ T29] audit: type=1800 audit(1740668203.092:69): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 143.654417][ T29] audit: type=1800 audit(1740668203.092:70): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 143.663550][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.690982][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.705337][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.711669][ T6936] loop0: detected capacity change from 0 to 1024 [ 143.741915][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.750815][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.758840][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.842577][ T3505] bridge_slave_0: left allmulticast mode [ 143.908187][ T3505] bridge_slave_0: left promiscuous mode [ 143.924457][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.990476][ T6936] hfsplus: request for non-existent node 1280 in B*Tree [ 144.044070][ T6936] hfsplus: request for non-existent node 1280 in B*Tree [ 144.197336][ T29] audit: type=1804 audit(1740668203.682:71): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.262" name="/newroot/54/file0" dev="tmpfs" ino=336 res=1 errno=0 [ 144.354881][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.575191][ T6946] loop0: detected capacity change from 0 to 512 [ 144.686845][ T6946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.762317][ T6946] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.832047][ T6946] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.265: corrupted inode contents [ 144.873948][ T6946] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.265: mark_inode_dirty error [ 144.890554][ T6946] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.265: corrupted inode contents [ 144.920212][ T6946] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.265: mark_inode_dirty error [ 144.991333][ T29] audit: type=1400 audit(1740668204.482:72): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6945 comm="syz.0.265" [ 145.068232][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.314510][ T6960] loop2: detected capacity change from 0 to 256 [ 145.387465][ T6960] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 145.671948][ T5143] Bluetooth: hci3: command tx timeout [ 145.813128][ T6964] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 145.826603][ T5143] Bluetooth: hci5: command tx timeout [ 146.454615][ T6975] loop2: detected capacity change from 0 to 64 [ 146.575279][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.600093][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.640345][ T3505] bond0 (unregistering): Released all slaves [ 146.864990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.893339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.061858][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.082768][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.753665][ T5143] Bluetooth: hci3: command tx timeout [ 147.895448][ T5143] Bluetooth: hci5: command tx timeout [ 148.675723][ T6994] loop0: detected capacity change from 0 to 65536 [ 148.776925][ T6994] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 149.350295][ T6994] XFS (loop0): Ending clean mount [ 149.371563][ T6994] XFS (loop0): Quotacheck needed: Please wait. [ 149.484489][ T6994] XFS (loop0): Quotacheck: Done. [ 149.725812][ T5839] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 149.816748][ T5143] Bluetooth: hci3: command tx timeout [ 149.993761][ T5143] Bluetooth: hci5: command tx timeout [ 149.996972][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.074751][ T3505] hsr_slave_0: left promiscuous mode [ 150.105734][ T5143] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 150.113445][ T5143] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 150.124362][ T3505] hsr_slave_1: left promiscuous mode [ 150.171285][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.194025][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.225480][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.232951][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.245286][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 150.289707][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 150.328807][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.349540][ T5906] usb 2-1: config 0 descriptor?? [ 150.392788][ T7030] loop6: detected capacity change from 0 to 512 [ 150.396995][ T5906] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 150.424739][ T3505] veth1_macvtap: left promiscuous mode [ 150.430457][ T3505] veth0_macvtap: left promiscuous mode [ 150.436736][ T3505] veth1_vlan: left promiscuous mode [ 150.442432][ T3505] veth0_vlan: left promiscuous mode [ 150.451938][ T7030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.475774][ T7030] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.803514][ T6437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.120993][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.058771][ T5143] Bluetooth: hci5: command tx timeout [ 152.478736][ T5906] gspca_sonixj: reg_r err -71 [ 152.484415][ T5906] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 152.619243][ T5906] usb 2-1: USB disconnect, device number 4 [ 152.849555][ T7056] capability: warning: `syz.2.291' uses 32-bit capabilities (legacy support in use) [ 152.947057][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 153.055563][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 154.094034][ T5899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.152864][ T5143] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 154.162258][ T5143] Bluetooth: hci0: Injecting HCI hardware error event [ 154.172101][ T5143] Bluetooth: hci0: hardware error 0x00 [ 154.204666][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 154.264052][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 154.273653][ T5899] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.282572][ T5899] usb 2-1: config 0 has no interface number 0 [ 154.291944][ T5899] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.302201][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.315639][ T5899] usb 2-1: Product: syz [ 154.319851][ T5899] usb 2-1: Manufacturer: syz [ 154.325951][ T5899] usb 2-1: SerialNumber: syz [ 154.344657][ T5899] usb 2-1: config 0 descriptor?? [ 154.355980][ T5899] smsc95xx v2.0.0 [ 154.833186][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 154.994167][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.297174][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.309280][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.321218][ T7093] loop2: detected capacity change from 0 to 128 [ 155.324903][ T6888] bridge_slave_0: entered allmulticast mode [ 155.340263][ T7093] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.345617][ T6888] bridge_slave_0: entered promiscuous mode [ 155.368521][ T7093] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.418092][ T7093] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 155.448411][ T7093] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 155.474402][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.497701][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.511608][ T6888] bridge_slave_1: entered allmulticast mode [ 155.519184][ T6888] bridge_slave_1: entered promiscuous mode [ 155.558955][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.630006][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.656867][ T6933] chnl_net:caif_netlink_parms(): no params data found [ 155.716695][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.945893][ T6888] team0: Port device team_slave_0 added [ 155.953260][ T5899] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 155.965093][ T5899] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 155.993694][ T5899] usb 2-1: USB disconnect, device number 5 [ 156.007223][ T6888] team0: Port device team_slave_1 added [ 156.214397][ T5143] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 156.500534][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.527742][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.622063][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.658516][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.684035][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.705726][ T6933] bridge_slave_0: entered allmulticast mode [ 156.718140][ T29] audit: type=1800 audit(1740668216.212:73): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.307" name="bus" dev="overlay" ino=58 res=0 errno=0 [ 156.745118][ T6933] bridge_slave_0: entered promiscuous mode [ 156.769118][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.797277][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.814236][ T6933] bridge_slave_1: entered allmulticast mode [ 156.842536][ T6933] bridge_slave_1: entered promiscuous mode [ 157.008149][ T3505] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.037696][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.310'. [ 157.111608][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.123930][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.174641][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.293381][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 157.301028][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 157.313007][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 157.321938][ T7099] ceph: No mds server is up or the cluster is laggy [ 157.329232][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 157.532972][ T3505] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.578199][ T29] audit: type=1800 audit(1740668217.072:74): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.323" name="bus" dev="tmpfs" ino=333 res=0 errno=0 [ 157.624784][ T7143] loop1: detected capacity change from 0 to 512 [ 157.701117][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.747774][ T7143] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.787700][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.014004][ T3505] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.091518][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.511387][ T3505] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.641414][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.937307][ T7174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.208840][ T6888] hsr_slave_0: entered promiscuous mode [ 159.237780][ T6888] hsr_slave_1: entered promiscuous mode [ 159.276262][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.302853][ T6888] Cannot create hsr debugfs directory [ 159.615454][ T6933] team0: Port device team_slave_0 added [ 160.089033][ T7180] vlan2: entered promiscuous mode [ 160.144130][ T7180] syz_tun: entered promiscuous mode [ 160.166486][ T7180] syz_tun: left promiscuous mode [ 160.274530][ T7187] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.322'. [ 160.369606][ T6933] team0: Port device team_slave_1 added [ 160.606008][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.660511][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.025879][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 161.394907][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.473553][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.505168][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.531112][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.562137][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.678902][ T51] libceph: connect (1)[c::]:6789 error -101 [ 161.685466][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 161.705320][ T7214] loop6: detected capacity change from 0 to 512 [ 161.963236][ T25] libceph: connect (1)[c::]:6789 error -101 [ 161.971858][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 161.973173][ T7210] ceph: No mds server is up or the cluster is laggy [ 162.388433][ T7223] loop1: detected capacity change from 0 to 512 [ 162.399592][ T7214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.434124][ T7214] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.573234][ T7223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.643760][ T7223] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.710298][ T6933] hsr_slave_0: entered promiscuous mode [ 162.737879][ T29] audit: type=1800 audit(1740668222.232:75): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.751640][ T6933] hsr_slave_1: entered promiscuous mode [ 162.798676][ T6933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.815979][ T6933] Cannot create hsr debugfs directory [ 162.822353][ T3505] bridge_slave_1: left allmulticast mode [ 162.832745][ T3505] bridge_slave_1: left promiscuous mode [ 162.845517][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.896823][ T3505] bridge_slave_0: left allmulticast mode [ 162.902543][ T3505] bridge_slave_0: left promiscuous mode [ 162.918771][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.005888][ T6437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.084639][ T51] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.269313][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 163.294012][ T51] usb 2-1: config 4 has an invalid interface number: 52 but max is 1 [ 163.302189][ T51] usb 2-1: config 4 has an invalid interface number: 52 but max is 1 [ 163.332862][ T51] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 163.342312][ T51] usb 2-1: config 4 has no interface number 0 [ 163.375459][ T51] usb 2-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 163.386954][ T51] usb 2-1: config 4 interface 52 has no altsetting 0 [ 163.399671][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 163.415170][ T51] usb 2-1: config 4 interface 52 has no altsetting 1 [ 163.464235][ T51] usb 2-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 163.473455][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.523939][ T51] usb 2-1: Product: syz [ 163.528213][ T51] usb 2-1: Manufacturer: syz [ 163.532833][ T51] usb 2-1: SerialNumber: syz [ 163.560257][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.604099][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.634075][ T5899] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 163.652826][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.703955][ T5899] usb 7-1: config 0 descriptor?? [ 163.796354][ T51] asix 2-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.818703][ T51] asix 2-1:4.52: probe with driver asix failed with error -71 [ 163.855548][ T51] usb 2-1: USB disconnect, device number 6 [ 164.081591][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.108065][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.121042][ T3505] bond0 (unregistering): Released all slaves [ 164.142612][ T5899] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x1 [ 164.162584][ T5899] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 164.244317][ T5899] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 164.311103][ T5899] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x1 [ 164.339392][ T5899] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 164.530080][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.070666][ T5899] usb 7-1: USB disconnect, device number 2 [ 165.112264][ T5899] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 165.547662][ T29] audit: type=1326 audit(1740668225.032:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.656200][ T29] audit: type=1326 audit(1740668225.032:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.725377][ T3505] hsr_slave_0: left promiscuous mode [ 165.739778][ T3505] hsr_slave_1: left promiscuous mode [ 165.750165][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.758060][ T29] audit: type=1326 audit(1740668225.072:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.783076][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.790463][ T29] audit: type=1326 audit(1740668225.072:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.790517][ T29] audit: type=1326 audit(1740668225.072:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.790562][ T29] audit: type=1326 audit(1740668225.072:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.790606][ T29] audit: type=1326 audit(1740668225.072:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.790650][ T29] audit: type=1326 audit(1740668225.072:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.790806][ T29] audit: type=1326 audit(1740668225.072:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.6.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5618d169 code=0x7ffc0000 [ 165.926375][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.956826][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.033303][ T3505] veth1_macvtap: left promiscuous mode [ 166.040347][ T3505] veth0_macvtap: left promiscuous mode [ 166.046882][ T3505] veth1_vlan: left promiscuous mode [ 166.052320][ T3505] veth0_vlan: left promiscuous mode [ 166.919612][ T7297] loop1: detected capacity change from 0 to 2048 [ 167.019352][ T7297] loop1: p1 < > p2 p3 p4 < p5 > [ 167.034118][ T7297] loop1: p2 size 458752 extends beyond EOD, truncated [ 167.046650][ T7297] loop1: p3 start 4284289 is beyond EOD, truncated [ 167.087706][ T7297] loop1: p5 size 458752 extends beyond EOD, truncated [ 167.926811][ T7308] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 167.986408][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 168.011609][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 168.159810][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 170.254975][ T7334] syz.1.366: attempt to access beyond end of device [ 170.254975][ T7334] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 170.271269][ T7334] syz.1.366: attempt to access beyond end of device [ 170.271269][ T7334] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 170.326246][ T7333] nbd1: detected capacity change from 0 to 67108884 [ 170.326304][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 170.401486][ T7334] block nbd1: Send control failed (result -89) [ 170.448426][ T7334] block nbd1: Request send failed, requeueing [ 170.494849][ T5143] block nbd1: Receive control failed (result -32) [ 170.512242][ T1064] block nbd1: Dead connection, failed to find a fallback [ 170.519695][ T1064] block nbd1: shutting down sockets [ 170.526247][ T1064] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.540024][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 170.573226][ T7334] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.675670][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 170.802185][ T7334] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.873186][ T7265] netlink: 'syz.2.349': attribute type 12 has an invalid length. [ 170.916260][ T7308] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 170.938061][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 170.995970][ T7334] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.034660][ T7334] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.074267][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 171.137967][ T7334] I/O error, dev nbd1, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.161050][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 171.237407][ T6888] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.254465][ T7334] I/O error, dev nbd1, sector 67107856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.322092][ T6888] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.330501][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 171.365148][ T6888] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.410599][ T7334] I/O error, dev nbd1, sector 67108876 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.444641][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 171.483946][ T6888] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.504383][ T7334] I/O error, dev nbd1, sector 67107852 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.533808][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 171.562232][ T7334] I/O error, dev nbd1, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.576324][ T7343] veth0_to_bond: entered promiscuous mode [ 171.592028][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 171.609361][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 171.647181][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 171.678978][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 171.708586][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 171.760940][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 171.834493][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 171.860908][ T7345] veth0_to_bond (unregistering): left promiscuous mode [ 171.893134][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 172.045507][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 172.061399][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 172.112162][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 172.126916][ T6223] udevd[6223]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 172.139594][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 172.156518][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 172.176388][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 172.209372][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.241650][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 172.255043][ T7345] bond0: (slave bond_slave_0): Releasing backup interface [ 172.265626][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.273625][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.316062][ T7354] loop6: detected capacity change from 0 to 128 [ 172.345564][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 172.355123][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.365925][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.375493][ T7354] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.388518][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.396586][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.404935][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.414884][ T6205] ldm_validate_partition_table(): Disk read failed. [ 172.421522][ T7354] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.421970][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.440428][ T6205] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.448927][ T6205] Dev nbd1: unable to read RDB block 0 [ 172.457353][ T6205] nbd1: unable to read partition table [ 172.468591][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 172.475435][ T6205] ldm_validate_partition_table(): Disk read failed. [ 172.492602][ T6205] Dev nbd1: unable to read RDB block 0 [ 172.500675][ T6205] nbd1: unable to read partition table [ 172.514554][ T6933] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 172.533229][ T7354] syz.6.370 (pid 7354) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 172.546130][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 172.565933][ T6223] ldm_validate_partition_table(): Disk read failed. [ 172.584037][ T6223] Dev nbd1: unable to read RDB block 0 [ 172.595187][ T6223] nbd1: unable to read partition table [ 172.607905][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 172.625060][ T7359] block device autoloading is deprecated and will be removed. [ 172.678516][ T6933] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 172.689695][ T6223] ldm_validate_partition_table(): Disk read failed. [ 172.737387][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 172.759043][ T6223] Dev nbd1: unable to read RDB block 0 [ 172.785216][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 172.811859][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 172.842888][ T6223] nbd1: unable to read partition table [ 172.876157][ T6933] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 172.924302][ T7334] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 172.976182][ T6933] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 173.003939][ T7334] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 173.032291][ T6437] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.158206][ T3505] IPVS: stop unused estimator thread 0... [ 173.428564][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.531393][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.849215][ T7380] netlink: 372 bytes leftover after parsing attributes in process `syz.1.376'. [ 174.218123][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.225375][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.399889][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.407134][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.516551][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.570653][ T6888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.593334][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.715140][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 174.729202][ T6933] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.773620][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.784232][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.877173][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.884430][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.893993][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 174.930955][ T25] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.967482][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.010674][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.075719][ T25] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.117247][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.143586][ T25] usb 7-1: Product: syz [ 175.156903][ T25] usb 7-1: Manufacturer: syz [ 175.196920][ T25] usb 7-1: SerialNumber: syz [ 175.931293][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.077200][ T25] usb 7-1: 0:2 : does not exist [ 176.301430][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 176.446615][ T7437] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.456164][ T7437] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.465350][ T7437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.474301][ T7437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.503148][ T7437] vxlan0: entered promiscuous mode [ 176.549209][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.707653][ T25] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 176.797605][ T25] usb 7-1: USB disconnect, device number 3 [ 176.833213][ T6888] veth0_vlan: entered promiscuous mode [ 176.925694][ T6888] veth1_vlan: entered promiscuous mode [ 177.047717][ T6888] veth0_macvtap: entered promiscuous mode [ 177.087528][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.360122][ T6888] veth1_macvtap: entered promiscuous mode [ 177.491809][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.616192][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.638542][ T7464] loop6: detected capacity change from 0 to 512 [ 177.771804][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.801778][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.847658][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.900663][ T7464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.933412][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.964460][ T7464] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.991168][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.062214][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.118063][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.187678][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.233282][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.288742][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.322723][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.362643][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.437409][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.461041][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.489998][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.519206][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.520806][ T6437] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.727853][ T6888] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.832741][ T6888] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.872145][ T6888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.879298][ T7473] loop7: detected capacity change from 0 to 16384 [ 178.913991][ T6888] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.027468][ T7474] blk_print_req_error: 87 callbacks suppressed [ 179.027495][ T7474] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 179.073812][ T6933] veth0_vlan: entered promiscuous mode [ 179.101712][ T7474] buffer_io_error: 56 callbacks suppressed [ 179.101737][ T7474] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 179.146259][ T7474] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 179.190454][ T7474] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 179.299839][ T7474] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 179.324909][ T7474] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 179.396854][ T7474] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 179.462140][ T7474] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 179.496537][ T7474] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 179.516344][ T7474] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 179.530769][ T7474] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 179.651217][ T6933] veth1_vlan: entered promiscuous mode [ 179.669791][ T7489] loop1: detected capacity change from 0 to 512 [ 179.708162][ T7489] EXT4-fs: Ignoring removed i_version option [ 179.752917][ T7489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.903084][ T7489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 179.978351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.982158][ T7489] ext4 filesystem being mounted at /76/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.987562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.199818][ T6933] veth0_macvtap: entered promiscuous mode [ 180.262952][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.284627][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 180.293611][ T6933] veth1_macvtap: entered promiscuous mode [ 180.319250][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.505414][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.583950][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.646233][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.704025][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.765711][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.836168][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.896904][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.925550][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.956548][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.000713][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.045355][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.162689][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.197512][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.223977][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.252420][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.281554][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.320083][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.336152][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.354875][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.371793][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.384074][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.429423][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.475282][ T6933] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.491584][ T6933] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.545930][ T6933] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.564709][ T6933] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.594100][ T7500] ceph: No mds server is up or the cluster is laggy [ 181.602110][ T9] libceph: connect (1)[c::]:6789 error -101 [ 181.627246][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 181.919210][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.094587][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.661743][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.706176][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.487089][ T7547] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 184.191254][ T7558] loop1: detected capacity change from 0 to 1024 [ 184.288263][ T7558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.658988][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.926934][ T5903] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 185.124616][ T5903] usb 9-1: Using ep0 maxpacket: 16 [ 185.152712][ T5903] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 185.225227][ T5903] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.297716][ T5903] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.367933][ T5903] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.410575][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.447544][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 185.494091][ T5903] usb 9-1: Product: syz [ 185.528386][ T5903] usb 9-1: Manufacturer: syz [ 185.561161][ T5903] usb 9-1: SerialNumber: syz [ 185.624496][ T54] Bluetooth: hci6: sending frame failed (-49) [ 185.632239][ T5143] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 185.704150][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.907334][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 185.995926][ T5915] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.043114][ T5903] usb 9-1: 0:2 : does not exist [ 186.045466][ T5915] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.168410][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.203991][ T5915] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 186.213586][ T5915] usb 3-1: Product: syz [ 186.294328][ T5915] usb 3-1: Manufacturer: syz [ 186.927174][ T5915] hub 3-1:4.0: USB hub found [ 187.158779][ T5915] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 187.256841][ T5915] usb 3-1: USB disconnect, device number 2 [ 187.523399][ T7618] loop6: detected capacity change from 0 to 128 [ 187.570135][ T7618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.591531][ T7618] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.623498][ T7616] [ 188.025050][ T5903] usb 9-1: USB disconnect, device number 2 [ 188.029688][ T6437] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.415224][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.489218][ T7671] loop2: detected capacity change from 0 to 512 [ 190.567866][ T7671] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.626500][ T7671] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 190.745680][ T7671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.811516][ T7671] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.442: bad orphan inode 131083 [ 190.888892][ T7671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.250585][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.723174][ T7704] warning: `syz.0.450' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.777270][ T5902] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 193.911327][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.917969][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477400][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.555136][ T5902] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.614718][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.645362][ T5902] usb 7-1: config 0 descriptor?? [ 194.677613][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 195.116018][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 195.171220][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 195.202646][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 195.265806][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 195.303719][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 195.369684][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 195.385446][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 195.670041][ T5902] pwc: recv_control_msg error -71 req 04 val 1500 [ 195.684794][ T5902] pwc: recv_control_msg error -71 req 02 val 2500 [ 195.696826][ T5902] pwc: recv_control_msg error -71 req 02 val 2400 [ 195.734215][ T5902] pwc: recv_control_msg error -71 req 02 val 2600 [ 195.753635][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 195.884697][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 195.914135][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 195.945631][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 196.032702][ T5902] pwc: Registered as video103. [ 196.095422][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 196.194163][ T5902] usb 7-1: USB disconnect, device number 4 [ 196.295236][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 196.573970][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 196.592663][ T25] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.637569][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.681945][ T25] usb 9-1: config 0 descriptor?? [ 196.966792][ T25] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 198.317109][ T8] libceph: connect (1)[c::]:6789 error -101 [ 198.323257][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 198.370984][ T7721] ceph: No mds server is up or the cluster is laggy [ 198.522224][ T7768] loop6: detected capacity change from 0 to 32768 [ 198.651793][ T7768] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.986821][ T25] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.094690][ T25] asix 9-1:0.0: probe with driver asix failed with error -71 [ 199.284947][ T25] usb 9-1: USB disconnect, device number 3 [ 199.705432][ T7768] XFS (loop6): Ending clean mount [ 199.734973][ T7768] XFS (loop6): Quotacheck needed: Please wait. [ 199.996538][ T7768] XFS (loop6): Quotacheck: Done. [ 200.781281][ T7828] loop1: detected capacity change from 0 to 1024 [ 200.791536][ T6437] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.192725][ T7741] hfsplus: b-tree write err: -5, ino 4 [ 201.983945][ T7856] loop1: detected capacity change from 0 to 40427 [ 202.011365][ T7856] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 202.018589][ T7856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 202.028107][ T7856] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1fffff [ 202.036783][ T7856] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 202.047187][ T7856] F2FS-fs (loop1): invalid crc value [ 202.057684][ T7856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.147721][ T7856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 202.155549][ T7856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.870898][ T5835] syz-executor: attempt to access beyond end of device [ 202.870898][ T5835] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.937267][ T5835] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 203.041120][ T7872] loop2: detected capacity change from 0 to 16 [ 203.084831][ T7872] erofs: Unknown parameter '01777777777777777777777ÿ' [ 203.158761][ T7872] loop2: detected capacity change from 0 to 512 [ 203.738106][ T7886] loop7: detected capacity change from 0 to 8 [ 203.746832][ T7886] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 205.507871][ T7887] loop6: detected capacity change from 0 to 8 [ 205.656386][ T7887] SQUASHFS error: xz decompression failed, data probably corrupt [ 205.689655][ T7887] SQUASHFS error: Failed to read block 0x108: -5 [ 205.752779][ T7887] SQUASHFS error: Unable to read metadata cache entry [106] [ 205.832866][ T7887] SQUASHFS error: Unable to read inode 0x0 [ 206.510972][ T7898] overlayfs: failed to clone upperpath [ 209.024389][ T7921] overlayfs: failed to clone upperpath [ 209.749247][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.775347][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.121089][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 210.137377][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.137432][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.434471][ T7939] siw: device registration error -23 [ 210.670181][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.759165][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.110323][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.125324][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.138416][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.140161][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.168311][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.190007][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.205194][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.250297][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.718860][ T1093] bridge_slave_1: left allmulticast mode [ 211.744588][ T1093] bridge_slave_1: left promiscuous mode [ 211.752461][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.879769][ T1093] bridge_slave_0: left allmulticast mode [ 211.889173][ T1093] bridge_slave_0: left promiscuous mode [ 211.923447][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.279050][ T5143] Bluetooth: hci0: command tx timeout [ 214.164856][ T5902] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 214.248519][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.300863][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.319996][ T1093] bond0 (unregistering): Released all slaves [ 214.326556][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 214.358640][ T5902] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 214.369158][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.442234][ T5902] usb 7-1: Product: syz [ 214.447419][ T5902] usb 7-1: Manufacturer: syz [ 214.452043][ T5902] usb 7-1: SerialNumber: syz [ 214.498511][ T5902] usb 7-1: config 0 descriptor?? [ 214.709533][ T5902] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.005057][ T8034] netlink: 'syz.7.521': attribute type 4 has an invalid length. [ 215.041175][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 215.245763][ T1093] hsr_slave_0: left promiscuous mode [ 215.251295][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 215.251314][ T29] audit: type=1326 audit(1740668274.742:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.0.523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x0 [ 215.279733][ T1093] hsr_slave_1: left promiscuous mode [ 215.288893][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.309324][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.337252][ T5143] Bluetooth: hci0: command tx timeout [ 215.372824][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.418724][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.483775][ T1093] veth1_macvtap: left promiscuous mode [ 215.523975][ T1093] veth0_macvtap: left promiscuous mode [ 215.529842][ T1093] veth1_vlan: left promiscuous mode [ 215.544034][ T1093] veth0_vlan: left promiscuous mode [ 215.568423][ T5902] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 215.625059][ T5902] usb 7-1: USB disconnect, device number 5 [ 216.221483][ T8044] loop7: detected capacity change from 0 to 32768 [ 216.332004][ T8044] XFS (loop7): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 216.562899][ T8073] loop1: detected capacity change from 0 to 128 [ 216.566645][ T8044] XFS (loop7): Ending clean mount [ 216.630270][ T8073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.706042][ T8073] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 216.929880][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.489214][ T5143] Bluetooth: hci0: command tx timeout [ 218.081903][ T6888] XFS (loop7): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 219.257653][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 219.574575][ T5143] Bluetooth: hci0: command tx timeout [ 219.642823][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 220.131470][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 221.748147][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.547'. [ 221.834754][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.547'. [ 221.872823][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.547'. [ 222.233305][ T8121] vlan2: entered allmulticast mode [ 222.243339][ T8121] syz_tun: entered allmulticast mode [ 223.397129][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.487234][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 223.525609][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.635648][ T7961] bridge_slave_0: entered allmulticast mode [ 223.870617][ T7961] bridge_slave_0: entered promiscuous mode [ 224.091279][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.270403][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.278733][ T7961] bridge_slave_1: entered allmulticast mode [ 224.288588][ T7961] bridge_slave_1: entered promiscuous mode [ 226.359193][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.965555][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.308897][ T7961] team0: Port device team_slave_0 added [ 228.526306][ T7961] team0: Port device team_slave_1 added [ 229.189791][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.210916][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.347248][ T8214] loop6: detected capacity change from 0 to 256 [ 229.375964][ T8214] vfat: Unknown parameter '00000000000000000000000' [ 229.411274][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.624717][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.652184][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.770577][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.062567][ T7961] hsr_slave_0: entered promiscuous mode [ 230.094785][ T7961] hsr_slave_1: entered promiscuous mode [ 230.115017][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.181157][ T7961] Cannot create hsr debugfs directory [ 230.412919][ T8242] loop1: detected capacity change from 0 to 32768 [ 230.464289][ T8242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.579 (8242) [ 230.517876][ T8242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.528227][ T8242] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 230.536844][ T8242] BTRFS info (device loop1): disk space caching is enabled [ 230.546113][ T8242] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 230.583797][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.580'. [ 231.100542][ T8238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.292184][ T8242] BTRFS info (device loop1): rebuilding free space tree [ 231.340998][ T8242] BTRFS info (device loop1): disabling free space tree [ 231.348391][ T8242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.358419][ T8242] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.503426][ T29] audit: type=1800 audit(1740668290.992:96): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.579" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 231.685341][ T5835] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.063649][ T7961] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.143694][ T7961] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.187328][ T7961] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 232.237969][ T7961] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 232.245299][ T51] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 232.412901][ T51] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.444730][ T51] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.507870][ T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.571349][ T51] usb 8-1: config 0 descriptor?? [ 232.618329][ T51] pwc: Askey VC010 type 2 USB webcam detected. [ 232.675121][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.466890][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.491471][ T51] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.554732][ T51] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.562858][ T51] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.597134][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.604344][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.615351][ T51] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.646540][ T51] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.674750][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.686341][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.687424][ T51] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.693557][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.704217][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.014106][ T51] pwc: recv_control_msg error -71 req 02 val 2100 [ 234.050245][ T51] pwc: recv_control_msg error -71 req 04 val 1500 [ 234.085111][ T51] pwc: recv_control_msg error -71 req 02 val 2500 [ 234.102616][ T51] pwc: recv_control_msg error -71 req 02 val 2400 [ 234.127057][ T51] pwc: recv_control_msg error -71 req 02 val 2600 [ 234.159313][ T8301] loop6: detected capacity change from 0 to 256 [ 234.164019][ T51] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.188821][ T51] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.217923][ T51] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.241665][ T51] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.264024][ T51] pwc: Registered as video103. [ 234.280811][ T51] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 234.291838][ T8303] overlayfs: failed to resolve './file0': -2 [ 234.359500][ T51] usb 8-1: USB disconnect, device number 2 [ 234.740902][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.875923][ T7961] veth0_vlan: entered promiscuous mode [ 236.939873][ T7961] veth1_vlan: entered promiscuous mode [ 237.012620][ T7961] veth0_macvtap: entered promiscuous mode [ 237.071814][ T7961] veth1_macvtap: entered promiscuous mode [ 237.121236][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.172652][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.193476][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.257731][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.292566][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.325686][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.360824][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.392919][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.427684][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.454994][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.488484][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.548132][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.562648][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.611770][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.635629][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.662008][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.686055][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.707264][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.719555][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.730116][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.747059][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.766297][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.798356][ T7961] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.831844][ T7961] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.851363][ T7961] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.873633][ T7961] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.074163][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 238.131277][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.619'. [ 238.197191][ T8395] bond1: entered promiscuous mode [ 238.202627][ T8395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.857407][ T791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.900440][ T791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.052084][ T7752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.136888][ T7752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.489249][ T8439] loop1: detected capacity change from 0 to 128 [ 239.604091][ T8439] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.624985][ T8439] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.679019][ T8443] overlayfs: failed to resolve './file0': -2 [ 239.720428][ T8439] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 239.899700][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.461715][ T8477] overlay: ./file0 is not a directory [ 241.561278][ T8482] loop9: detected capacity change from 0 to 512 [ 242.563527][ T8482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.576296][ T8482] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.906034][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.341455][ T29] audit: type=1800 audit(1740668302.832:97): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.650" name="file1" dev="overlay" ino=240 res=0 errno=0 [ 243.452998][ T29] audit: type=1804 audit(1740668302.942:98): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.647" name="/newroot/3/file0" dev="tmpfs" ino=44 res=1 errno=0 [ 243.694183][ T29] audit: type=1326 audit(1740668303.172:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 243.775870][ T29] audit: type=1326 audit(1740668303.172:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 243.907409][ T8528] loop7: detected capacity change from 0 to 1024 [ 244.744081][ T29] audit: type=1326 audit(1740668303.172:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 244.769190][ T29] audit: type=1326 audit(1740668303.172:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 244.793238][ T7753] hfsplus: b-tree write err: -5, ino 4 [ 244.848785][ T8533] lo speed is unknown, defaulting to 1000 [ 244.867464][ T29] audit: type=1326 audit(1740668303.172:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 244.918494][ T8533] lo speed is unknown, defaulting to 1000 [ 244.993486][ T8533] lo speed is unknown, defaulting to 1000 [ 245.026277][ T29] audit: type=1326 audit(1740668303.172:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 245.026773][ T8533] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.095400][ T8547] netlink: 14 bytes leftover after parsing attributes in process `syz.0.659'. [ 245.105489][ T29] audit: type=1326 audit(1740668303.172:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 245.208509][ T29] audit: type=1326 audit(1740668303.172:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c9558d169 code=0x7ffc0000 [ 245.364402][ T8533] lo speed is unknown, defaulting to 1000 [ 245.410240][ T8533] lo speed is unknown, defaulting to 1000 [ 245.451719][ T8533] lo speed is unknown, defaulting to 1000 [ 245.470094][ T8533] lo speed is unknown, defaulting to 1000 [ 245.487483][ T8533] lo speed is unknown, defaulting to 1000 [ 245.503759][ T8533] lo speed is unknown, defaulting to 1000 [ 247.463977][ C1] hrtimer: interrupt took 62090 ns [ 247.566077][ T8601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.796935][ T8608] overlayfs: failed to clone upperpath [ 247.999398][ T8618] netlink: 'syz.9.678': attribute type 4 has an invalid length. [ 248.043459][ T25] lo speed is unknown, defaulting to 1000 [ 248.894039][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 248.894062][ T29] audit: type=1326 audit(1740668308.312:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.7.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2c5f8d169 code=0x0 [ 250.229026][ T8672] netlink: 156 bytes leftover after parsing attributes in process `syz.7.694'. [ 250.851002][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 251.424301][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.700'. [ 251.501114][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.700'. [ 251.520240][ T8699] netlink: 344 bytes leftover after parsing attributes in process `syz.6.701'. [ 251.801156][ T8703] loop1: detected capacity change from 0 to 512 [ 251.919633][ T8703] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.702: corrupted in-inode xattr: invalid ea_ino [ 252.112934][ T8703] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.702: couldn't read orphan inode 15 (err -117) [ 252.248793][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.685829][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.128418][ T8754] netlink: 'syz.8.716': attribute type 39 has an invalid length. [ 255.339359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.346187][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091129][ T8789] PKCS7: Unknown OID: [5] 0.0 [ 256.096055][ T8789] PKCS7: Only support pkcs7_signedData type [ 256.544390][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 256.732084][ T5899] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 256.785037][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.832932][ T5899] usb 2-1: config 0 descriptor?? [ 256.983189][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.7.730'. [ 257.297930][ T8796] loop1: detected capacity change from 0 to 128 [ 257.381380][ T8796] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 257.578323][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.9.732'. [ 257.685014][ T8829] loop7: detected capacity change from 0 to 32768 [ 257.754735][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 257.829721][ T8829] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 257.905354][ T5899] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 257.912101][ T5899] [drm] Initialized udl on minor 2 [ 257.958020][ T5899] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.045363][ T5899] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 258.101612][ T5899] usb 2-1: USB disconnect, device number 7 [ 258.106530][ T6888] ocfs2: Unmounting device (7,7) on (node local) [ 258.124582][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.187592][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 259.745238][ T8868] loop7: detected capacity change from 0 to 2 [ 260.032362][ T8872] netlink: 156 bytes leftover after parsing attributes in process `syz.6.745'. [ 260.091432][ T8872] netlink: 'syz.6.745': attribute type 10 has an invalid length. [ 260.329576][ T8872] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.424264][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.443001][ T8884] loop7: detected capacity change from 0 to 256 [ 260.482129][ T8884] exfat: Deprecated parameter 'namecase' [ 260.583231][ T8884] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 260.629945][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.648386][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.688254][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.723854][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.742307][ T25] usb 2-1: SerialNumber: syz [ 260.978860][ T25] usb 2-1: 0:2 : does not exist [ 260.999060][ T25] usb 2-1: unit 5: unexpected type 0x0d [ 261.083683][ T25] usb 2-1: USB disconnect, device number 8 [ 261.284066][ T51] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 261.336677][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.497836][ T51] usb 10-1: Using ep0 maxpacket: 8 [ 261.548951][ T51] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.598859][ T51] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.629865][ T51] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 261.677905][ T51] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.723322][ T51] usb 10-1: config 0 descriptor?? [ 262.002616][ T5906] usb 10-1: USB disconnect, device number 2 [ 262.431163][ T8928] netlink: 'syz.7.759': attribute type 4 has an invalid length. [ 262.458485][ T8926] __vm_enough_memory: pid: 8926, comm: syz.0.758, bytes: 21200531664896 not enough memory for the allocation [ 262.470921][ T8928] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.759'. [ 262.944572][ T8937] loop1: detected capacity change from 0 to 1024 [ 264.532257][ T7741] hfsplus: b-tree write err: -5, ino 4 [ 265.310451][ T29] audit: type=1800 audit(1740668324.752:114): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.764" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 267.593961][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 267.728500][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 267.735195][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 267.935360][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 267.994018][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 268.090749][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.127774][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.359808][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.474880][ T8980] loop1: detected capacity change from 0 to 512 [ 269.338345][ T9] usb 10-1: Product: syz [ 269.342708][ T9] usb 10-1: Manufacturer: syz [ 269.347642][ T9] usb 10-1: SerialNumber: syz [ 269.355158][ T9] usb 10-1: config 0 descriptor?? [ 269.445616][ T8980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.454260][ T9] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.458884][ T8980] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.532238][ T9] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 269.804628][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.969952][ T29] audit: type=1326 audit(1740668329.462:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.004715][ T9] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 270.030439][ T9] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 270.070945][ T29] audit: type=1326 audit(1740668329.492:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 270.155207][ T29] audit: type=1326 audit(1740668329.492:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.237814][ T29] audit: type=1326 audit(1740668329.492:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.337100][ T29] audit: type=1326 audit(1740668329.492:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 270.451301][ T29] audit: type=1326 audit(1740668329.492:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.550789][ T29] audit: type=1326 audit(1740668329.502:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 270.687779][ T29] audit: type=1326 audit(1740668329.502:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.714066][ T9] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 270.727233][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 270.833372][ T29] audit: type=1326 audit(1740668329.512:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 270.927581][ T29] audit: type=1326 audit(1740668329.512:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 270.962049][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 270.989257][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 271.018134][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 271.046012][ T29] audit: type=1326 audit(1740668329.522:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 271.075356][ T9] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 271.112821][ T9] usb 10-1: USB disconnect, device number 3 [ 271.153216][ T29] audit: type=1326 audit(1740668329.522:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 271.231492][ T29] audit: type=1326 audit(1740668329.542:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa917729359 code=0x7ffc0000 [ 271.261443][ T29] audit: type=1326 audit(1740668329.542:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91778d169 code=0x7ffc0000 [ 272.645769][ T9027] loop9: detected capacity change from 0 to 8 [ 273.293392][ T9044] loop9: detected capacity change from 0 to 1024 [ 273.429380][ T9044] hfsplus: xattr searching failed [ 273.448063][ T9044] hfsplus: xattr searching failed [ 273.461918][ T9044] hfsplus: xattr searching failed [ 278.377758][ T9126] loop9: detected capacity change from 0 to 512 [ 278.490262][ T9126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.503558][ T9126] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.499324][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.526588][ T9134] loop7: detected capacity change from 0 to 131072 [ 280.550945][ T9134] F2FS-fs (loop7): Zoned block device path is missing [ 280.557894][ T9134] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 280.569294][ T9134] F2FS-fs (loop7): Value of option "test_dummy_encryption=strict" is unrecognized [ 281.293991][ T5906] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 281.494412][ T5906] usb 10-1: Using ep0 maxpacket: 32 [ 281.534683][ T5906] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 281.606707][ T5906] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 281.660396][ T5906] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 281.700993][ T5906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.724135][ T5906] usb 10-1: Product: syz [ 281.728431][ T5906] usb 10-1: Manufacturer: syz [ 281.746254][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 281.983614][ T5906] usb 10-1: SerialNumber: syz [ 282.000496][ T5906] usb 10-1: config 0 descriptor?? [ 282.012101][ T9171] loop1: detected capacity change from 0 to 2048 [ 282.416907][ T5906] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 282.711129][ T9171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.346200][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 283.494487][ T791] usb 10-1: Failed to submit usb control message: -110 [ 283.536966][ T9193] xt_socket: unknown flags 0x4 [ 283.635614][ T791] usb 10-1: unable to send the bmi data to the device: -110 [ 283.851163][ T791] usb 10-1: unable to get target info from device [ 283.887455][ T791] usb 10-1: could not get target info (-110) [ 283.914393][ T791] usb 10-1: could not probe fw (-110) [ 284.208590][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.236789][ T8] usb 10-1: USB disconnect, device number 4 [ 284.874110][ T9214] netlink: 187320 bytes leftover after parsing attributes in process `syz.7.850'. [ 284.883429][ T9214] netlink: zone id is out of range [ 287.005904][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.9.848'. [ 287.060330][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.848'. [ 287.092472][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.9.848'. [ 292.622438][ T9302] input: syz0 as /devices/virtual/input/input9 [ 293.742524][ T9328] Zero length message leads to an empty skb [ 293.770613][ T7749] bond0: (slave bond_slave_0): interface is now down [ 293.787545][ T9330] netlink: 'syz.8.882': attribute type 10 has an invalid length. [ 293.799049][ T7749] bond0: (slave bond_slave_1): interface is now down [ 293.876345][ T7749] bond0: now running without any active interface! [ 296.190214][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.892'. [ 297.028600][ T9368] loop1: detected capacity change from 0 to 512 [ 297.221392][ T9368] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.894: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 297.308190][ T9368] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.894: couldn't read orphan inode 15 (err -117) [ 297.376481][ T9368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.627042][ T9368] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.716173][ T9378] delete_channel: no stack [ 298.408373][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.671867][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.9.907'. [ 298.732765][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.9.907'. [ 299.079977][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.912'. [ 303.442782][ T9443] bridge_slave_0: left allmulticast mode [ 303.528526][ T9443] bridge_slave_0: left promiscuous mode [ 303.601293][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.934880][ T9443] bridge_slave_1: left allmulticast mode [ 304.006970][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 304.034297][ T9443] bridge_slave_1: left promiscuous mode [ 304.094171][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.241969][ T9443] bond0: (slave bond_slave_0): Releasing backup interface [ 304.354740][ T9443] bond0: (slave bond_slave_1): Releasing backup interface [ 304.458689][ T9443] team0: Port device team_slave_0 removed [ 304.509007][ T9443] team0: Port device team_slave_1 removed [ 304.517092][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.547819][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.551268][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.566881][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.577584][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.617170][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.626898][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 304.631001][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.642497][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.691653][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.745319][ T9443] bond0: (slave wlan1): Releasing backup interface [ 304.811264][ T9446] team0: Mode changed to "loadbalance" [ 305.113869][ T9452] lo speed is unknown, defaulting to 1000 [ 305.432182][ T7749] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.845320][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.932'. [ 306.088809][ T7749] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.775064][ T5847] Bluetooth: hci6: command tx timeout [ 307.277055][ T7749] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.490606][ T9489] bridge0: entered promiscuous mode [ 307.490723][ T9489] macvlan2: entered promiscuous mode [ 307.491808][ T9489] bridge0: port 3(macvlan2) entered blocking state [ 307.491869][ T9489] bridge0: port 3(macvlan2) entered disabled state [ 307.492039][ T9489] macvlan2: entered allmulticast mode [ 307.492054][ T9489] bridge0: entered allmulticast mode [ 307.522722][ T9489] macvlan2: left allmulticast mode [ 307.522753][ T9489] bridge0: left allmulticast mode [ 307.523926][ T9489] bridge0: left promiscuous mode [ 307.664237][ T7749] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.813314][ T9452] chnl_net:caif_netlink_parms(): no params data found [ 307.832176][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 307.832199][ T29] audit: type=1326 audit(1740668367.312:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501258d169 code=0x7ffc0000 [ 307.832250][ T29] audit: type=1326 audit(1740668367.312:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501258d169 code=0x7ffc0000 [ 307.832293][ T29] audit: type=1326 audit(1740668367.322:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f501258d169 code=0x7ffc0000 [ 307.832337][ T29] audit: type=1326 audit(1740668367.322:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f501258d1a3 code=0x7ffc0000 [ 307.873957][ T29] audit: type=1326 audit(1740668367.342:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f501258bc1f code=0x7ffc0000 [ 307.894092][ T29] audit: type=1326 audit(1740668367.372:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f501258d1f7 code=0x7ffc0000 [ 307.974635][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.042356][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.193592][ T29] audit: type=1326 audit(1740668367.552:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f501258bad0 code=0x7ffc0000 [ 308.193656][ T29] audit: type=1326 audit(1740668367.552:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f501258bdca code=0x7ffc0000 [ 308.193701][ T29] audit: type=1326 audit(1740668367.552:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501258d169 code=0x7ffc0000 [ 308.193746][ T29] audit: type=1326 audit(1740668367.582:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.8.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f501258d169 code=0x7ffc0000 [ 308.223879][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.792801][ T5847] Bluetooth: hci6: command tx timeout [ 310.621635][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.674110][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.704097][ T9452] bridge_slave_0: entered allmulticast mode [ 310.719327][ T9452] bridge_slave_0: entered promiscuous mode [ 310.760687][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.802824][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.813472][ T9452] bridge_slave_1: entered allmulticast mode [ 310.831394][ T9452] bridge_slave_1: entered promiscuous mode [ 310.860760][ T7749] bridge_slave_1: left allmulticast mode [ 310.888578][ T7749] bridge_slave_1: left promiscuous mode [ 310.904686][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.040460][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.120830][ T7749] bridge_slave_0: left allmulticast mode [ 311.171133][ T7749] bridge_slave_0: left promiscuous mode [ 311.184141][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.827420][ T5847] Bluetooth: hci6: command tx timeout [ 313.894144][ T5847] Bluetooth: hci6: command tx timeout [ 314.842902][ T9557] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 315.080334][ T7749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.091467][ T7749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.103359][ T7749] bond0 (unregistering): Released all slaves [ 315.155748][ T9550] lo speed is unknown, defaulting to 1000 [ 315.177608][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.296634][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.356158][ T9565] loop9: detected capacity change from 0 to 64 [ 315.509302][ T9452] team0: Port device team_slave_0 added [ 315.538095][ T9452] team0: Port device team_slave_1 added [ 315.653010][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.687866][ T9572] overlayfs: failed to clone upperpath [ 315.700624][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.751308][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.798975][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.968'. [ 315.881849][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.967'. [ 315.882304][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.919634][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.955927][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.989935][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.997589][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.065372][ T9576] bond0: (slave bond_slave_0): Releasing backup interface [ 317.578441][ T7749] hsr_slave_0: left promiscuous mode [ 318.604090][ T7749] hsr_slave_1: left promiscuous mode [ 318.742322][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.764773][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.890804][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.909714][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.970772][ T9602] loop1: detected capacity change from 0 to 128 [ 318.995052][ T9602] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.007792][ T9602] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.290990][ T7749] veth1_macvtap: left promiscuous mode [ 320.143944][ T7749] veth0_macvtap: left promiscuous mode [ 320.153831][ T7749] veth1_vlan: left promiscuous mode [ 320.159326][ T7749] veth0_vlan: left promiscuous mode [ 320.275578][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.532689][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'. [ 320.647165][ T9628] overlayfs: failed to clone upperpath [ 321.027090][ T9635] tipc: Failed to remove unknown binding: 66,1,1/0:1342701391/1342701393 [ 321.221926][ T9637] loop9: detected capacity change from 0 to 128 [ 321.299696][ T9637] qnx6: superblock #1 checksum error [ 324.092408][ T9666] CIFS: iocharset name too long [ 324.383442][ T9677] virtio-fs: tag <(null)> not found [ 324.455602][ T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 324.623968][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 324.643630][ T8] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 324.652381][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.675453][ T8] usb 10-1: config 0 has no interfaces? [ 324.681146][ T8] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 324.691341][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.708156][ T8] usb 10-1: config 0 descriptor?? [ 324.841274][ T7749] team0 (unregistering): Port device team_slave_1 removed [ 324.937276][ T8] usb 10-1: USB disconnect, device number 5 [ 324.970309][ T7749] team0 (unregistering): Port device team_slave_0 removed [ 327.544888][ T9713] netlink: 'syz.0.1013': attribute type 58 has an invalid length. [ 327.605128][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 328.345265][ T9725] overlayfs: failed to clone upperpath [ 328.684644][ T9452] hsr_slave_0: entered promiscuous mode [ 328.750366][ T9452] hsr_slave_1: entered promiscuous mode [ 328.780482][ T9452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.796987][ T9452] Cannot create hsr debugfs directory [ 329.588383][ T9744] overlayfs: failed to clone upperpath [ 329.664886][ T9741] overlayfs: failed to resolve './file0/../file0': -2 [ 332.495432][ T9774] overlayfs: failed to resolve './file0': -2 [ 332.794904][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 332.829078][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 333.062217][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1051'. [ 333.074242][ T9788] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1051'. [ 333.876541][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 333.876565][ T29] audit: type=1326 audit(1740668622.365:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.1.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c9558d169 code=0x0 [ 334.215047][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 334.633946][ T5906] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 334.856397][ T9452] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.863701][ T5906] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 334.881601][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.938076][ T5906] usb 10-1: config 0 descriptor?? [ 334.957912][ T9452] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.991581][ T9807] loop1: detected capacity change from 0 to 47 [ 335.030739][ T9452] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.131287][ T9452] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.215321][ T5906] usb 10-1: Cannot read MAC address [ 335.241125][ T5906] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 335.477639][ T5906] usb 10-1: USB disconnect, device number 6 [ 336.632744][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.920637][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.075985][ T9452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.109462][ T9452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.785538][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.792698][ T7753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.803150][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.810276][ T7753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.221786][ T9829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.449160][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.924437][ T9855] loop9: detected capacity change from 0 to 512 [ 342.007855][ T9855] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.1062: casefold flag without casefold feature [ 342.047930][ T9452] veth0_vlan: entered promiscuous mode [ 342.082486][ T9452] veth1_vlan: entered promiscuous mode [ 342.091071][ T9855] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.1062: couldn't read orphan inode 15 (err -117) [ 342.129110][ T9855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.194928][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 342.236111][ T9452] veth0_macvtap: entered promiscuous mode [ 342.323169][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 342.340668][ T9452] veth1_macvtap: entered promiscuous mode [ 342.399219][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.450955][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.490245][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.538497][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.613849][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.643988][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.681979][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.733894][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.765688][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.781001][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.816168][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.861997][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.876373][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.890391][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.900896][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.903510][ T8] libceph: connect (1)[c::]:6789 error -101 [ 342.917406][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.928228][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.939679][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.953222][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.961987][ T9874] ceph: No mds server is up or the cluster is laggy [ 342.965387][ T9452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.986445][ T9452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.001084][ T9452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.028367][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 343.041706][ T9452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.511694][ T7726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.535880][ T7726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.649850][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.683094][ T7752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.721754][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.763410][ T7752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.884613][ T9891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.641617][ T9909] Bluetooth: MGMT ver 1.23 [ 345.066530][ T9915] loop3: detected capacity change from 0 to 4096 [ 345.195840][ T9920] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.260373][ T9919] loop1: detected capacity change from 0 to 1024 [ 345.417961][ T9919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.571544][ T9927] overlayfs: failed to clone upperpath [ 345.590650][ T9918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 345.613241][ T29] audit: type=1800 audit(1740668634.075:168): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1080" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 345.652836][ T9918] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 345.830699][ T9918] EXT4-fs (loop1): This should not happen!! Data will be lost [ 345.830699][ T9918] [ 345.874083][ T9918] EXT4-fs (loop1): Total free blocks count 0 [ 345.880144][ T9918] EXT4-fs (loop1): Free/Dirty block details [ 345.934178][ T9918] EXT4-fs (loop1): free_blocks=68451041280 [ 345.940103][ T9918] EXT4-fs (loop1): dirty_blocks=64 [ 345.975916][ T9918] EXT4-fs (loop1): Block reservation details [ 346.023983][ T9918] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 346.282161][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.826820][ T9944] [ 347.829357][ T9944] ====================================================== [ 347.836381][ T9944] WARNING: possible circular locking dependency detected [ 347.843388][ T9944] 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 Not tainted [ 347.850502][ T9944] ------------------------------------------------------ [ 347.857533][ T9944] syz.1.1088/9944 is trying to acquire lock: [ 347.863504][ T9944] ffff8880255f8890 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x9d/0x400 [ 347.872413][ T9944] [ 347.872413][ T9944] but task is already holding lock: [ 347.879771][ T9944] ffff888142785888 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 347.889986][ T9944] [ 347.889986][ T9944] which lock already depends on the new lock. [ 347.889986][ T9944] [ 347.900424][ T9944] [ 347.900424][ T9944] the existing dependency chain (in reverse order) is: [ 347.909454][ T9944] [ 347.909454][ T9944] -> #7 (&q->sysfs_lock){+.+.}-{4:4}: [ 347.917029][ T9944] lock_acquire+0x1ed/0x550 [ 347.922062][ T9944] __mutex_lock+0x19c/0x1010 [ 347.927196][ T9944] blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 347.933535][ T9944] nbd_start_device+0x163/0xab0 [ 347.938906][ T9944] nbd_ioctl+0x5dc/0xf40 [ 347.943667][ T9944] blkdev_ioctl+0x5d2/0x6f0 [ 347.948780][ T9944] __se_sys_ioctl+0xf7/0x170 [ 347.953887][ T9944] do_syscall_64+0xf3/0x230 [ 347.958929][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.965347][ T9944] [ 347.965347][ T9944] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 347.973966][ T9944] lock_acquire+0x1ed/0x550 [ 347.979006][ T9944] blk_mq_submit_bio+0x14e1/0x25a0 [ 347.984660][ T9944] __submit_bio+0x2cf/0x6a0 [ 347.989688][ T9944] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 347.995851][ T9944] mpage_readahead+0x630/0x780 [ 348.001155][ T9944] read_pages+0x17b/0x570 [ 348.006025][ T9944] page_cache_ra_unbounded+0x708/0x820 [ 348.012068][ T9944] page_cache_sync_ra+0x3e2/0xb00 [ 348.017631][ T9944] filemap_get_pages+0x59a/0x1fb0 [ 348.023183][ T9944] filemap_read+0x464/0x1260 [ 348.028308][ T9944] blkdev_read_iter+0x31f/0x460 [ 348.033801][ T9944] vfs_read+0x977/0xb40 [ 348.038493][ T9944] ksys_read+0x18f/0x2b0 [ 348.043526][ T9944] do_syscall_64+0xf3/0x230 [ 348.048564][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.054991][ T9944] [ 348.054991][ T9944] -> #5 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 348.063551][ T9944] lock_acquire+0x1ed/0x550 [ 348.068586][ T9944] down_read+0xb1/0xa40 [ 348.073277][ T9944] filemap_fault+0x7f8/0x16c0 [ 348.078498][ T9944] __do_fault+0x137/0x390 [ 348.083350][ T9944] __handle_mm_fault+0x220a/0x70f0 [ 348.088992][ T9944] handle_mm_fault+0x3e5/0x8d0 [ 348.094288][ T9944] __get_user_pages+0x1a92/0x4140 [ 348.100080][ T9944] faultin_page_range+0x4e7/0x850 [ 348.105732][ T9944] do_madvise+0x6ed/0x4db0 [ 348.110725][ T9944] __x64_sys_madvise+0xa6/0xc0 [ 348.116046][ T9944] do_syscall_64+0xf3/0x230 [ 348.121094][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.127639][ T9944] [ 348.127639][ T9944] -> #4 (&mm->mmap_lock){++++}-{4:4}: [ 348.135240][ T9944] lock_acquire+0x1ed/0x550 [ 348.140288][ T9944] __might_fault+0xc6/0x120 [ 348.145321][ T9944] _copy_from_iter+0x100/0x1c40 [ 348.150706][ T9944] tcp_sendmsg_locked+0x213d/0x5330 [ 348.156575][ T9944] tcp_sendmsg+0x30/0x50 [ 348.161355][ T9944] __sock_sendmsg+0x1a6/0x270 [ 348.166563][ T9944] sock_write_iter+0x2d7/0x3f0 [ 348.171870][ T9944] vfs_write+0xad1/0xd10 [ 348.176645][ T9944] ksys_write+0x18f/0x2b0 [ 348.181501][ T9944] do_syscall_64+0xf3/0x230 [ 348.186537][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.192964][ T9944] [ 348.192964][ T9944] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 348.200632][ T9944] lock_acquire+0x1ed/0x550 [ 348.205672][ T9944] lock_sock_nested+0x48/0x100 [ 348.210961][ T9944] inet_sendmsg+0x120/0x390 [ 348.215997][ T9944] __sock_sendmsg+0x1a6/0x270 [ 348.221199][ T9944] sock_sendmsg+0x16c/0x250 [ 348.226225][ T9944] __sock_xmit+0x219/0x4e0 [ 348.231341][ T9944] nbd_send_cmd+0x996/0x2110 [ 348.236455][ T9944] nbd_queue_rq+0xcd5/0xef0 [ 348.241483][ T9944] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 348.247557][ T9944] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 348.254414][ T9944] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 348.260918][ T9944] blk_mq_run_hw_queue+0x354/0x500 [ 348.266555][ T9944] blk_mq_flush_plug_list+0x118e/0x1870 [ 348.272627][ T9944] __blk_flush_plug+0x420/0x500 [ 348.278007][ T9944] __submit_bio+0x54a/0x6a0 [ 348.283040][ T9944] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 348.289200][ T9944] __bread_gfp+0x23c/0x400 [ 348.294146][ T9944] udf_read_tagged+0xa6/0xe00 [ 348.299348][ T9944] udf_check_anchor_block+0xba/0x550 [ 348.305162][ T9944] udf_load_vrs+0xb16/0x1130 [ 348.310279][ T9944] udf_fill_super+0x5f2/0x1cb0 [ 348.315600][ T9944] get_tree_bdev_flags+0x48e/0x5c0 [ 348.321238][ T9944] vfs_get_tree+0x92/0x2b0 [ 348.326179][ T9944] do_new_mount+0x2be/0xb40 [ 348.331208][ T9944] __se_sys_mount+0x2d6/0x3c0 [ 348.336412][ T9944] do_syscall_64+0xf3/0x230 [ 348.341442][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.347870][ T9944] [ 348.347870][ T9944] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 348.355533][ T9944] lock_acquire+0x1ed/0x550 [ 348.360565][ T9944] __mutex_lock+0x19c/0x1010 [ 348.365683][ T9944] nbd_queue_rq+0x262/0xef0 [ 348.370711][ T9944] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 348.376787][ T9944] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 348.383666][ T9944] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 348.390207][ T9944] blk_mq_run_hw_queue+0x354/0x500 [ 348.395856][ T9944] blk_mq_flush_plug_list+0x118e/0x1870 [ 348.402027][ T9944] __blk_flush_plug+0x420/0x500 [ 348.407408][ T9944] __submit_bio+0x54a/0x6a0 [ 348.412447][ T9944] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 348.418613][ T9944] __bread_gfp+0x23c/0x400 [ 348.423558][ T9944] udf_read_tagged+0xa6/0xe00 [ 348.428775][ T9944] udf_check_anchor_block+0xba/0x550 [ 348.434587][ T9944] udf_load_vrs+0xb16/0x1130 [ 348.439702][ T9944] udf_fill_super+0x5f2/0x1cb0 [ 348.444995][ T9944] get_tree_bdev_flags+0x48e/0x5c0 [ 348.450642][ T9944] vfs_get_tree+0x92/0x2b0 [ 348.455584][ T9944] do_new_mount+0x2be/0xb40 [ 348.460625][ T9944] __se_sys_mount+0x2d6/0x3c0 [ 348.465832][ T9944] do_syscall_64+0xf3/0x230 [ 348.470866][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.477309][ T9944] [ 348.477309][ T9944] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 348.484542][ T9944] lock_acquire+0x1ed/0x550 [ 348.489577][ T9944] __mutex_lock+0x19c/0x1010 [ 348.494712][ T9944] nbd_queue_rq+0xcf/0xef0 [ 348.499672][ T9944] blk_mq_dispatch_rq_list+0xad5/0x19d0 [ 348.505748][ T9944] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 348.512603][ T9944] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 348.519120][ T9944] blk_mq_run_hw_queue+0x354/0x500 [ 348.524852][ T9944] blk_mq_flush_plug_list+0x118e/0x1870 [ 348.530926][ T9944] __blk_flush_plug+0x420/0x500 [ 348.536309][ T9944] __submit_bio+0x54a/0x6a0 [ 348.541341][ T9944] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 348.547500][ T9944] __bread_gfp+0x23c/0x400 [ 348.552472][ T9944] udf_read_tagged+0xa6/0xe00 [ 348.557701][ T9944] udf_check_anchor_block+0xba/0x550 [ 348.563516][ T9944] udf_load_vrs+0xb16/0x1130 [ 348.568634][ T9944] udf_fill_super+0x5f2/0x1cb0 [ 348.573931][ T9944] get_tree_bdev_flags+0x48e/0x5c0 [ 348.579569][ T9944] vfs_get_tree+0x92/0x2b0 [ 348.584515][ T9944] do_new_mount+0x2be/0xb40 [ 348.589559][ T9944] __se_sys_mount+0x2d6/0x3c0 [ 348.594899][ T9944] do_syscall_64+0xf3/0x230 [ 348.599941][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.606366][ T9944] [ 348.606366][ T9944] -> #0 (set->srcu){.+.+}-{0:0}: [ 348.613503][ T9944] validate_chain+0x18ef/0x5920 [ 348.618884][ T9944] __lock_acquire+0x1397/0x2100 [ 348.624295][ T9944] lock_sync+0x18b/0x310 [ 348.629068][ T9944] __synchronize_srcu+0xb1/0x400 [ 348.634537][ T9944] elevator_disable+0xd4/0x4e0 [ 348.639841][ T9944] blk_mq_update_nr_hw_queues+0x5d3/0x1a30 [ 348.646278][ T9944] nbd_start_device+0x163/0xab0 [ 348.651650][ T9944] nbd_ioctl+0x5dc/0xf40 [ 348.656414][ T9944] blkdev_ioctl+0x5d2/0x6f0 [ 348.661442][ T9944] __se_sys_ioctl+0xf7/0x170 [ 348.666553][ T9944] do_syscall_64+0xf3/0x230 [ 348.671583][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.678003][ T9944] [ 348.678003][ T9944] other info that might help us debug this: [ 348.678003][ T9944] [ 348.688254][ T9944] Chain exists of: [ 348.688254][ T9944] set->srcu --> &q->q_usage_counter(io)#50 --> &q->sysfs_lock [ 348.688254][ T9944] [ 348.701718][ T9944] Possible unsafe locking scenario: [ 348.701718][ T9944] [ 348.709186][ T9944] CPU0 CPU1 [ 348.714560][ T9944] ---- ---- [ 348.719941][ T9944] lock(&q->sysfs_lock); [ 348.724299][ T9944] lock(&q->q_usage_counter(io)#50); [ 348.732250][ T9944] lock(&q->sysfs_lock); [ 348.739139][ T9944] sync(set->srcu); [ 348.743108][ T9944] [ 348.743108][ T9944] *** DEADLOCK *** [ 348.743108][ T9944] [ 348.751271][ T9944] 5 locks held by syz.1.1088/9944: [ 348.756400][ T9944] #0: ffff88802565b998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 348.765778][ T9944] #1: ffff88802565b8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa0/0x1a30 [ 348.776866][ T9944] #2: ffff888142785358 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x2c3/0x1a30 [ 348.788714][ T9944] #3: ffff888142785390 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x2c3/0x1a30 [ 348.800717][ T9944] #4: ffff888142785888 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x388/0x1a30 [ 348.811488][ T9944] [ 348.811488][ T9944] stack backtrace: [ 348.817378][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.1.1088 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 348.817403][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.817417][ T9944] Call Trace: [ 348.817428][ T9944] [ 348.817438][ T9944] dump_stack_lvl+0x241/0x360 [ 348.817470][ T9944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.817494][ T9944] ? __pfx__printk+0x10/0x10 [ 348.817518][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.817556][ T9944] print_circular_bug+0x13a/0x1b0 [ 348.817585][ T9944] check_noncircular+0x36a/0x4a0 [ 348.817612][ T9944] ? __pfx_check_noncircular+0x10/0x10 [ 348.817637][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.817670][ T9944] ? lockdep_lock+0x123/0x2b0 [ 348.817702][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.817735][ T9944] ? add_lock_to_list+0x1e8/0x2f0 [ 348.817764][ T9944] validate_chain+0x18ef/0x5920 [ 348.817800][ T9944] ? __pfx_validate_chain+0x10/0x10 [ 348.817827][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.817876][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.817910][ T9944] ? mark_lock+0x9a/0x360 [ 348.817931][ T9944] __lock_acquire+0x1397/0x2100 [ 348.817974][ T9944] lock_sync+0x18b/0x310 [ 348.818005][ T9944] ? __synchronize_srcu+0x9d/0x400 [ 348.818047][ T9944] ? __synchronize_srcu+0x9d/0x400 [ 348.818082][ T9944] ? __pfx_lock_sync+0x10/0x10 [ 348.818116][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.818149][ T9944] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.818186][ T9944] __synchronize_srcu+0xb1/0x400 [ 348.818222][ T9944] ? __pfx___synchronize_srcu+0x10/0x10 [ 348.818265][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.818299][ T9944] ? synchronize_srcu+0x2a7/0x2d0 [ 348.818335][ T9944] elevator_disable+0xd4/0x4e0 [ 348.818372][ T9944] blk_mq_update_nr_hw_queues+0x5d3/0x1a30 [ 348.818417][ T9944] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 348.818454][ T9944] ? __pfx___mutex_lock+0x10/0x10 [ 348.818489][ T9944] nbd_start_device+0x163/0xab0 [ 348.818522][ T9944] nbd_ioctl+0x5dc/0xf40 [ 348.818549][ T9944] ? __pfx_nbd_ioctl+0x10/0x10 [ 348.818581][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.818615][ T9944] ? file_to_blk_mode+0xcc/0x140 [ 348.818636][ T9944] ? __pfx_nbd_ioctl+0x10/0x10 [ 348.818663][ T9944] blkdev_ioctl+0x5d2/0x6f0 [ 348.818695][ T9944] ? __pfx_blkdev_ioctl+0x10/0x10 [ 348.818727][ T9944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.818761][ T9944] ? __pfx_blkdev_ioctl+0x10/0x10 [ 348.818792][ T9944] __se_sys_ioctl+0xf7/0x170 [ 348.818817][ T9944] do_syscall_64+0xf3/0x230 [ 348.818851][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.818882][ T9944] RIP: 0033:0x7f9c9558d169 [ 348.818902][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.818922][ T9944] RSP: 002b:00007f9c963c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.818945][ T9944] RAX: ffffffffffffffda RBX: 00007f9c957a6080 RCX: 00007f9c9558d169 [ 348.818961][ T9944] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 348.818975][ T9944] RBP: 00007f9c9560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 348.818990][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.819004][ T9944] R13: 0000000000000000 R14: 00007f9c957a6080 R15: 00007fff3f190098 [ 348.819035][ T9944] [ 349.206045][ T5841] block nbd1: Receive control failed (result -32) [ 349.214367][ T5841] block nbd1: Receive control failed (result -32) [ 349.259334][ T9944] block nbd1: shutting down sockets