last executing test programs: 23.508633578s ago: executing program 0 (id=676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x0, 0x0, 0x3, 0x200003f0, 0x20000418], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0]}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x23, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000001f00000000000000001000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f000085000000060000008520000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f8500000006000000850000000d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000600"/40], &(0x7f0000000100)='GPL\x00', 0x1000, 0xb3, &(0x7f0000000140)=""/179, 0x0, 0x10, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc080) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x32004c8, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB='8,\x00'], 0x1, 0x656, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000002060101000000000000000900020073797a30000000000c000780050015000000000012000300686173683a6e65742c7000000500040000000000"], 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="1c00000004060108000c0e0000000000000002000500010007000000"], 0x1c}}, 0x0) 22.14356923s ago: executing program 0 (id=681): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xce, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000900)=""/102395, 0x18ffb}], 0x1, 0x3, 0x0) r1 = io_uring_setup(0x354a, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000010", @ANYRES16=r8, @ANYBLOB="010000000000000000000c00000020000580"], 0x34}}, 0x0) 21.75257069s ago: executing program 0 (id=683): socket$alg(0x26, 0x5, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006640)=@newtfilter={0x11dc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x11a8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_MATCHALL_ACT={0x1194, 0x2, [@m_pedit={0x1038, 0xb, 0x0, 0x0, {{0xa}, {0xf48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x1, 0x5, [{0x0, 0x0, 0x10001}, {0xa, 0x3, 0xcd5, 0x4, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x9}]}, [{0x7, 0x6, 0x7, 0x3, 0x5, 0x96}, {0x3, 0x7f, 0x8, 0x9, 0x200, 0x6}, {0x100, 0x46cf, 0x80000000, 0x9, 0x8000, 0x2}, {0x2, 0x2, 0x6, 0x7bf, 0x60fe, 0xf6e}, {0x5, 0x7, 0x1, 0x0, 0x3, 0x4}, {0x3, 0x400000, 0x9, 0x5, 0x81, 0x9}, {0x3, 0x1, 0x327, 0xc, 0x8, 0x9}, {0x3, 0x2, 0x4, 0x40, 0x400, 0x3ff}, {0x300000, 0xc, 0x628, 0x3, 0x8000, 0x8}, {0x6, 0x2d, 0x6, 0x38, 0x2, 0x5}, {0x846, 0x3, 0x3ec9, 0x6, 0x8001, 0x1}, {0x8, 0x9, 0x8, 0x80000000, 0xd, 0x7}, {0x7, 0xe5, 0x2, 0xfff, 0x2, 0x1c8}, {0x4, 0xe, 0x0, 0x8, 0x2b9, 0xad5a}, {0x3, 0x7, 0x7, 0x24}, {0x1, 0x100, 0x4, 0x7, 0x0, 0x1}, {0x1000, 0x0, 0xa0, 0x6}, {0x4, 0x7, 0x9, 0x4, 0x80}, {0x100, 0xe3, 0xef, 0x0, 0xd22a, 0x13c}, {0x8, 0x9, 0x1ff, 0x9, 0x8, 0x100}, {0x9, 0xb7, 0x1, 0x3, 0x9, 0x4}, {0x800, 0x4, 0xc75e, 0x6, 0x8, 0x2}, {0x2, 0x24645fda, 0x4, 0xc, 0x9, 0x3}, {0x2, 0x4, 0xe1, 0x8, 0x5, 0x40}, {0x4, 0x5, 0x3, 0x2a, 0x83e, 0x9000000}, {0x1, 0xfffff2cf, 0x7, 0x6, 0x0, 0x5}, {0x3, 0x4b, 0x4a1, 0x6, 0xd, 0x9}, {0xffffffff, 0x9, 0x1, 0x9, 0x3}, {0x6, 0xeda, 0xb27, 0x6, 0x200008, 0x58f}, {0x50d35a62, 0x8, 0x6, 0x3, 0xa3, 0x8}, {0x1, 0x3, 0x200, 0x8, 0x5, 0x4}, {0x10, 0xffffff7c, 0x3, 0xffffffff, 0xe, 0x8e}, {0x9, 0x1, 0x101, 0xfffffff2, 0xf7a, 0xc}, {0x2, 0xffffff7d, 0x1, 0x5, 0x7fffffff, 0x1}, {0x5, 0x5, 0x6c33, 0x3, 0x4, 0x9}, {0x7fffffff, 0x81, 0x0, 0x8000, 0xca, 0x8}, {0x0, 0x1, 0x1, 0x400, 0x8}, {0x4, 0x0, 0x12794c36, 0xd, 0xe27, 0xba5}, {0x1, 0x3, 0x7, 0xc2, 0x9, 0xfff}, {0xb2, 0x400, 0xff, 0x0, 0x4}, {0x6, 0x8, 0xb, 0x133c, 0x543f0eb9, 0x9}, {0x2, 0x6, 0x93c, 0x2, 0x8, 0x730}, {0x2, 0x9, 0x10000, 0xf, 0x0, 0xbf}, {0x4, 0x8, 0x200, 0x0, 0x5, 0x7}, {0xf5ba, 0xf, 0x5, 0x9, 0x8cc9, 0xffffffff}, {0x5, 0x95, 0x8, 0x1000, 0x4, 0x3}, {0xfffffffc, 0x401, 0x0, 0x0, 0x8, 0xfffffffa}, {0x8, 0x89f, 0x1, 0x6, 0x4, 0x4}, {0xb8d9, 0x401, 0x4, 0xc0, 0x377, 0x2}, {0x6, 0x8, 0x9, 0x2, 0x9a6c, 0x2}, {0xb8, 0x8, 0x4, 0x2, 0x5, 0x4}, {0x100, 0x6, 0x80000000, 0xfffffffd, 0x401, 0xfffffffe}, {0xe, 0xa7, 0x0, 0x8, 0x200, 0xfffffff1}, {0xffff, 0x200, 0x5, 0x9, 0x2, 0xa4}, {0xbbeb, 0xffc5, 0x3c45, 0xac58, 0xffff, 0x800}, {0x7, 0x8, 0x442c, 0x2, 0x9, 0x28000}, {0x8ff, 0xffff8a39, 0x8001, 0x7, 0x7, 0x80000001}, {0xa973, 0x3, 0x10000, 0x3, 0x6, 0x4}, {0x6, 0x8000, 0x7fffffff, 0x9, 0x1, 0x9}, {0x222, 0x2, 0x3e98, 0xffffffff, 0xe, 0x4}, {0xfffffc00, 0xffffffff, 0xfff, 0x1ffe0, 0x3, 0x7}, {0x6, 0xd, 0x8, 0xff, 0x7f6}, {0x92, 0x7fff, 0x690, 0x2b5d95f6, 0x4, 0xf}, {0x2, 0xc4b, 0x5, 0x1, 0x6, 0x357}, {0x1c5f, 0x4, 0x5, 0xf, 0x6, 0x1}, {0x8001, 0x743b, 0x401, 0x1, 0x81, 0xff}, {0x6, 0x8000, 0x3ff, 0x4367, 0x800, 0x5}, {0x7fffffff, 0xffff8128, 0x80000000, 0x5, 0x7, 0x4}, {0x10, 0x7fff, 0x366, 0x8, 0x100, 0x1}, {0x2, 0xcf7, 0xff, 0x2, 0x8, 0x5}, {0x2, 0xd, 0x0, 0x1, 0x8, 0x6}, {0x5, 0x6, 0x9, 0x6, 0x1, 0x5}, {0x3, 0x8, 0x1ff, 0xa6d3, 0x3, 0xb5}, {0x0, 0x9, 0x8000, 0x3a, 0x2, 0xfffffffd}, {0xc, 0x100, 0x4, 0x2, 0x3, 0x4}, {0x400, 0xaed, 0x4, 0x3, 0xd78d, 0x4}, {0x18000000, 0x9, 0xc8, 0x6, 0x1, 0xfffffff8}, {0x1, 0x1, 0xfffffffc, 0x0, 0x0, 0x2fc}, {0xb, 0x8, 0x0, 0x3b5, 0xc8b, 0x1ff}, {0x401, 0x4, 0x6, 0x6, 0x9, 0x1}, {0x4, 0x0, 0x3, 0x3, 0x7, 0x6}, {0x0, 0xffff, 0x2, 0x8, 0x9, 0x200}, {0xfffffffe, 0x10, 0x8, 0x46c, 0x2, 0x80000000}, {0xc0000000, 0x7, 0x5, 0xfff, 0x99, 0x50000000}, {0x2, 0x9f, 0x4, 0xfffff24c, 0x6, 0x6}, {0xfffffffc, 0x4be6, 0x9, 0x2, 0xc, 0x32}, {0x9, 0x48000000, 0x7, 0x5e28, 0x6}, {0x6, 0xfffffff7, 0x6, 0x6, 0x80, 0x9}, {0x2, 0x1e0, 0x3c8e, 0x200, 0x200, 0x9}, {0x7dd9, 0x6, 0x8, 0x9, 0x401, 0x3}, {0x6, 0x40, 0x1, 0xd, 0x80000000, 0x3}, {0x9, 0x5, 0x7, 0x0, 0xbb3, 0xdb}, {0x6, 0x1ff, 0x81, 0x2, 0x5, 0x5}, {0x8, 0x8000, 0x5, 0x9, 0xfffffff7, 0xa5f}, {0x8, 0xfffffffc, 0xfffffff9, 0x1, 0x6, 0xfffffff9}, {0x3, 0x8001, 0x4, 0x80000001, 0x8, 0xfffffff2}, {0x800, 0x8, 0x100000, 0x80000001, 0xfffffffa, 0xa}, {0xcec, 0x6, 0x8, 0x9, 0xf080, 0x7}, {0x8, 0xd9, 0x4, 0x9622, 0x8ad, 0x6}, {0x1000, 0x7d5b, 0x5, 0x3, 0xd, 0xfffffff9}, {0x0, 0x5, 0x0, 0x7, 0xa, 0x101}, {0x1992, 0x4, 0x3, 0xd, 0x5, 0x75b19d07}, {0x78f, 0x5, 0x400, 0x5, 0x8, 0x400}, {0x81, 0x7, 0x0, 0x6, 0xfffffff8, 0x7}, {0x8, 0x3, 0x5, 0x2, 0x8188, 0x5}, {0x2, 0x10, 0x1418, 0x6, 0x1, 0x6}, {0x4, 0x0, 0x6, 0x7, 0x1, 0x1}, {0x6, 0x4, 0x8, 0xffff, 0x8}, {0x1, 0x7f, 0x2, 0x3, 0x6, 0x10}, {0x2, 0x3, 0x7, 0x0, 0x9, 0x4}, {0x3, 0xc, 0x2, 0x98ed, 0x61f6c080, 0x8}, {0x5, 0x2, 0x4, 0xffffffff, 0x800, 0x37}, {0x5, 0x2b, 0x80, 0x3, 0x1, 0xfffffffc}, {0xe2, 0x1, 0x3, 0x401, 0x9, 0x32e01794}, {0xffffff01, 0x3, 0x0, 0xfffffffd, 0x4, 0x2}, {0xfffffe01, 0x100, 0x8, 0x0, 0x6, 0x7}, {0x6, 0x3a51, 0x80000001, 0xfffff75f, 0x40000, 0xf97}, {0x3, 0x3f8b, 0xa, 0x80000001, 0x0, 0x10001}, {0xc, 0x0, 0x0, 0x7fff, 0x0, 0x8}, {0x7, 0x0, 0x0, 0x4, 0x40000}, {0x6, 0x5}, {0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x9}, {0x3, 0x581, 0x7, 0x3c7, 0xfffffffe}, {0x2, 0x0, 0x0, 0x7, 0x400080, 0xffffffff}, {0x100, 0x7, 0xfffffff8, 0x0, 0x0, 0x5}, {0x4, 0xc578, 0x4, 0x7}, {0x40, 0x0, 0x7, 0x1, 0xfffffffd, 0xfffffffa}, {0x0, 0x0, 0x0, 0x101, 0x8001, 0x6}], [{0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x2}, {0x4}, {0x1}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x6}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x5e7a4a34e822d2a1}, {0x4}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x1}, {0x1}, {0xa, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}], 0x1}}]}, {0xc8, 0x6, "003f5f1c2a389fca82ef54f63da47abf3f73d5a803d1995d132f72286f27bae6fb2d2e2bf2b29628461bf47ea412e819b3cae1453724e7336ebfb7be41de2a1ec1cac66421afe37b09799353c7cee5268f49d65170e59e0fae8544c4ea8250eff9b815802eca7624e939428b0ba6f8f5087fda0155accd430cd380af8bc93920d7ad004006e18ab3d462214353f768bedc3f0edfa5173288e45749c7e710770e12f8eba5698bd7b7e78ad96a4f745c0ac4baf9452997cc3765957b875d495e79dd849cbf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x88, 0x1c, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x46, 0x6, "8ebcc3dbadb6e865b94b3e6b72c7a91c2f3b543bbd96ffd78943724631c5c6e95c7b0f3fd2e0b979b9b937d3ce58275502d47f5622dd111606d1634bfb8eb987a523"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x11dc}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400061b07322a7f671c9ab42f250000", @ANYRES16, @ANYBLOB="010000000000000000000b00000008000400000000000400018004000680"], 0x24}}, 0x0) read(r0, &(0x7f0000000180)=""/3, 0x3) close(0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) unshare(0x2c060000) unshare(0x24020400) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 21.618619552s ago: executing program 0 (id=684): syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1/file0\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x31, 0x6a9, &(0x7f0000001600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) ftruncate(r0, 0x8001) io_uring_setup(0x1de0, &(0x7f0000000440)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000807020000f80800000000000000000000b7040000000000008500000001000048d40e862b30601f316946411c02671ccf20d79905f89c0e96f1bf8399684fbdc0dc0f34c5d0129405f5f150fd61a7d3df6cae96b9373e496d2b3cfcad2ad6fc48ab4d46b514dd356c32566d57c5a3d33edbbda0c50161e79f31f2052c6903ab1b2d3c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @mcast1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 19.496100135s ago: executing program 0 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000016000109fffffffffff000000a"], 0x20}}, 0x0) 13.816146184s ago: executing program 0 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1248000d"], 0xfdef) 4.887443893s ago: executing program 1 (id=740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) 4.728072676s ago: executing program 1 (id=741): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.555085815s ago: executing program 3 (id=744): socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000bc0)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x6c, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x90) 4.488092157s ago: executing program 2 (id=745): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r2, r3, 0x0) fchdir(r4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x40000277) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 4.436424087s ago: executing program 3 (id=746): sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="241d9e7a007363126f6963ed99651d2b19061aedc4a406f523d0cc882476cbef7d", 0x21, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"000000000000000a0000000000000001"}}}}, 0x118) 4.318808693s ago: executing program 1 (id=747): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x22, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x4c}}, 0x0) 4.239771085s ago: executing program 2 (id=749): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x8847, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 4.239593795s ago: executing program 3 (id=750): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffdef) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0xc3f, 0x0, 0x69c7, 0x1ff, 0x5, 0x9}, 0x0) r2 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000c80)}, 0x0) shutdown(r0, 0x3) 4.156382177s ago: executing program 1 (id=751): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x9764, &(0x7f0000012f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="c6", 0xfda0}], 0x1, 0xc774, 0x0) 4.151017182s ago: executing program 2 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000540), 0x20, 0x4a6, &(0x7f0000001fc0)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000000000000065c5e61a53ba132aa9e5df6dad1deb000000000000000476b79bb7fbf1337160316699f3fac430f1e105ccf4fcff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0xfff, 0x2003) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(0x0, 0x80) r5 = io_uring_setup(0x0, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000040), 0x2) 4.060090422s ago: executing program 4 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f07e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a4693685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942ea629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505008000000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c298d9a331bcc80000000008141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e509e734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ecff079cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff020000004b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c455c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734a37ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b7999054df5fb6410bc3cdc8517d817367565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd0712ebd1f7682bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49d66f07dd646bfbdea1cf021a88aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675459cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4999d878d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddc432bd24c73fa773b739e20fcec29a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b49155831635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d09005d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e30ede126fc485972eca6ad5b8d324262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f00008ca6907624ceaa181126d0925c8e98f73496c90758ce3f8c2a596450dcf6333c1b361084a7ebd71dff6733cc460de5d23738a3bf37023df054b2a8db0d8d6d34754b9d71c2ee75f50a2b9770586466803918fa9bb8af8c0caffb2b5df6ed657a0cc609e9cd20c7a82d0cf1cfb455c1f3439989d722ea2f843eff50ec162b21db3f35555d0e85e3bdfafd08913fd6cedc3cafde55fec7b6fb9aa5823bedd57cf4b638547b5744133dbe9521fb2dc979f5b299dbf74ebbe1c7dcf814406f65d373c35e0bd3f8971c704e60b03c47cb828fc3da6cbcb0fe377b50d62f0029a1c76dcfc676f44da4009929c51d5a66763d3f723fa5e7d915e80744"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e19, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 3.927137572s ago: executing program 3 (id=754): syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESOCT], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x0, 0x8000, 0x0, r3}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket(0x28, 0x800, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 3.752334516s ago: executing program 4 (id=755): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfd, 0x0, &(0x7f0000000040)) 1.868032136s ago: executing program 2 (id=756): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.809416805s ago: executing program 3 (id=757): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x95, 0x3d, 0x1e, 0x8, 0xc10, 0x0, 0xbd3b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0xb7, 0xd6}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000440)=""/19, &(0x7f0000000240)=0x71) socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "946cc03601a528c7"}}]}, 0x34}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket(0x2, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2a, 0x0, &(0x7f00000011c0)=0xff7b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x0) write$binfmt_misc(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='\\'], 0x4c) 1.361969608s ago: executing program 4 (id=758): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) 1.051643986s ago: executing program 1 (id=759): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r2, r3, 0x0) fchdir(r4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x40000277) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 816.17676ms ago: executing program 4 (id=760): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000003c0), 0x100000000000022d) 657.296808ms ago: executing program 2 (id=761): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@fmask={'fmask', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x234) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 551.410055ms ago: executing program 4 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)) shutdown(r0, 0x0) 505.784886ms ago: executing program 1 (id=763): socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) rt_sigprocmask(0x0, &(0x7f0000000fc0), &(0x7f0000001000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 327.985503ms ago: executing program 4 (id=764): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="0000000100"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') gettid() sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0x25, &(0x7f0000000040), 0x4) close(r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) memfd_secret(0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 327.72779ms ago: executing program 2 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f00000004c0)=""/84, 0x54}], 0x4, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x128646, 0x0) r4 = dup(r3) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)) fallocate(r4, 0x10, 0x0, 0x74000) 0s ago: executing program 3 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 19] ? __pfx__printk+0x10/0x10 [ 208.860269][ T6919] ? is_bpf_text_address+0x285/0x2a0 [ 208.865591][ T6919] should_fail_ex+0x3b0/0x4e0 [ 208.870305][ T6919] ? alloc_empty_file+0x9e/0x1d0 [ 208.875360][ T6919] should_failslab+0x9/0x20 [ 208.879892][ T6919] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 208.885355][ T6919] alloc_empty_file+0x9e/0x1d0 [ 208.890158][ T6919] path_openat+0x105/0x3470 [ 208.894697][ T6919] ? mark_lock+0x9a/0x360 [ 208.899056][ T6919] ? __pfx_stack_trace_save+0x10/0x10 [ 208.904472][ T6919] ? __lock_acquire+0x1359/0x2000 [ 208.909551][ T6919] ? __lock_acquire+0x1359/0x2000 [ 208.914625][ T6919] ? __pfx_path_openat+0x10/0x10 [ 208.919623][ T6919] do_filp_open+0x235/0x490 [ 208.924155][ T6919] ? __pfx_do_filp_open+0x10/0x10 [ 208.929236][ T6919] ? _raw_spin_unlock+0x28/0x50 [ 208.934110][ T6919] ? alloc_fd+0x5a1/0x640 [ 208.938466][ T6919] do_sys_openat2+0x13e/0x1d0 [ 208.943170][ T6919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.949176][ T6919] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.954397][ T6919] ? __fget_files+0x3f6/0x470 [ 208.959107][ T6919] __x64_sys_open+0x225/0x270 [ 208.963812][ T6919] ? __pfx___x64_sys_open+0x10/0x10 [ 208.969042][ T6919] ? do_syscall_64+0x100/0x230 [ 208.973832][ T6919] ? do_syscall_64+0xb6/0x230 [ 208.978525][ T6919] do_syscall_64+0xf3/0x230 [ 208.983047][ T6919] ? clear_bhb_loop+0x35/0x90 [ 208.987754][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.993671][ T6919] RIP: 0033:0x7f7566375bd9 [ 208.998101][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.017714][ T6919] RSP: 002b:00007f756707f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 209.026124][ T6919] RAX: ffffffffffffffda RBX: 00007f7566503f60 RCX: 00007f7566375bd9 [ 209.034092][ T6919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 209.042053][ T6919] RBP: 00007f756707f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.050014][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.057998][ T6919] R13: 000000000000000b R14: 00007f7566503f60 R15: 00007ffccf4167f8 [ 209.065979][ T6919] [ 210.335123][ T5111] Bluetooth: hci3: command tx timeout [ 210.461161][ T6938] loop4: detected capacity change from 0 to 128 [ 210.507519][ T6938] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 210.554358][ T6938] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 210.591448][ T6938] FAT-fs (loop4): Filesystem has been set read-only [ 210.601696][ T6938] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 211.045176][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.073333][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.087809][ T63] bond0 (unregistering): Released all slaves [ 211.138723][ T6940] loop3: detected capacity change from 0 to 32768 [ 211.204842][ T6940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.372 (6940) [ 211.248103][ T5092] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 211.266063][ T5267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.296273][ T6940] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.314290][ T6940] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 211.323944][ T6940] BTRFS info (device loop3): using free-space-tree [ 211.386907][ T6948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.711759][ T30] audit: type=1800 audit(2000000052.740:2948): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.372" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 211.918865][ T6302] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.298834][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 212.354776][ T5111] Bluetooth: hci3: command tx timeout [ 212.594932][ T63] hsr_slave_0: left promiscuous mode [ 212.625070][ T63] hsr_slave_1: left promiscuous mode [ 212.698836][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.706557][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.735633][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.743073][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.878220][ T63] veth1_macvtap: left promiscuous mode [ 212.883884][ T63] veth0_macvtap: left promiscuous mode [ 212.910208][ T63] veth1_vlan: left promiscuous mode [ 212.926566][ T63] veth0_vlan: left promiscuous mode [ 213.057868][ T30] audit: type=1326 audit(2000000054.090:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.072903][ T6970] loop4: detected capacity change from 0 to 32768 [ 213.088189][ T6996] mmap: syz.1.378 (6996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 213.127490][ T30] audit: type=1326 audit(2000000054.100:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f756637475f code=0x7ffc0000 [ 213.153918][ T30] audit: type=1326 audit(2000000054.100:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.187705][ T30] audit: type=1326 audit(2000000054.100:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.241409][ T6970] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.246217][ T30] audit: type=1326 audit(2000000054.130:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.274923][ T30] audit: type=1326 audit(2000000054.130:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.298507][ T30] audit: type=1326 audit(2000000054.130:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.321692][ T30] audit: type=1326 audit(2000000054.130:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.346069][ T30] audit: type=1326 audit(2000000054.130:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7566375bd9 code=0x7ffc0000 [ 213.429142][ T6970] XFS (loop4): Ending clean mount [ 213.457810][ T6970] XFS (loop4): Quotacheck needed: Please wait. [ 213.467553][ T6986] Falling back ldisc for ptm0. [ 213.532838][ T6970] XFS (loop4): Quotacheck: Done. [ 213.714808][ T3049] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.850672][ T5092] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.939683][ T3049] usb 2-1: config index 0 descriptor too short (expected 25094, got 18) [ 213.958588][ T3049] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.971404][ T3049] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 18 [ 213.980861][ T3049] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 214.005036][ T3049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.016187][ T3049] usb 2-1: config 0 descriptor?? [ 214.081396][ T63] team0 (unregistering): Port device team_slave_1 removed [ 214.123486][ T63] team0 (unregistering): Port device team_slave_0 removed [ 214.297827][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 214.306273][ T3049] usb 2-1: string descriptor 0 read error: -71 [ 214.321118][ T3049] usb 2-1: USB disconnect, device number 5 [ 214.435874][ T5111] Bluetooth: hci3: command tx timeout [ 215.253687][ T7040] loop1: detected capacity change from 0 to 512 [ 215.265395][ T7040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.338514][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.371164][ T7040] EXT4-fs (loop1): 1 truncate cleaned up [ 215.382400][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.413750][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.420154][ T6896] bridge_slave_0: entered allmulticast mode [ 215.442765][ T6896] bridge_slave_0: entered promiscuous mode [ 215.463861][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.572557][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.584381][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.605452][ T6896] bridge_slave_1: entered allmulticast mode [ 215.626175][ T6896] bridge_slave_1: entered promiscuous mode [ 215.817419][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.819756][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.890621][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.918841][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.952348][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.001949][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.018433][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.057758][ T7043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.120500][ T6896] team0: Port device team_slave_0 added [ 216.166195][ T6896] team0: Port device team_slave_1 added [ 216.175813][ T63] IPVS: stop unused estimator thread 0... [ 216.223371][ T7038] loop0: detected capacity change from 0 to 32768 [ 216.289741][ T8] usb 4-1: USB disconnect, device number 2 [ 216.320170][ T7038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.385 (7038) [ 216.547294][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.637303][ T7038] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.654333][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.684372][ T7038] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 216.720512][ T7038] BTRFS info (device loop0): using free-space-tree [ 216.767925][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.432788][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.507014][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.617258][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.834121][ T6896] hsr_slave_0: entered promiscuous mode [ 217.886883][ T6896] hsr_slave_1: entered promiscuous mode [ 217.912717][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.926516][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.943307][ T6896] Cannot create hsr debugfs directory [ 218.470705][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 218.581765][ T7097] loop4: detected capacity change from 0 to 64 [ 218.972100][ T7107] mkiss: ax0: crc mode is auto. [ 219.461317][ T7117] loop1: detected capacity change from 0 to 512 [ 219.501941][ T7117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.585689][ T7117] EXT4-fs (loop1): 1 truncate cleaned up [ 219.593290][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.660552][ T6896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.727793][ T6896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.859695][ T6896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.957567][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.033890][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.131094][ T6896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.202953][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.236490][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.248732][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.253635][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.277327][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.294234][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.317502][ T7125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.417727][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.620150][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.620510][ T59] usb 4-1: USB disconnect, device number 3 [ 220.638669][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.651447][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.662371][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.671154][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.681735][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.719065][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.975136][ T7127] loop0: detected capacity change from 0 to 32768 [ 221.180120][ T7127] find_entry called with index = 0 [ 221.253213][ T7127] find_entry called with index = 0 [ 221.284501][ T53] bridge_slave_1: left allmulticast mode [ 221.319078][ T53] bridge_slave_1: left promiscuous mode [ 221.334590][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.357783][ T7146] find_entry called with index = 0 [ 221.377067][ T7146] find_entry called with index = 0 [ 221.380000][ T53] bridge_slave_0: left allmulticast mode [ 221.407775][ T53] bridge_slave_0: left promiscuous mode [ 221.434384][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.448857][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.466593][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.484783][ T53] bond0 (unregistering): Released all slaves [ 222.602243][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.742194][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.754720][ T5111] Bluetooth: hci4: command tx timeout [ 222.851018][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.858220][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.904613][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.911771][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.024004][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 223.772785][ T53] hsr_slave_0: left promiscuous mode [ 223.794477][ T53] hsr_slave_1: left promiscuous mode [ 223.832014][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.844003][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.887807][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.918384][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.999512][ T7197] loop1: detected capacity change from 0 to 512 [ 224.011496][ T53] veth1_macvtap: left promiscuous mode [ 224.017548][ T7197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.038659][ T53] veth0_macvtap: left promiscuous mode [ 224.045858][ T53] veth1_vlan: left promiscuous mode [ 224.052438][ T53] veth0_vlan: left promiscuous mode [ 224.105858][ T7197] EXT4-fs (loop1): 1 truncate cleaned up [ 224.113389][ T7197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.155124][ T3049] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.417607][ T3049] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 224.451447][ T3049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.469362][ T3049] usb 1-1: Product: syz [ 224.494098][ T3049] usb 1-1: Manufacturer: syz [ 224.500047][ T3049] usb 1-1: SerialNumber: syz [ 224.519065][ T3049] usb 1-1: config 0 descriptor?? [ 224.765013][ T9] usb 1-1: USB disconnect, device number 3 [ 224.834692][ T5111] Bluetooth: hci4: command tx timeout [ 224.973772][ T53] team0 (unregistering): Port device team_slave_1 removed [ 225.017858][ T53] team0 (unregistering): Port device team_slave_0 removed [ 225.494699][ T6896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.505496][ T6896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.733158][ T7224] loop0: detected capacity change from 0 to 128 [ 225.783731][ T7224] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 225.815390][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.860435][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.880219][ T7224] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 225.898330][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.929729][ T7136] bridge_slave_0: entered allmulticast mode [ 225.934255][ T7224] FAT-fs (loop0): Filesystem has been set read-only [ 225.967169][ T7136] bridge_slave_0: entered promiscuous mode [ 225.991342][ T7224] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 226.023868][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.044098][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.072804][ T7136] bridge_slave_1: entered allmulticast mode [ 226.112274][ T7136] bridge_slave_1: entered promiscuous mode [ 226.219326][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.282859][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.320529][ T5267] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 226.915207][ T5111] Bluetooth: hci4: command tx timeout [ 226.929427][ T7136] team0: Port device team_slave_0 added [ 226.948088][ T7136] team0: Port device team_slave_1 added [ 227.136417][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.246474][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.261421][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.298256][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.364923][ T7256] mkiss: ax0: crc mode is auto. [ 227.370450][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.382535][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.419806][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.553114][ T7136] hsr_slave_0: entered promiscuous mode [ 227.571717][ T7136] hsr_slave_1: entered promiscuous mode [ 227.591090][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.609717][ T7136] Cannot create hsr debugfs directory [ 227.848929][ T6896] veth0_vlan: entered promiscuous mode [ 228.009696][ T6896] veth1_vlan: entered promiscuous mode [ 228.214444][ T6896] veth0_macvtap: entered promiscuous mode [ 228.324976][ T6896] veth1_macvtap: entered promiscuous mode [ 228.440059][ T7289] loop1: detected capacity change from 0 to 512 [ 228.445393][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.493656][ T7289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.514659][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.612616][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.634984][ T7289] EXT4-fs (loop1): 1 truncate cleaned up [ 228.641458][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.664471][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.675303][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.686560][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.725790][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.799746][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.868527][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.904463][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.930367][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.973171][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.994578][ T5111] Bluetooth: hci4: command tx timeout [ 229.013448][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.037677][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.056589][ T6896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.066126][ T6896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.075515][ T6896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.097613][ T6896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.153239][ T7283] loop0: detected capacity change from 0 to 32768 [ 229.168794][ T7283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.423 (7283) [ 229.289791][ T7283] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.350492][ T7283] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 229.457520][ T7283] BTRFS info (device loop0): using free-space-tree [ 229.503505][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.783954][ T7136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.837009][ T7136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.896436][ T7136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.916966][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.928348][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.952624][ T7136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.221313][ T2853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.245049][ T7330] loop1: detected capacity change from 0 to 512 [ 230.781254][ T2853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.795656][ T7330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.993057][ T7330] EXT4-fs (loop1): 1 truncate cleaned up [ 231.007516][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.147927][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.261431][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.394846][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.605883][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.613082][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.680250][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.687444][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.714604][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.863532][ T7136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.923271][ T7136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.935264][ T9] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 231.950992][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.954412][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 231.994299][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.031426][ T9] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 232.059670][ T9] usb 3-1: No valid video chain found. [ 232.245475][ T9] usb 3-1: USB disconnect, device number 7 [ 232.422389][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.572526][ T7338] loop3: detected capacity change from 0 to 40427 [ 232.626921][ T7338] F2FS-fs (loop3): invalid crc value [ 232.677814][ T7338] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.796755][ T7338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 232.852856][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 232.852872][ T30] audit: type=1804 audit(2000000073.890:3020): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.428" name="/newroot/33/bus/file0" dev="loop3" ino=10 res=1 errno=0 [ 232.900675][ T7338] warning: `syz.3.428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.927806][ T7338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.010297][ T7379] loop2: detected capacity change from 0 to 512 [ 233.043983][ T7379] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.063422][ T7136] veth0_vlan: entered promiscuous mode [ 233.112716][ T7379] EXT4-fs (loop2): 1 truncate cleaned up [ 233.130827][ T6302] syz-executor: attempt to access beyond end of device [ 233.130827][ T6302] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 233.157852][ T7136] veth1_vlan: entered promiscuous mode [ 233.167283][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.171322][ T6302] syz-executor: attempt to access beyond end of device [ 233.171322][ T6302] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 233.228120][ T6302] syz-executor: attempt to access beyond end of device [ 233.228120][ T6302] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 233.257685][ T6302] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 233.273158][ T6302] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 233.436757][ T7136] veth0_macvtap: entered promiscuous mode [ 233.552985][ T7136] veth1_macvtap: entered promiscuous mode [ 234.421657][ T7385] loop0: detected capacity change from 0 to 2048 [ 234.660934][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.675253][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.704230][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.725200][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.750910][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.774003][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.794952][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.808286][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.823256][ T6896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.840749][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.863033][ T7385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.903258][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.927620][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.063286][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.104234][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.148430][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.177907][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.187987][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.198534][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.210460][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.243845][ T7136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.252839][ T7136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.262528][ T7136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.294802][ T7136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.304413][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 235.346155][ T5267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.474638][ T47] usb 2-1: device descriptor read/64, error -71 [ 235.542528][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.580261][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.647123][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.664354][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.721401][ T7397] loop2: detected capacity change from 0 to 32768 [ 235.753467][ T7397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.438 (7397) [ 235.758234][ T2862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.784963][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 235.818948][ T7397] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.850126][ T7397] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 235.870289][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.906199][ T7397] BTRFS info (device loop2): using free-space-tree [ 235.959772][ T47] usb 2-1: device descriptor read/64, error -71 [ 235.976490][ T2862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.090409][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 236.096205][ T47] usb usb2-port1: attempt power cycle [ 236.116200][ T25] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 236.147678][ T25] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 236.163479][ T2862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.176150][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 236.208284][ T25] usb 1-1: config 1 has no interface number 0 [ 236.236586][ T25] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.289230][ T25] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 236.334420][ T25] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 236.347848][ T2862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.369011][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.402678][ T25] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 236.503489][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.521703][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.530977][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.540581][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.549719][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.554421][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.570452][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.637045][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.657044][ T2862] bridge_slave_1: left allmulticast mode [ 236.662738][ T2862] bridge_slave_1: left promiscuous mode [ 236.669601][ T47] usb 2-1: device descriptor read/8, error -71 [ 236.678849][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.687382][ T2862] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.697563][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.710085][ T2862] bridge_slave_0: left allmulticast mode [ 236.716499][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.724654][ T2862] bridge_slave_0: left promiscuous mode [ 236.730462][ T2862] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.961899][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.973063][ T7419] loop4: detected capacity change from 0 to 32768 [ 236.985633][ T7419] BTRFS: device /dev/loop4 (7:4) using temp-fsid cc2a8a9f-dd10-4cab-9bef-577af16a1f47 [ 236.999276][ T7419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.401 (7419) [ 237.000254][ T47] usb 2-1: device descriptor read/8, error -71 [ 237.042893][ T7419] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.073509][ T7419] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 237.099442][ T7419] BTRFS info (device loop4): using free-space-tree [ 237.099500][ T25] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 237.158048][ T47] usb usb2-port1: unable to enumerate USB device [ 237.367909][ T59] usb 1-1: USB disconnect, device number 4 [ 237.403949][ T59] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 237.425849][ T7136] BTRFS info (device loop4): last unmount of filesystem cc2a8a9f-dd10-4cab-9bef-577af16a1f47 [ 237.527701][ T2862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.556514][ T2862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.585248][ T2862] bond0 (unregistering): Released all slaves [ 237.939084][ T7448] loop1: detected capacity change from 0 to 128 [ 238.012018][ T7448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 238.108765][ T7448] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 238.158211][ T7458] loop4: detected capacity change from 0 to 164 [ 238.174009][ T7448] FAT-fs (loop1): Filesystem has been set read-only [ 238.196002][ T7458] iso9660: Unknown parameter '000000000000000000000008' [ 238.217287][ T7448] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 238.246587][ T7458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.442'. [ 238.504941][ T5145] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.551318][ T2862] hsr_slave_0: left promiscuous mode [ 238.571828][ T2862] hsr_slave_1: left promiscuous mode [ 238.584681][ T6896] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.597730][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.605793][ T5111] Bluetooth: hci2: command tx timeout [ 238.627639][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.672877][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.705243][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.726598][ T5145] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 238.765905][ T5145] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 238.802029][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.842262][ T2862] veth1_macvtap: left promiscuous mode [ 238.856078][ T5145] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 238.862992][ T5145] usb 1-1: No valid video chain found. [ 238.874315][ T2862] veth0_macvtap: left promiscuous mode [ 238.880558][ T5091] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 238.895059][ T2862] veth1_vlan: left promiscuous mode [ 238.910811][ T2862] veth0_vlan: left promiscuous mode [ 239.088924][ T3049] usb 1-1: USB disconnect, device number 5 [ 239.108086][ T7477] loop1: detected capacity change from 0 to 512 [ 239.136335][ T7477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.338497][ T7477] EXT4-fs (loop1): 1 truncate cleaned up [ 239.360010][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.601665][ T7487] usb usb8: usbfs: process 7487 (syz.4.448) did not claim interface 0 before use [ 239.614266][ T5145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.822822][ T5145] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.835536][ T5145] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.848181][ T5145] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.861988][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.876694][ T7481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.110529][ T5145] usb 3-1: USB disconnect, device number 8 [ 240.248301][ T2862] team0 (unregistering): Port device team_slave_1 removed [ 240.283970][ T2862] team0 (unregistering): Port device team_slave_0 removed [ 240.675925][ T5111] Bluetooth: hci2: command tx timeout [ 240.800334][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 240.887012][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.051412][ T7498] loop4: detected capacity change from 0 to 1024 [ 241.104090][ T7498] EXT4-fs: Ignoring removed oldalloc option [ 241.113174][ T7498] ext4: Unknown parameter 'disc' [ 241.685274][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.714896][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.737062][ T7425] bridge_slave_0: entered allmulticast mode [ 241.766395][ T7425] bridge_slave_0: entered promiscuous mode [ 241.793977][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.834287][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.841480][ T7425] bridge_slave_1: entered allmulticast mode [ 241.900201][ T7425] bridge_slave_1: entered promiscuous mode [ 241.922044][ T7494] loop2: detected capacity change from 0 to 32768 [ 241.970277][ T7494] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.451 (7494) [ 242.050866][ T7494] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.073304][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.108250][ T7494] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 242.154258][ T7494] BTRFS info (device loop2): using free-space-tree [ 242.163936][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.363739][ T7425] team0: Port device team_slave_0 added [ 242.416773][ T7425] team0: Port device team_slave_1 added [ 242.653936][ T7509] loop1: detected capacity change from 0 to 32768 [ 242.676846][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.678170][ T6896] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.684319][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.754578][ T7509] BTRFS: device /dev/loop1 (7:1) using temp-fsid 503f4762-8f2c-4ecb-ba16-ebe3988909a4 [ 242.784290][ T7509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.455 (7509) [ 242.803667][ T5111] Bluetooth: hci2: command tx timeout [ 242.847730][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.866006][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.873058][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.902359][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.918765][ T7509] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.972404][ T7425] hsr_slave_0: entered promiscuous mode [ 242.977561][ T7509] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 243.015811][ T7425] hsr_slave_1: entered promiscuous mode [ 243.041862][ T7425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.074458][ T7509] BTRFS info (device loop1): using free-space-tree [ 243.080223][ T7425] Cannot create hsr debugfs directory [ 244.180927][ T7577] loop4: detected capacity change from 0 to 2048 [ 244.244545][ T7577] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.291435][ T7577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.414395][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 244.834771][ T5111] Bluetooth: hci2: command tx timeout [ 245.152032][ T9] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 245.180365][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 245.195256][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.219312][ T9] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 245.226456][ T9] usb 1-1: No valid video chain found. [ 245.320293][ T7425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.380298][ T7425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.438537][ T7425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.454132][ T8] usb 1-1: USB disconnect, device number 6 [ 245.472651][ T7425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.563540][ T7599] loop2: detected capacity change from 0 to 512 [ 245.603642][ T7599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.688133][ T7599] EXT4-fs (loop2): 1 truncate cleaned up [ 245.813611][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.933996][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.092712][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.339472][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.346670][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.457066][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.464293][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.471499][ T6896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.707551][ T7616] usb usb8: usbfs: process 7616 (syz.2.465) did not claim interface 0 before use [ 246.909430][ T5091] BTRFS info (device loop1): last unmount of filesystem 503f4762-8f2c-4ecb-ba16-ebe3988909a4 [ 247.219055][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.117370][ T5111] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 248.126987][ T5111] Bluetooth: hci4: Injecting HCI hardware error event [ 248.135787][ T5111] Bluetooth: hci4: hardware error 0x00 [ 248.254598][ T7425] veth0_vlan: entered promiscuous mode [ 248.461230][ T7425] veth1_vlan: entered promiscuous mode [ 248.618969][ T7425] veth0_macvtap: entered promiscuous mode [ 248.676992][ T7425] veth1_macvtap: entered promiscuous mode [ 248.751957][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.814349][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.860759][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.904246][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.924217][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.944225][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.980660][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.007057][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.036135][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.062721][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.093560][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.134120][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.172584][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.208533][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.242446][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.273427][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.299954][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.330542][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.373888][ T7425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.392956][ T7425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.495906][ T7425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.536649][ T7425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.817870][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.854533][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.914136][ T7646] loop1: detected capacity change from 0 to 32768 [ 249.954748][ T7646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.467 (7646) [ 250.011068][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.062865][ T7662] loop2: detected capacity change from 0 to 2048 [ 250.075650][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.089597][ T7662] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 250.190086][ T7662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.206346][ T7646] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.410143][ T5111] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 250.440999][ T7646] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 250.755061][ T7646] BTRFS info (device loop1): using free-space-tree [ 251.019432][ T7672] loop4: detected capacity change from 0 to 256 [ 251.176366][ T7672] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x13edafc8) [ 251.317044][ T7672] exFAT-fs (loop4): invalid boot region [ 251.323633][ T7672] exFAT-fs (loop4): failed to recognize exfat type [ 252.365554][ T7702] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.473'. [ 252.393091][ T7701] loop2: detected capacity change from 0 to 512 [ 252.399760][ T7646] BTRFS error (device loop1): open_ctree failed [ 252.417273][ T7695] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.473'. [ 252.438026][ T7701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 252.545338][ T7701] EXT4-fs (loop2): 1 truncate cleaned up [ 252.552766][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.060486][ T6896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.290505][ T7728] loop4: detected capacity change from 0 to 512 [ 253.379249][ T7728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 253.653856][ T7728] EXT4-fs (loop4): 1 truncate cleaned up [ 253.679875][ T7728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.035775][ T5111] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 254.045679][ T5111] Bluetooth: hci3: Injecting HCI hardware error event [ 254.054020][ T5111] Bluetooth: hci3: hardware error 0x00 [ 254.367543][ T7703] loop0: detected capacity change from 0 to 32768 [ 254.446826][ T7703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.476 (7703) [ 254.578774][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.594293][ T7703] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.618506][ T7703] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 254.654663][ T7703] BTRFS info (device loop0): using free-space-tree [ 254.896239][ T7755] mkiss: ax0: crc mode is auto. [ 255.259028][ T7771] loop3: detected capacity change from 0 to 128 [ 255.298976][ T7771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 255.332205][ T7771] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 255.371926][ T7771] FAT-fs (loop3): Filesystem has been set read-only [ 255.429682][ T7771] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 255.597068][ T7425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 255.652479][ T7778] loop1: detected capacity change from 0 to 2048 [ 255.731831][ T7778] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 255.783964][ T7778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.805343][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811654][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.311381][ T5111] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 256.391320][ T7793] loop4: detected capacity change from 0 to 256 [ 256.477102][ T7793] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x13edafc8) [ 256.541330][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.552936][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.561462][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.572228][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.584686][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.594733][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.653253][ T7793] exFAT-fs (loop4): invalid boot region [ 256.703776][ T7793] exFAT-fs (loop4): failed to recognize exfat type [ 256.989594][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.016073][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.056839][ T7801] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.489'. [ 257.232474][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.272664][ T7802] loop1: detected capacity change from 0 to 1024 [ 257.274859][ T7784] loop3: detected capacity change from 0 to 32768 [ 257.297695][ T7802] EXT4-fs: Ignoring removed oldalloc option [ 257.299454][ T7784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.487 (7784) [ 257.317248][ T7802] ext4: Unknown parameter 'disc' [ 257.320972][ T7800] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.489'. [ 257.446094][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.473183][ T7784] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.552428][ T7784] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 257.596847][ T7784] BTRFS info (device loop3): using free-space-tree [ 257.651780][ T7806] loop4: detected capacity change from 0 to 164 [ 257.667610][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.688782][ T7806] iso9660: Unknown parameter '000000000000000000000008' [ 257.813057][ T7819] loop0: detected capacity change from 0 to 128 [ 258.112225][ T7830] loop0: detected capacity change from 0 to 128 [ 258.183150][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 258.217482][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 258.248929][ T63] bridge_slave_1: left allmulticast mode [ 258.259969][ T63] bridge_slave_1: left promiscuous mode [ 258.272300][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.309231][ T7425] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.330120][ T63] bridge_slave_0: left allmulticast mode [ 258.347079][ T63] bridge_slave_0: left promiscuous mode [ 258.391340][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.674640][ T5111] Bluetooth: hci5: command tx timeout [ 259.130304][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.492'. [ 259.930599][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.028634][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.149656][ T63] bond0 (unregistering): Released all slaves [ 260.246993][ T7844] loop1: detected capacity change from 0 to 128 [ 260.280622][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 260.369066][ T7844] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 260.517955][ T7843] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 260.609931][ T7843] FAT-fs (loop1): Filesystem has been set read-only [ 260.684577][ T7843] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 260.754617][ T5111] Bluetooth: hci5: command tx timeout [ 260.864774][ T5091] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 261.240521][ T7865] loop1: detected capacity change from 0 to 2048 [ 261.502446][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.521968][ T7865] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 261.601404][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.643563][ T7792] bridge_slave_0: entered allmulticast mode [ 261.666687][ T7865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.697758][ T7792] bridge_slave_0: entered promiscuous mode [ 261.957215][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.980435][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.237062][ T7875] loop0: detected capacity change from 0 to 256 [ 262.243572][ T7792] bridge_slave_1: entered allmulticast mode [ 262.281515][ T7792] bridge_slave_1: entered promiscuous mode [ 262.311146][ T7875] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x13edafc8) [ 262.376108][ T7875] exFAT-fs (loop0): invalid boot region [ 262.381698][ T7875] exFAT-fs (loop0): failed to recognize exfat type [ 262.544357][ T5096] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 262.815467][ T7875] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.502'. [ 262.833725][ T5096] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.844282][ T5111] Bluetooth: hci5: command tx timeout [ 262.854136][ T5096] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.932673][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.943996][ T5096] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.965464][ T7878] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.502'. [ 262.993079][ T5096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.022590][ T7876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.085409][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.109083][ T7884] loop0: detected capacity change from 0 to 164 [ 263.125134][ T7884] iso9660: Unknown parameter '000000000000000000000008' [ 263.384961][ T7792] team0: Port device team_slave_0 added [ 263.457424][ T9] usb 5-1: USB disconnect, device number 4 [ 263.691436][ T7792] team0: Port device team_slave_1 added [ 263.875128][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.900167][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.950490][ T7882] loop1: detected capacity change from 0 to 32768 [ 264.000648][ T7882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.503 (7882) [ 264.020768][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.103359][ T7882] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.138934][ T63] hsr_slave_0: left promiscuous mode [ 264.139150][ T7882] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 264.153672][ T7882] BTRFS info (device loop1): using free-space-tree [ 264.168443][ T63] hsr_slave_1: left promiscuous mode [ 264.185154][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.193025][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.504'. [ 264.203100][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.265633][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.273073][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.456917][ T7917] loop0: detected capacity change from 0 to 128 [ 264.515734][ T63] veth1_macvtap: left promiscuous mode [ 264.521305][ T63] veth0_macvtap: left promiscuous mode [ 264.589818][ T63] veth1_vlan: left promiscuous mode [ 264.614330][ T63] veth0_vlan: left promiscuous mode [ 264.799866][ T5091] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.892397][ T7927] loop0: detected capacity change from 0 to 128 [ 264.925355][ T5111] Bluetooth: hci5: command tx timeout [ 265.048090][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 265.844993][ T7931] loop1: detected capacity change from 0 to 32768 [ 265.870994][ T7931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.508 (7931) [ 265.917634][ T7931] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.927857][ T7931] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 265.936900][ T7931] BTRFS info (device loop1): using free-space-tree [ 266.788682][ T5091] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.296155][ T63] team0 (unregistering): Port device team_slave_1 removed [ 267.409267][ T63] team0 (unregistering): Port device team_slave_0 removed [ 267.449383][ T7957] loop1: detected capacity change from 0 to 1024 [ 268.002001][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.012240][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.043812][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.089973][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 268.366248][ T7962] mkiss: ax0: crc mode is auto. [ 268.596704][ T30] audit: type=1326 audit(2000000109.630:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.0.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78ef75bd9 code=0x0 [ 269.415867][ T7792] hsr_slave_0: entered promiscuous mode [ 269.436729][ T7973] loop0: detected capacity change from 0 to 164 [ 269.451017][ T7792] hsr_slave_1: entered promiscuous mode [ 269.465526][ T7973] iso9660: Unknown parameter '000000000000000000000008' [ 269.472737][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.499591][ T7792] Cannot create hsr debugfs directory [ 270.417592][ T7985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.516'. [ 271.460447][ T8003] loop0: detected capacity change from 0 to 32768 [ 271.531221][ T8003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.520 (8003) [ 271.548779][ T8003] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.558946][ T8003] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 271.567889][ T8003] BTRFS info (device loop0): using free-space-tree [ 271.718807][ T7978] loop4: detected capacity change from 0 to 32768 [ 271.738134][ T7978] BTRFS: device /dev/loop4 (7:4) using temp-fsid b9bdb30a-01d9-479b-8f59-0c9dbd7990e3 [ 271.749607][ T7792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.756539][ T7978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.517 (7978) [ 271.789051][ T7792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.043203][ T7792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.143125][ T7792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.179963][ T7978] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.264321][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.285217][ T7978] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 273.348489][ T7978] BTRFS info (device loop4): using free-space-tree [ 273.388618][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 273.389227][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 273.437735][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 273.468296][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 273.499376][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 273.515224][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 273.529721][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 273.578635][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 273.637336][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.652039][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 273.654474][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 273.655818][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 273.738444][ T8032] loop3: detected capacity change from 0 to 2048 [ 273.768123][ T8032] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 273.770214][ T8032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.785046][ T7978] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 273.788957][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.995795][ T7978] BTRFS error (device loop4): open_ctree failed [ 274.021549][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.021688][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.607575][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.607676][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.864138][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.407504][ T8060] loop4: detected capacity change from 0 to 128 [ 275.528986][ T8061] mkiss: ax0: crc mode is auto. [ 275.531610][ T8064] loop3: detected capacity change from 0 to 1024 [ 275.669623][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.706932][ T8069] loop4: detected capacity change from 0 to 128 [ 275.818229][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'. [ 275.849224][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'. [ 275.927109][ T8073] loop1: detected capacity change from 0 to 164 [ 275.945486][ T8073] iso9660: Unknown parameter '000000000000000000000008' [ 275.973642][ T7792] veth0_vlan: entered promiscuous mode [ 276.179742][ T7792] veth1_vlan: entered promiscuous mode [ 276.391897][ T7792] veth0_macvtap: entered promiscuous mode [ 276.433914][ T7792] veth1_macvtap: entered promiscuous mode [ 276.539244][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.570344][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.600662][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.630384][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.682676][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.723868][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.774570][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.821307][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.883888][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.954648][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.010284][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.041068][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.073735][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 277.104219][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.136261][ T8090] loop4: detected capacity change from 0 to 32768 [ 277.145994][ T8090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.530 (8090) [ 277.164265][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.190571][ T8090] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.201602][ T8090] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 277.203178][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.210459][ T8090] BTRFS info (device loop4): using free-space-tree [ 277.271682][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.330060][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.348921][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.400206][ T7792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.410404][ T7792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.419653][ T7792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.429071][ T7792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.665506][ T5111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 277.674124][ T5111] Bluetooth: hci2: Injecting HCI hardware error event [ 277.684110][ T5111] Bluetooth: hci2: hardware error 0x00 [ 278.088198][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.176632][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.336933][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.396436][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.064505][ T5144] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 279.082861][ T7136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.306645][ T5144] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.358802][ T5144] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.392786][ T5144] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.449798][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.506750][ T8124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.874797][ T5111] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 279.969558][ T59] usb 3-1: USB disconnect, device number 9 [ 280.850469][ T8115] loop1: detected capacity change from 0 to 32768 [ 280.886503][ T8115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.532 (8115) [ 280.941006][ T8115] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.941087][ T8115] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 280.941117][ T8115] BTRFS info (device loop1): using free-space-tree [ 281.120781][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 281.121483][ T8115] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 281.168089][ T8115] BTRFS error (device loop1): open_ctree failed [ 281.791258][ T8175] mkiss: ax0: crc mode is auto. [ 281.873787][ T8165] loop2: detected capacity change from 0 to 4096 [ 281.926557][ T8165] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777ÿÿ' [ 282.000483][ T8184] loop4: detected capacity change from 0 to 512 [ 282.052139][ T8184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.109513][ T8184] EXT4-fs (loop4): 1 truncate cleaned up [ 282.119004][ T8184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.249008][ T8189] loop3: detected capacity change from 0 to 164 [ 282.307390][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 282.317618][ T8189] iso9660: Unknown parameter '000000000000000000000008' [ 282.394112][ T8165] loop2: detected capacity change from 0 to 256 [ 282.778385][ T8165] FAT-fs (loop2): Directory bread(block 64) failed [ 282.787625][ T8165] FAT-fs (loop2): Directory bread(block 65) failed [ 282.798439][ T8165] FAT-fs (loop2): Directory bread(block 66) failed [ 282.805842][ T8165] FAT-fs (loop2): Directory bread(block 67) failed [ 282.813223][ T8165] FAT-fs (loop2): Directory bread(block 68) failed [ 282.820424][ T8165] FAT-fs (loop2): Directory bread(block 69) failed [ 282.827634][ T8165] FAT-fs (loop2): Directory bread(block 70) failed [ 282.836657][ T8165] FAT-fs (loop2): Directory bread(block 71) failed [ 282.859248][ T8165] FAT-fs (loop2): Directory bread(block 72) failed [ 282.866187][ T8165] FAT-fs (loop2): Directory bread(block 73) failed [ 283.199848][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.871809][ T8206] loop4: detected capacity change from 0 to 32768 [ 283.902825][ T8206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.543 (8206) [ 283.926278][ T8206] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.936548][ T8206] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 283.945314][ T8206] BTRFS info (device loop4): using free-space-tree [ 284.406644][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.541'. [ 285.127049][ T8227] loop1: detected capacity change from 0 to 2048 [ 285.210019][ T8227] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 285.275298][ T8227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.275343][ T7136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.601349][ T8232] loop3: detected capacity change from 0 to 1024 [ 285.934309][ T5144] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 286.196993][ T5144] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.225799][ T5144] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.243178][ T5144] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.247866][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 286.260057][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.291575][ T8234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.494331][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 286.511920][ T25] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 286.548170][ T25] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 286.568704][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 286.576986][ T5144] usb 5-1: USB disconnect, device number 5 [ 286.611245][ T25] usb 2-1: config 1 has no interface number 0 [ 286.638085][ T25] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.679358][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 286.723473][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 286.736947][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.811718][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 287.030548][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.030939][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.038815][ T8238] loop2: detected capacity change from 0 to 32768 [ 287.065055][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.068565][ T8238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.547 (8238) [ 287.095311][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.221247][ T8238] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.221327][ T8238] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 287.221356][ T8238] BTRFS info (device loop2): using free-space-tree [ 287.496463][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 287.662215][ T7792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.727961][ T5145] usb 2-1: USB disconnect, device number 10 [ 287.752289][ T5145] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 288.641919][ T8278] loop2: detected capacity change from 0 to 32768 [ 288.677307][ T8278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.555 (8278) [ 288.756598][ T8278] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.766961][ T8278] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 288.776597][ T8278] BTRFS info (device loop2): using free-space-tree [ 288.888241][ T8285] loop1: detected capacity change from 0 to 164 [ 288.938738][ T8285] iso9660: Unknown parameter '000000000000000000000008' [ 294.679283][ T8278] syz.2.555 (8278) used greatest stack depth: 18584 bytes left [ 294.687466][ T30] audit: type=1326 audit(2000000131.800:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.4.557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6427b75bd9 code=0x0 [ 296.135777][ T7792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.774401][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 296.843828][ T8312] loop4: detected capacity change from 0 to 4096 [ 296.862231][ T8312] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777ÿÿ' [ 296.975957][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.033963][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 297.034914][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.078762][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.120992][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.162522][ T8318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.203300][ T8323] loop4: detected capacity change from 0 to 256 [ 297.473426][ T25] usb 3-1: USB disconnect, device number 10 [ 297.551547][ T8325] loop1: detected capacity change from 0 to 1024 [ 297.621780][ T8323] FAT-fs (loop4): Directory bread(block 64) failed [ 297.644936][ T8323] FAT-fs (loop4): Directory bread(block 65) failed [ 297.652241][ T8323] FAT-fs (loop4): Directory bread(block 66) failed [ 297.658953][ T8323] FAT-fs (loop4): Directory bread(block 67) failed [ 297.674380][ T8323] FAT-fs (loop4): Directory bread(block 68) failed [ 297.682582][ T8323] FAT-fs (loop4): Directory bread(block 69) failed [ 297.693603][ T8323] FAT-fs (loop4): Directory bread(block 70) failed [ 297.700947][ T8323] FAT-fs (loop4): Directory bread(block 71) failed [ 297.707923][ T8323] FAT-fs (loop4): Directory bread(block 72) failed [ 297.721302][ T8323] FAT-fs (loop4): Directory bread(block 73) failed [ 297.944059][ T8316] loop0: detected capacity change from 0 to 32768 [ 297.966933][ T8316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.561 (8316) [ 298.040608][ T8316] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.084384][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.096492][ T8316] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 298.129216][ T8316] BTRFS info (device loop0): using free-space-tree [ 298.294728][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 298.305847][ T47] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 298.320202][ T47] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 298.329227][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 298.339189][ T47] usb 4-1: config 1 has no interface number 0 [ 298.349831][ T47] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.362609][ T47] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 299.020342][ T47] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 299.058608][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.231158][ T47] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 299.367829][ T8355] loop2: detected capacity change from 0 to 2048 [ 299.389770][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.443897][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.453182][ T8355] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 299.464851][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.491517][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.531290][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.610424][ T8355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.303915][ T8358] loop4: detected capacity change from 0 to 32768 [ 300.619775][ T8358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.570 (8358) [ 301.043446][ T47] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 301.066220][ T8358] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.077260][ T8358] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 301.086739][ T8358] BTRFS info (device loop4): using free-space-tree [ 301.224536][ T30] audit: type=1326 audit(2000000142.180:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78ef75bd9 code=0x0 [ 302.171522][ T5144] usb 4-1: USB disconnect, device number 4 [ 302.193242][ T8386] loop0: detected capacity change from 0 to 164 [ 302.209175][ T5144] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 302.256820][ T8386] iso9660: Unknown parameter '000000000000000000000008' [ 302.945395][ T7136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.314393][ T5111] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 303.323086][ T5111] Bluetooth: hci5: Injecting HCI hardware error event [ 303.332775][ T5108] Bluetooth: hci5: hardware error 0x00 [ 303.561851][ T8393] loop3: detected capacity change from 0 to 8192 [ 303.610558][ T8393] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 304.134453][ T5107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 304.714631][ T8412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.572'. [ 304.728801][ T5107] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.757889][ T5107] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.792325][ T5107] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.822403][ T5107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.842127][ T8414] mkiss: ax0: crc mode is auto. [ 304.857068][ T8404] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.120465][ T5144] usb 3-1: USB disconnect, device number 11 [ 305.474254][ T5108] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 306.466842][ T8425] loop3: detected capacity change from 0 to 128 [ 306.467176][ T8423] loop2: detected capacity change from 0 to 2048 [ 306.544434][ T8425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 306.555647][ T8423] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 306.593522][ T8425] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 306.614623][ T8423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.639508][ T8425] FAT-fs (loop3): Filesystem has been set read-only [ 306.674231][ T8425] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 307.272296][ T8413] loop1: detected capacity change from 0 to 32768 [ 307.323028][ T8413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.578 (8413) [ 307.372413][ T7425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 309.292000][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 309.558896][ T8450] loop2: detected capacity change from 0 to 1024 [ 309.586911][ T8441] loop3: detected capacity change from 0 to 512 [ 309.704050][ T8441] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 309.780605][ T8452] loop4: detected capacity change from 0 to 8192 [ 309.795277][ T8441] EXT4-fs (loop3): mount failed [ 309.809084][ T8452] REISERFS warning (device loop4): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 309.902746][ T8454] mkiss: ax0: crc mode is auto. [ 310.427048][ T8441] afs: Unknown parameter 'dÿn' [ 311.434225][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 311.652170][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.715207][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.734348][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.766638][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.792842][ T8466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.150135][ T5144] usb 2-1: USB disconnect, device number 11 [ 312.235274][ T8469] loop4: detected capacity change from 0 to 128 [ 312.296399][ T8469] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 312.363842][ T8473] loop0: detected capacity change from 0 to 164 [ 312.389667][ T8469] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 312.429158][ T8473] iso9660: Unknown parameter '000000000000000000000008' [ 312.542122][ T8469] FAT-fs (loop4): Filesystem has been set read-only [ 312.822434][ T8475] loop2: detected capacity change from 0 to 2048 [ 312.846057][ T8469] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 312.893509][ T7136] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 312.926538][ T8475] loop2: p2 < > [ 313.046379][ T4549] loop2: p2 < > [ 314.086798][ T8489] loop3: detected capacity change from 0 to 512 [ 314.164772][ T8489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.316653][ T8489] EXT4-fs (loop3): 1 truncate cleaned up [ 314.344734][ T8489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.348779][ T8491] loop4: detected capacity change from 0 to 2048 [ 314.384058][ T8326] udevd[8326]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 314.622945][ T8491] loop4: p2 < > [ 315.748019][ T8484] loop1: detected capacity change from 0 to 32768 [ 315.766274][ T7425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.827434][ T8484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.597 (8484) [ 316.391639][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 316.570552][ T8513] loop3: detected capacity change from 0 to 512 [ 316.603023][ T8516] loop2: detected capacity change from 0 to 1024 [ 316.614367][ T8513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.618619][ T8507] loop0: detected capacity change from 0 to 8192 [ 316.664124][ T8507] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 316.679757][ T8517] loop4: detected capacity change from 0 to 128 [ 316.729524][ T8513] EXT4-fs (loop3): 1 truncate cleaned up [ 316.740170][ T8517] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 316.859838][ T8513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.893516][ T8517] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 316.909607][ T8517] FAT-fs (loop4): Filesystem has been set read-only [ 317.120491][ T8517] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 317.553309][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.564979][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.608332][ T2853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 318.252954][ T7425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.195094][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 319.241109][ T8541] loop0: detected capacity change from 0 to 256 [ 319.380048][ T8537] loop3: detected capacity change from 0 to 2048 [ 319.427848][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.480452][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.494287][ T8537] loop3: p2 < > [ 319.506192][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.581083][ T4549] loop3: p2 < > [ 319.587561][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.640863][ T8537] xt_CT: No such helper "syz0" [ 319.668712][ T8532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.701106][ T8546] loop0: detected capacity change from 0 to 512 [ 319.712242][ T8549] loop1: detected capacity change from 0 to 164 [ 319.737795][ T8546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.765614][ T8549] iso9660: Unknown parameter '000000000000000000000008' [ 319.835641][ T8546] EXT4-fs (loop0): 1 truncate cleaned up [ 319.842469][ T8546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.096584][ T5144] usb 5-1: USB disconnect, device number 6 [ 320.395422][ T5267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.560500][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.613'. [ 322.066199][ T8565] loop0: detected capacity change from 0 to 8192 [ 322.092802][ T8565] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 322.369410][ T8574] loop1: detected capacity change from 0 to 512 [ 322.785018][ T8577] mkiss: ax0: crc mode is auto. [ 323.086119][ T8574] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 323.134826][ T8574] EXT4-fs (loop1): mount failed [ 323.153738][ T8554] loop2: detected capacity change from 0 to 32768 [ 323.315603][ T8554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.614 (8554) [ 324.271550][ T8574] afs: Unknown parameter 'dÿn' [ 324.429843][ T8567] loop3: detected capacity change from 0 to 32768 [ 324.512739][ T8567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.618 (8567) [ 324.604034][ T8597] loop4: detected capacity change from 0 to 512 [ 324.676685][ T8567] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.689847][ T8597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.735159][ T8567] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 324.825694][ T8597] EXT4-fs (loop4): 1 truncate cleaned up [ 324.843199][ T8567] BTRFS info (device loop3): using free-space-tree [ 324.901022][ T8597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.922187][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 325.023706][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 325.124771][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 325.218380][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 325.218807][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 325.290034][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 325.359137][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 325.384008][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 325.398685][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 325.458897][ T8567] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 325.532387][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.623844][ T8567] BTRFS error (device loop3): open_ctree failed [ 326.088453][ T8620] loop4: detected capacity change from 0 to 2048 [ 326.192842][ T8620] loop4: p2 < > [ 326.261071][ T4549] loop4: p2 < > [ 326.377434][ T8620] xt_CT: No such helper "syz0" [ 326.623877][ T8624] loop3: detected capacity change from 0 to 512 [ 327.449288][ T8624] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 327.558521][ T8624] EXT4-fs (loop3): mount failed [ 327.831857][ T8637] loop0: detected capacity change from 0 to 164 [ 327.859166][ T8624] afs: Unknown parameter 'dÿn' [ 327.877420][ T8637] iso9660: Unknown parameter '000000000000000000000008' [ 327.924307][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 328.126203][ T47] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.160758][ T47] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.179347][ T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.193618][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.244608][ T8635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.510592][ T8645] netlink: 'syz.4.633': attribute type 30 has an invalid length. [ 328.576799][ T9] usb 2-1: USB disconnect, device number 12 [ 328.854324][ T5144] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 328.874489][ T8649] netlink: 60 bytes leftover after parsing attributes in process `syz.0.630'. [ 329.065087][ T5144] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 329.095188][ T5144] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 329.117254][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.227511][ T5144] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 329.244410][ T5144] usb 3-1: No valid video chain found. [ 329.456985][ T5144] usb 3-1: USB disconnect, device number 12 [ 330.218947][ T8659] loop3: detected capacity change from 0 to 512 [ 330.338529][ T8651] loop4: detected capacity change from 0 to 32768 [ 330.358821][ T8651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.634 (8651) [ 330.384384][ T8659] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 330.426028][ T8651] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.447101][ T8659] EXT4-fs (loop3): 1 truncate cleaned up [ 330.452926][ T8651] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 330.464080][ T8659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.472054][ T8651] BTRFS info (device loop4): using free-space-tree [ 330.940823][ T7425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.991768][ T7136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.357690][ T8661] loop1: detected capacity change from 0 to 32768 [ 331.402057][ T8661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.637 (8661) [ 331.483304][ T8686] loop0: detected capacity change from 0 to 2048 [ 331.497260][ T8661] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.538160][ T8661] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 331.597816][ T8661] BTRFS info (device loop1): using free-space-tree [ 331.663439][ T8686] loop0: p2 < > [ 332.260528][ T8691] xt_CT: No such helper "syz0" [ 332.608383][ T8680] loop2: detected capacity change from 0 to 32768 [ 332.632374][ T30] audit: type=1800 audit(2000000173.670:3024): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.637" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 332.693925][ T8680] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 332.709094][ T8713] loop4: detected capacity change from 0 to 1024 [ 332.818411][ T5091] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.879174][ T8680] XFS (loop2): Ending clean mount [ 333.025363][ T8725] FAULT_INJECTION: forcing a failure. [ 333.025363][ T8725] name failslab, interval 1, probability 0, space 0, times 0 [ 333.092419][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.2.638 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 333.102629][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 333.112690][ T8725] Call Trace: [ 333.115971][ T8725] [ 333.118900][ T8725] dump_stack_lvl+0x241/0x360 [ 333.123593][ T8725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.128797][ T8725] ? __pfx__printk+0x10/0x10 [ 333.133401][ T8725] should_fail_ex+0x3b0/0x4e0 [ 333.138084][ T8725] ? getname_flags+0xb7/0x540 [ 333.142755][ T8725] should_failslab+0x9/0x20 [ 333.147257][ T8725] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 333.152640][ T8725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.159058][ T8725] getname_flags+0xb7/0x540 [ 333.163564][ T8725] __x64_sys_unlink+0x3a/0x50 [ 333.168235][ T8725] do_syscall_64+0xf3/0x230 [ 333.172730][ T8725] ? clear_bhb_loop+0x35/0x90 [ 333.177409][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.183307][ T8725] RIP: 0033:0x7f496c975bd9 [ 333.187726][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.207321][ T8725] RSP: 002b:00007f496d68d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 333.215764][ T8725] RAX: ffffffffffffffda RBX: 00007f496cb04038 RCX: 00007f496c975bd9 [ 333.223735][ T8725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 333.231716][ T8725] RBP: 00007f496d68d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.239693][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.247655][ T8725] R13: 000000000000006e R14: 00007f496cb04038 R15: 00007ffe2bf85ad8 [ 333.255632][ T8725] [ 333.356747][ T8727] mkiss: ax0: crc mode is auto. [ 333.638552][ T7792] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 334.849253][ T8742] loop1: detected capacity change from 0 to 164 [ 334.879529][ T8742] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 335.020764][ T8744] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 335.237769][ T8750] loop2: detected capacity change from 0 to 512 [ 335.304570][ T8750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 335.417598][ T8752] loop3: detected capacity change from 0 to 164 [ 335.455854][ T8750] EXT4-fs (loop2): 1 truncate cleaned up [ 335.495595][ T8750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.511158][ T8752] iso9660: Unknown parameter '000000000000000000000008' [ 336.717085][ T8747] loop0: detected capacity change from 0 to 32768 [ 336.748879][ T8747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.649 (8747) [ 336.830829][ T8747] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 336.874348][ T8747] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 336.917277][ T8747] BTRFS info (device loop0): using free-space-tree [ 336.990383][ T7792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.231966][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.651'. [ 338.140851][ T5267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.454399][ T30] audit: type=1326 audit(2000000179.240:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.2.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496c975bd9 code=0x0 [ 338.476139][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.067365][ T8812] loop2: detected capacity change from 0 to 128 [ 340.098976][ T8812] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 340.112009][ T8814] loop1: detected capacity change from 0 to 1024 [ 340.172118][ T8812] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 340.204187][ T8812] FAT-fs (loop2): Filesystem has been set read-only [ 341.132918][ T8812] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 341.191772][ T8824] loop0: detected capacity change from 0 to 1024 [ 341.260913][ T7792] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 341.546852][ T8831] loop2: detected capacity change from 0 to 1024 [ 343.251174][ T8827] loop3: detected capacity change from 0 to 32768 [ 343.273203][ T8827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.666 (8827) [ 343.294022][ T8827] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.338097][ T8827] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 343.371518][ T8827] BTRFS info (device loop3): using free-space-tree [ 344.094485][ T7425] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.271656][ T8856] loop2: detected capacity change from 0 to 32768 [ 344.295552][ T8856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.670 (8856) [ 344.411305][ T8856] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.484943][ T8856] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 344.541118][ T8856] BTRFS info (device loop2): using free-space-tree [ 345.027569][ T8890] loop0: detected capacity change from 0 to 164 [ 345.034828][ T8890] iso9660: Unknown parameter '000000000000000000000008' [ 345.288763][ T7792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.328067][ T8894] loop3: detected capacity change from 0 to 128 [ 345.355565][ T8894] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 345.427166][ T8894] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 345.461339][ T8894] FAT-fs (loop3): Filesystem has been set read-only [ 345.506151][ T8894] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 345.567700][ T8864] loop4: detected capacity change from 0 to 32768 [ 345.584980][ T8864] XFS: noikeep mount option is deprecated. [ 345.718489][ T7425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 345.731558][ T8864] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 345.773533][ T8904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.676'. [ 345.990307][ T8864] XFS (loop4): Ending clean mount [ 346.017406][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 346.043494][ T8864] XFS (loop4): Quotacheck needed: Please wait. [ 346.138676][ T8864] XFS (loop4): Quotacheck: Done. [ 346.364245][ T59] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 346.524384][ T59] usb 4-1: device descriptor read/64, error -71 [ 346.536654][ T7136] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 346.814416][ T59] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 346.984251][ T59] usb 4-1: device descriptor read/64, error -71 [ 347.009877][ T8927] loop0: detected capacity change from 0 to 1024 [ 347.106252][ T59] usb usb4-port1: attempt power cycle [ 347.344857][ T8929] loop1: detected capacity change from 0 to 4096 [ 347.482373][ T8935] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.534198][ T59] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 347.596444][ T59] usb 4-1: device descriptor read/8, error -71 [ 347.884591][ T59] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 347.983335][ T59] usb 4-1: device descriptor read/8, error -71 [ 348.133597][ T59] usb usb4-port1: unable to enumerate USB device [ 348.176297][ T8933] loop4: detected capacity change from 0 to 32768 [ 348.218897][ T8933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.682 (8933) [ 348.283025][ T8933] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.339549][ T8933] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 348.382218][ T8933] BTRFS info (device loop4): using free-space-tree [ 348.601256][ T8952] loop1: detected capacity change from 0 to 1024 [ 348.904933][ T7136] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 349.627744][ T30] audit: type=1326 audit(2000000190.660:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.3.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8d75bd9 code=0x0 [ 350.363488][ T8968] loop4: detected capacity change from 0 to 2048 [ 350.538502][ T8968] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.627357][ T8970] loop3: detected capacity change from 0 to 2048 [ 350.646944][ T8968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.693579][ T8970] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.861211][ T8970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.992512][ T8973] loop2: detected capacity change from 0 to 164 [ 351.012308][ T8973] iso9660: Unknown parameter '000000000000000000000008' [ 353.272416][ T30] audit: type=1326 audit(2000000194.310:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.4.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6427b75bd9 code=0x0 [ 354.431157][ T8993] loop4: detected capacity change from 0 to 128 [ 354.472211][ T8993] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 354.543390][ T9003] loop1: detected capacity change from 0 to 1024 [ 354.733239][ T29] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 354.782160][ T1059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.010146][ T1059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.175986][ T1059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.358643][ T9013] loop4: detected capacity change from 0 to 2048 [ 355.407513][ T9013] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 355.420395][ T1059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.472938][ T9013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.826488][ T1059] bridge_slave_1: left allmulticast mode [ 356.412185][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.423902][ T1059] bridge_slave_1: left promiscuous mode [ 356.431414][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.440004][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.449063][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.472192][ T9000] loop2: detected capacity change from 0 to 32768 [ 356.484794][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.492447][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.500202][ T9000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.697 (9000) [ 356.500244][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.575355][ T1059] bridge_slave_0: left allmulticast mode [ 356.611345][ T1059] bridge_slave_0: left promiscuous mode [ 356.618363][ T9000] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.629013][ T9000] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 356.637880][ T9000] BTRFS info (device loop2): using free-space-tree [ 356.647649][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.686871][ T9023] loop4: detected capacity change from 0 to 2048 [ 356.713533][ T9023] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 356.734635][ T9023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.741413][ T9006] loop3: detected capacity change from 0 to 32768 [ 356.756628][ T9006] BTRFS: device /dev/loop3 (7:3) using temp-fsid 39f4b9c3-0cb4-4ea9-96ef-1b3908dbf2d2 [ 356.767733][ T9006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.699 (9006) [ 356.979509][ T9006] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.053484][ T9006] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 357.133531][ T9006] BTRFS info (device loop3): using free-space-tree [ 357.326834][ T7792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.354858][ T9075] loop4: detected capacity change from 0 to 512 [ 358.391105][ T9075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 358.545098][ T9075] EXT4-fs (loop4): 1 orphan inode deleted [ 358.550870][ T9075] EXT4-fs (loop4): 1 truncate cleaned up [ 358.564394][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.613955][ T9075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.638195][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.690557][ T5111] Bluetooth: hci0: command tx timeout [ 358.795259][ T1059] bond0 (unregistering): Released all slaves [ 358.927581][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.979261][ T7425] BTRFS info (device loop3): last unmount of filesystem 39f4b9c3-0cb4-4ea9-96ef-1b3908dbf2d2 [ 359.119449][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 359.365176][ T9086] loop2: detected capacity change from 0 to 2048 [ 359.616045][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.143439][ T9077] loop1: detected capacity change from 0 to 32768 [ 360.309242][ T7792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.337817][ T9077] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.489433][ T9077] XFS (loop1): Ending clean mount [ 360.520380][ T9077] XFS (loop1): Quotacheck needed: Please wait. [ 360.558076][ T3049] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 [ 360.581614][ T3049] XFS (loop1): Unmount and run xfs_repair [ 360.602724][ T3049] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 360.630920][ T3049] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 360.655398][ T3049] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 360.669501][ T3049] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 360.682555][ T3049] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 360.726165][ T3049] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 360.735223][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.756321][ T3049] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.765336][ T5111] Bluetooth: hci0: command tx timeout [ 360.789779][ T3049] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.826864][ T3049] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.848573][ T1059] hsr_slave_0: left promiscuous mode [ 360.852826][ T2862] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74 [ 360.885024][ T1059] hsr_slave_1: left promiscuous mode [ 360.898183][ T9077] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 360.908385][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.927745][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.954668][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.977382][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.992239][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.004259][ T47] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 361.007297][ T9] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 [ 361.023614][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.035128][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.042532][ T9] XFS (loop1): Unmount and run xfs_repair [ 361.054017][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 361.068695][ T47] usb 5-1: config 0 descriptor?? [ 361.074458][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 361.083199][ T9137] loop2: detected capacity change from 0 to 64 [ 361.100941][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 361.112449][ T1059] veth1_macvtap: left promiscuous mode [ 361.136512][ T1059] veth0_macvtap: left promiscuous mode [ 361.142289][ T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 361.175590][ T1059] veth1_vlan: left promiscuous mode [ 361.180955][ T1059] veth0_vlan: left promiscuous mode [ 361.186476][ T9] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 361.202128][ T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 361.219751][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.228819][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.242990][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.251967][ T9077] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74 [ 361.282050][ T9077] XFS (loop1): page discard on page ffffea0001799100, inode 0x114a, pos 0. [ 361.381021][ T5091] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 361.401295][ T5091] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 361.567536][ T9140] loop3: detected capacity change from 0 to 1024 [ 361.578583][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 361.587332][ T9140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 361.604441][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 361.627812][ T9140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.649071][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 361.657158][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 361.669664][ T47] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 361.707155][ T47] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 361.770354][ T7425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.842023][ T47] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 361.921986][ T47] usb 5-1: USB disconnect, device number 7 [ 362.160591][ T9150] loop1: detected capacity change from 0 to 2048 [ 362.218953][ T9150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.628494][ T9146] loop3: detected capacity change from 0 to 40427 [ 362.641642][ T9146] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 362.649608][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 362.663697][ T9146] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 362.696401][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.733562][ T9146] F2FS-fs (loop3): Found nat_bits in checkpoint [ 362.759066][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 362.834542][ T5111] Bluetooth: hci0: command tx timeout [ 362.872894][ T9167] loop1: detected capacity change from 0 to 256 [ 362.939836][ T9146] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 362.960428][ T9146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 363.149561][ T7425] syz-executor: attempt to access beyond end of device [ 363.149561][ T7425] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.176246][ T7425] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 363.430039][ T9177] loop1: detected capacity change from 0 to 256 [ 363.453579][ T9177] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 363.470577][ T9177] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 363.493872][ T9177] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 363.512067][ T9177] UDF-fs: Scanning with blocksize 512 failed [ 363.522515][ T9177] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 363.541249][ T9177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.909442][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 364.002882][ T9183] netlink: 'syz.1.741': attribute type 25 has an invalid length. [ 364.034459][ T9183] netlink: 'syz.1.741': attribute type 25 has an invalid length. [ 364.573274][ T9213] loop2: detected capacity change from 0 to 512 [ 364.612625][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.634710][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.658808][ T9019] bridge_slave_0: entered allmulticast mode [ 364.663720][ T9213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.695065][ T9213] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.717449][ T9019] bridge_slave_0: entered promiscuous mode [ 364.791931][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.869848][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.910056][ T9019] bridge_slave_1: entered allmulticast mode [ 364.919569][ T5111] Bluetooth: hci0: command tx timeout [ 364.957319][ T9223] loop4: detected capacity change from 0 to 1024 [ 364.963830][ T9019] bridge_slave_1: entered promiscuous mode [ 366.644848][ T7792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.655683][ T9223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 366.758261][ T9223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.883927][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.948366][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.058846][ T9210] loop1: detected capacity change from 0 to 32768 [ 367.073379][ T9019] team0: Port device team_slave_0 added [ 367.085912][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 367.136158][ T9019] team0: Port device team_slave_1 added [ 367.163161][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.190242][ T9210] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 367.201905][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.222999][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.285792][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 367.294080][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.306947][ T25] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 367.308453][ T9210] XFS (loop1): Ending clean mount [ 367.318259][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.328785][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.336831][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.336867][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.362734][ T9258] loop4: detected capacity change from 0 to 512 [ 367.387118][ T25] usb 4-1: config 0 descriptor?? [ 367.458974][ T5091] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 367.462166][ T9258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.508889][ T9258] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.510113][ T9019] hsr_slave_0: entered promiscuous mode [ 367.539180][ T9019] hsr_slave_1: entered promiscuous mode [ 367.634009][ T7136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.846698][ T25] usb 4-1: USB disconnect, device number 9 [ 367.881594][ T9269] loop2: detected capacity change from 0 to 256 [ 367.983051][ T9269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 368.495501][ T5144] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 368.571438][ T9295] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 368.571467][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.3.766 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 368.571492][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.571505][ T9295] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 368.571541][ T9295] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 368.571559][ T9295] RSP: 0018:ffffc9000dcdf6f8 EFLAGS: 00010202 [ 368.571577][ T9295] RAX: 1ffff110043c26c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 368.571592][ T9295] RDX: ffffc9000f9e1000 RSI: 0000000000001aaf RDI: 0000000000001ab0 [ 368.571606][ T9295] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff110172a8938 [ 368.571620][ T9295] R10: dffffc0000000000 R11: ffffed10172a8939 R12: 0000000000000038 [ 368.571635][ T9295] R13: dffffc0000000000 R14: 1ffff92001b9bf21 R15: 0000000000000000 [ 368.571650][ T9295] FS: 00007fc2a9a9d6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 368.571667][ T9295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.571681][ T9295] CR2: 0000000020010000 CR3: 000000002c9de000 CR4: 00000000003506f0 [ 368.571698][ T9295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.571711][ T9295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.571724][ T9295] Call Trace: [ 368.571733][ T9295] [ 368.571741][ T9295] ? __die_body+0x88/0xe0 [ 368.571772][ T9295] ? die+0xcf/0x110 [ 368.571803][ T9295] ? do_trap+0x15a/0x3a0 [ 368.571833][ T9295] ? do_error_trap+0x1dc/0x2c0 [ 368.571863][ T9295] ? __pfx_do_error_trap+0x10/0x10 [ 368.571911][ T9295] ? rcu_is_watching+0x15/0xb0 [ 368.571943][ T9295] ? exc_stack_segment+0x38/0x50 [ 368.571967][ T9295] ? asm_exc_stack_segment+0x26/0x30 [ 368.571996][ T9295] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 368.572027][ T9295] ? bpf_xdp_redirect+0x59/0x1a0 [ 368.572059][ T9295] ? bpf_xdp_redirect+0x25/0x1a0 [ 368.572099][ T9295] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 368.572119][ T9295] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 368.572166][ T9295] do_xdp_generic+0x673/0xb90 [ 368.572211][ T9295] ? __pfx_do_xdp_generic+0x10/0x10 [ 368.572235][ T9295] ? tun_get_user+0x26c8/0x4560 [ 368.572262][ T9295] ? tun_get_user+0x26c8/0x4560 [ 368.572282][ T9295] tun_get_user+0x2805/0x4560 [ 368.572313][ T9295] ? __pfx_tun_get_user+0x10/0x10 [ 368.572337][ T9295] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 368.572359][ T9295] ? tun_get+0x1e/0x2f0 [ 368.572387][ T9295] ? tun_get+0x1e/0x2f0 [ 368.572405][ T9295] ? tun_get+0x27d/0x2f0 [ 368.572424][ T9295] tun_chr_write_iter+0x113/0x1f0 [ 368.572445][ T9295] vfs_write+0xa72/0xc90 [ 368.572465][ T9295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 368.572486][ T9295] ? __pfx_vfs_write+0x10/0x10 [ 368.572502][ T9295] ? do_futex+0x33b/0x560 [ 368.572539][ T9295] ksys_write+0x1a0/0x2c0 [ 368.572561][ T9295] ? __pfx_ksys_write+0x10/0x10 [ 368.572600][ T9295] ? do_syscall_64+0x100/0x230 [ 368.572622][ T9295] ? do_syscall_64+0xb6/0x230 [ 368.572643][ T9295] do_syscall_64+0xf3/0x230 [ 368.572663][ T9295] ? clear_bhb_loop+0x35/0x90 [ 368.572692][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.572717][ T9295] RIP: 0033:0x7fc2a8d7475f [ 368.572735][ T9295] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 368.572753][ T9295] RSP: 002b:00007fc2a9a9d010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 368.572777][ T9295] RAX: ffffffffffffffda RBX: 00007fc2a8f03f60 RCX: 00007fc2a8d7475f [ 368.572794][ T9295] RDX: 000000000000fdef RSI: 0000000020000a40 RDI: 00000000000000c8 [ 368.572808][ T9295] RBP: 00007fc2a8de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 368.572822][ T9295] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 368.572856][ T9295] R13: 000000000000000b R14: 00007fc2a8f03f60 R15: 00007fff87bdd178 [ 368.572882][ T9295] [ 368.572889][ T9295] Modules linked in: [ 368.572906][ T9295] ---[ end trace 0000000000000000 ]--- [ 368.746086][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.749542][ T9295] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 368.764215][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.765612][ T9295] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 368.781193][ T5144] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 368.781669][ T9295] RSP: 0018:ffffc9000dcdf6f8 EFLAGS: 00010202 [ 368.792697][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.796434][ T9295] [ 368.796445][ T9295] RAX: 1ffff110043c26c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 368.796466][ T9295] RDX: ffffc9000f9e1000 RSI: 0000000000001aaf RDI: 0000000000001ab0 [ 368.796484][ T9295] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff110172a8938 [ 368.796502][ T9295] R10: dffffc0000000000 R11: ffffed10172a8939 R12: 0000000000000038 [ 368.796521][ T9295] R13: dffffc0000000000 R14: 1ffff92001b9bf21 R15: 0000000000000000 [ 368.796539][ T9295] FS: 00007fc2a9a9d6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 368.796561][ T9295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.796578][ T9295] CR2: 0000000020010000 CR3: 000000002c9de000 CR4: 00000000003506f0 [ 368.796600][ T9295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.796615][ T9295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.796634][ T9295] Kernel panic - not syncing: Fatal exception in interrupt [ 368.801759][ T9295] Kernel Offset: disabled