last executing test programs: 4m54.952750221s ago: executing program 3 (id=272): r0 = syz_io_uring_setup(0x2, &(0x7f00000005c0)={0x0, 0x7bf0, 0x10, 0x1, 0x36d}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x80002000}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000003c0)=[0x2, 0x200], 0x2) 4m53.707974009s ago: executing program 3 (id=273): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000080)='udf\x00', 0x20080c7, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a80)=""/23, 0x17}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m52.194202738s ago: executing program 3 (id=278): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) 4m52.055980589s ago: executing program 3 (id=279): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000017c0), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) 4m49.759922803s ago: executing program 3 (id=285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3fd, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x2004, 0x8000000, 0x5]}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 4m48.063922784s ago: executing program 3 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sched_setscheduler(0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) r5 = getpid() syz_pidfd_open(r5, 0x0) ptrace(0x4207, r5) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0) accept4$tipc(r6, &(0x7f00000000c0)=@name, 0x0, 0x40000) r8 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f00000024c0)={0x1, 0x2, @start={r10, 0x0, "f5285e3282b3fff55d90fa8d4c3afee6086c60d677b7628fb4ccde4dfdd9730b912c0828a9024299484f90f362d0275dd0fde8011b8bcec76b91916302354fb85d36dcddbcabbc79c50bb63827e10dc8311ccae9a774ec4e7be7d91e16631866f005a20aec0d42c39ae768591bc3e40fe5ea82101bb2fac39683e78a208d742b1a83c5fda1810357b29b6454759a36a97a0d0684be6053be39a1f291a7401a959214f45af5aced8711e9c1b341943d633d721a7ddb9930ed6b908f4f7e58c6cb51e5acea8ab6d3dd3122bd36d64fa33bd8534b81cf9c62cc21d6445211861c6eaf5904a0e17122745ac3d8ad04115526b951a593a166e940c21a7591629c2a6b8eaab350d9915482b5eb014d2fd6b95a20dc39d210356589f76e694890f34928001d754762eaef3a25d1f716bbfbc0269fe1df2e9db3e79b3bd4204c508b600981413d47d5a936ca157feeff7daeffd2d9126a31b8c7d1aa2b395435c6a88b65115e675aa998769191684ecd48db4cb3e440881fc4ca4e63fa0a9035166f9955d04d5779ef5a92b0368268136416d89d915831c4eb46b8eacdc1589e5ec8a85352d5df2a60b739b454bf17637fe9e33e0cfe7d79b1a7067e3348005f145a9737f096c6bafe0d22774c61b0a42e1fc374e25a970ed39a3fdce713dd1b33696d05fc51290f66c5d406e58a384af2046cfef412a2c74ec1db9e363b52633005655edcf7633a5b02499eb8f2feb013ba4fff707e706729b51856c91aa4e636a375715a87fecb7e132b6a17a8403428410b85305e64faf3ed2ea3e3641c19005e028acf621fcdb8adbef51622db89e1f87a365ec58db4091473ff71c7565631a769f4fa3744ede5b8bc2e3a25c7a170c48f94d27135de110b272b5d70b54ca6bce6dde0ec683121076497b28bfef2063ecc6953b84f7205bd22fe42c7e66b48b4ce35d46d36ee6fa7c07ef584fa80806c91da701cbe879e4d05b59b2dde2ec6974fd344af086987f46aa1659ba21c22f9697c2273a6e26df8d0b8fa34ebd131a24addf7a8573990d7f1f1774b6853b66a13e81203d6e86fba840ea8d71bdf8b0d99fe13e86d97743c48ed87f8ee93f76d68a2d1f7753fd38bf0b42f47417c08da86a1e51d68fb1efd934a7887507a35d9df4dc5a508ce68e0df4d415cfa51ba44b0bbdf35fe466c16628966bb12212a5584bcdc74f5c133a2ed81108cb33d260c6309e1121567465e9628eb7314862cea028ad1330a55224a41b49da46e5794b9ed8fb248b997c900454dfc5587714867e386bec01b05e509a29f6bd3d74f7e67474daa9100251c3b88377d30c763194886a8483e9fefb54051ebb74ab9c1280cd1a239d876672015de971deafb2709134b3313cccecd34d65765abf6d1b98bbc4f39ca79ec953cffa9073b634750e70a40db36296c437f49c2bfb3d0eac71b5fbe65bd", "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"}, [0x1ff, 0x5, 0x6, 0x8e82, 0x10, 0x5, 0x5, 0x6b, 0x8, 0x5, 0x0, 0x5, 0x80000000, 0xfffffffffffffffd, 0x4, 0x9, 0x1ff, 0x8, 0x3, 0x1, 0x7, 0x6, 0x8, 0x7fffffffffffffff, 0x0, 0x3, 0xb, 0x9, 0x5, 0x4, 0x539a6fb, 0xb, 0xfffffffffffffffb, 0x800, 0x2, 0x8, 0x8000000000000001, 0xfffffffffffffffd, 0x7f, 0x2, 0x541, 0x5, 0x3, 0x9, 0xfff, 0xf155, 0x4, 0x8, 0x6, 0x7, 0x7, 0x100000001, 0x9b, 0xa1c, 0x8eb, 0x3, 0x3, 0x1, 0x1, 0x1, 0x1, 0x8, 0xffffffff, 0x2]}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, 0x0) 4m31.704115519s ago: executing program 32 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sched_setscheduler(0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) r5 = getpid() syz_pidfd_open(r5, 0x0) ptrace(0x4207, r5) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0) accept4$tipc(r6, &(0x7f00000000c0)=@name, 0x0, 0x40000) r8 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f00000024c0)={0x1, 0x2, @start={r10, 0x0, "f5285e3282b3fff55d90fa8d4c3afee6086c60d677b7628fb4ccde4dfdd9730b912c0828a9024299484f90f362d0275dd0fde8011b8bcec76b91916302354fb85d36dcddbcabbc79c50bb63827e10dc8311ccae9a774ec4e7be7d91e16631866f005a20aec0d42c39ae768591bc3e40fe5ea82101bb2fac39683e78a208d742b1a83c5fda1810357b29b6454759a36a97a0d0684be6053be39a1f291a7401a959214f45af5aced8711e9c1b341943d633d721a7ddb9930ed6b908f4f7e58c6cb51e5acea8ab6d3dd3122bd36d64fa33bd8534b81cf9c62cc21d6445211861c6eaf5904a0e17122745ac3d8ad04115526b951a593a166e940c21a7591629c2a6b8eaab350d9915482b5eb014d2fd6b95a20dc39d210356589f76e694890f34928001d754762eaef3a25d1f716bbfbc0269fe1df2e9db3e79b3bd4204c508b600981413d47d5a936ca157feeff7daeffd2d9126a31b8c7d1aa2b395435c6a88b65115e675aa998769191684ecd48db4cb3e440881fc4ca4e63fa0a9035166f9955d04d5779ef5a92b0368268136416d89d915831c4eb46b8eacdc1589e5ec8a85352d5df2a60b739b454bf17637fe9e33e0cfe7d79b1a7067e3348005f145a9737f096c6bafe0d22774c61b0a42e1fc374e25a970ed39a3fdce713dd1b33696d05fc51290f66c5d406e58a384af2046cfef412a2c74ec1db9e363b52633005655edcf7633a5b02499eb8f2feb013ba4fff707e706729b51856c91aa4e636a375715a87fecb7e132b6a17a8403428410b85305e64faf3ed2ea3e3641c19005e028acf621fcdb8adbef51622db89e1f87a365ec58db4091473ff71c7565631a769f4fa3744ede5b8bc2e3a25c7a170c48f94d27135de110b272b5d70b54ca6bce6dde0ec683121076497b28bfef2063ecc6953b84f7205bd22fe42c7e66b48b4ce35d46d36ee6fa7c07ef584fa80806c91da701cbe879e4d05b59b2dde2ec6974fd344af086987f46aa1659ba21c22f9697c2273a6e26df8d0b8fa34ebd131a24addf7a8573990d7f1f1774b6853b66a13e81203d6e86fba840ea8d71bdf8b0d99fe13e86d97743c48ed87f8ee93f76d68a2d1f7753fd38bf0b42f47417c08da86a1e51d68fb1efd934a7887507a35d9df4dc5a508ce68e0df4d415cfa51ba44b0bbdf35fe466c16628966bb12212a5584bcdc74f5c133a2ed81108cb33d260c6309e1121567465e9628eb7314862cea028ad1330a55224a41b49da46e5794b9ed8fb248b997c900454dfc5587714867e386bec01b05e509a29f6bd3d74f7e67474daa9100251c3b88377d30c763194886a8483e9fefb54051ebb74ab9c1280cd1a239d876672015de971deafb2709134b3313cccecd34d65765abf6d1b98bbc4f39ca79ec953cffa9073b634750e70a40db36296c437f49c2bfb3d0eac71b5fbe65bd", "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"}, [0x1ff, 0x5, 0x6, 0x8e82, 0x10, 0x5, 0x5, 0x6b, 0x8, 0x5, 0x0, 0x5, 0x80000000, 0xfffffffffffffffd, 0x4, 0x9, 0x1ff, 0x8, 0x3, 0x1, 0x7, 0x6, 0x8, 0x7fffffffffffffff, 0x0, 0x3, 0xb, 0x9, 0x5, 0x4, 0x539a6fb, 0xb, 0xfffffffffffffffb, 0x800, 0x2, 0x8, 0x8000000000000001, 0xfffffffffffffffd, 0x7f, 0x2, 0x541, 0x5, 0x3, 0x9, 0xfff, 0xf155, 0x4, 0x8, 0x6, 0x7, 0x7, 0x100000001, 0x9b, 0xa1c, 0x8eb, 0x3, 0x3, 0x1, 0x1, 0x1, 0x1, 0x8, 0xffffffff, 0x2]}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, 0x0) 3m40.757303933s ago: executing program 2 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x20040000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setreuid(0x0, 0xee00) openat$dir(0xffffffffffffff9c, 0x0, 0x8240, 0x1aa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) ioctl$FITHAW(r5, 0xc0045878) 3m38.803012316s ago: executing program 2 (id=459): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425200000000000000008fa437e38b8200000000630000000000000000000000000000000000000000000000e91100000000ee65e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658020e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba042bb2617f5b3eb59efcdf3e9332827586e6be0cd2d7297ebd5716514942fd941c1152a8df17f7bf8d23188cc812736a6eb35f0004dde29f79717df9065381ba566751a8e1710210f00ca58ff481633fa3fbe088f86e336cce022c8e2233b79af7f3fb562f9863b2842df189b15ae659ffd7fb31258935a7d1eec82952520f62fbf0f4c8d879805ef3e6b576f5bac6cd8ad874081", @ANYRES16], 0x0, 0x11e6, &(0x7f0000002480)="$eJzs3E2LW1UcBvB/x76ZOpNRa7UF8aAb3VyaWbjRTZApSANK2witINw6NxpyTUJuGIiI1ZVbN+J3EJfuBHGnm9n4GdzNxmUX4hUTtZ0SkfFlAsPvt8kD5zzhHAKBE3Lu/sufvjfoVVkvn8baiROxNo5Id1OkWIs/fBQvvPTd909fv3nrarvT2b6W0pX2jdaLKaWNZ75584Mvn/12eu6Nrza+PhN7m2/t/7T1496FvYv7v9x4t1+lfpWGo2nK0+3RaJrfLou0068GWUqvl0VeFak/rIrJgfFeORqPZykf7qw3xpOiqlI+nKVBMUvTUZpOZil/J+8PU5Zlab0R/BvdL+7WdR1R16fidNR1XT8cjTgXj8R6bEQzNuPReCwej/PxRFyIJ+OpuDiftep1AwAAAAAAAAAAAAAAAAAAwPHi/j8AAAAAAAAAAAAAAAAAAACs3vWbt662O53taymdjSg/2e3udhevi/F2L/pRRhGXoxk/x/z2/8IiX3m1s305zW3Gx+Wd3/t3drsPHey35o8TWNpvLfrpYP9MNO7vb0Uzzi/vby3tn43nn7uvn0Uzfng7RlHGTvzWvdf/sJXSK691Huhfms8DAACA4yBLf1p6fs+yvxpf9A/x+8AD5+uTcenkavdORDV7f5CXZTH5z8OpWITT8c/e5/PPIv6XhQmC8Ldh1d9MHIV7H/qqVwIAAAAAAAAAAMBhHMXfCVe9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//6HfTNQ==") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m36.986209657s ago: executing program 2 (id=465): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB='nls=macinuit,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00'], 0x3, 0x6b9, &(0x7f0000000a00)="$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") getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r3, &(0x7f00000010c0)=""/201, 0xc9) 3m35.876465474s ago: executing program 2 (id=467): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f00000004c0)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="2c000927ef269377351f90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d392e87c4a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e0000000000000003ba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62157c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3685866dd7f9815938b1c26483b3f4a66e63899ad4f1472b03a04af1c9e9f1e7f9308ca8142c0be4034ade829583c86e0018b1bdb63c3b9ca563c66ff54c9deeb26b29bd1e949a83ad9a30041cb8a5fd16a721a1eddd3f6672ba9d94bf3d1f524c74b237b9842ebab9999a5630feebefb3c2e4b8fabe8666994eb4fa2d09c75f2fbdb4f678a5fd84fe09d6a5538ab6b83cc015c2bd755b01741bfdd013e906089174acfc35c1f82a3b989fed240002b76c3052be4e47837284d15b922e437877899254326968b23b462eff598f292d062fc14557a1695df832c8b47a7d1db1ad08aaaba6e13388100d6b432c6952dc9"], 0x1, 0xc32, &(0x7f0000009100)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m34.596002402s ago: executing program 2 (id=470): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3m33.211983201s ago: executing program 2 (id=477): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB='nls=macinuit,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00'], 0x3, 0x6b9, &(0x7f0000000a00)="$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") getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r3, &(0x7f00000010c0)=""/201, 0xc9) 3m32.670995915s ago: executing program 33 (id=477): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB='nls=macinuit,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00'], 0x3, 0x6b9, &(0x7f0000000a00)="$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") getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r3, &(0x7f00000010c0)=""/201, 0xc9) 2m19.211213692s ago: executing program 0 (id=693): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x48902) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") 2m14.561147892s ago: executing program 0 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000058, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x5, 0x1, "166a7b4c234df203b4f620c753ec3cb3a59175ed46b05aef5258ae2725390001", 0xd41766323bdc69d2}) mkdir(0x0, 0x10b) rename(&(0x7f0000000080)='./file0\x00', 0x0) 2m14.316137794s ago: executing program 0 (id=705): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2m12.844055873s ago: executing program 0 (id=710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x80184132, 0xfffffffffffffffe) 2m11.968985008s ago: executing program 0 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0102000000010000000002"], 0x14}}, 0x0) 2m11.72512427s ago: executing program 0 (id=717): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 1m56.634711306s ago: executing program 34 (id=717): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 10.86397038s ago: executing program 1 (id=1015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x5, 0x1, "166a7b4c234df203b4f620c753ec3cb3a59175ed46b05aef5258ae2725390001", 0xd41766323bdc69d2}) mkdir(0x0, 0x10b) rename(&(0x7f0000000080)='./file0\x00', 0x0) 10.783075851s ago: executing program 1 (id=1016): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) read$watch_queue(r6, &(0x7f0000000380)=""/205, 0xcd) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r7 = syz_io_uring_setup(0x1d1f, &(0x7f00000002c0)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_io_uring_submit(r8, r9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000000c0)={0x20, 0x1, 0x8, 0x8, 0xec, 0x3, 0x0}) 7.533882152s ago: executing program 7 (id=1023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4}]}, 0x10) 7.317777053s ago: executing program 7 (id=1027): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r2, 0x1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) 7.019523445s ago: executing program 5 (id=1029): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) 6.931580106s ago: executing program 1 (id=1030): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) listen(r1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getpid() syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6.406448549s ago: executing program 7 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 6.027676251s ago: executing program 6 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x48, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x5, 0x80000001, 0x4, 0x6ed9d8df}, 0x4, 0x1ac, 0x4, 0x2, 0x7, 0xb, 0x18, 0x12, 0x6, 0x4, {0xb8e2, 0x5, 0x7ff, 0x6}}}}]}, 0x78}}, 0x4000010) 5.968522171s ago: executing program 6 (id=1033): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") 5.911728912s ago: executing program 1 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffffff, 0x0, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020) 4.839313999s ago: executing program 1 (id=1037): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x9, 0xcc, 0xc7, 0x5, 0xfd, 0x3, 0x0, 0xe3, 0x40, 0xdd, 0x3, 0x9, 0xb3, 0x4}, 0xe) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x48, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ftruncate(r3, 0x2007ffc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r3, 0x0, r8, 0x0, 0xfffffbffa003e45b, 0x700000000000000) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 4.259996772s ago: executing program 4 (id=1041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r2, 0x1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) 3.214438259s ago: executing program 4 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x100300, 0x0, 0x3, 0x9, 0x9, 0x7}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x202010, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@appraise_type}, {@fowner_gt={'fowner>', r2}}, {@hash}, {@fowner_lt={'fowner<', r2}}]}}) setreuid(r2, 0x0) getpriority(0x2, r3) 3.09530065s ago: executing program 4 (id=1043): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000f40)=""/192, 0xc0}, {&(0x7f0000001040)=""/4071, 0xfe7}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000a00)=""/208, 0xd0}], 0x9}, 0x122) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.984971961s ago: executing program 5 (id=1044): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getpid() syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.784015752s ago: executing program 4 (id=1045): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 2.709511522s ago: executing program 7 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r1], 0x0) 2.360221935s ago: executing program 6 (id=1047): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66e", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.944006377s ago: executing program 6 (id=1048): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.929092847s ago: executing program 5 (id=1049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000058, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x5, 0x1, "166a7b4c234df203b4f620c753ec3cb3a59175ed46b05aef5258ae2725390001", 0xd41766323bdc69d2}) mkdir(0x0, 0x10b) rename(&(0x7f0000000080)='./file0\x00', 0x0) 1.823891018s ago: executing program 5 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}}, 0x800) 1.811823838s ago: executing program 6 (id=1051): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5, 0xd, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) writev(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x4, &(0x7f00000001c0)={&(0x7f0000000140)="44dfa3998999998f083087649e0d0036660f38df2b660fbab97500000000c3c4a37905d708f246ad66450f28e20f9218c401f5e84c5700", 0x50000003, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000280)={0xc9, 0x0, 0xc}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0xc894}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x6, 0x3, 0x0, 0x9e, 0x2, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400fff, 0x14000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x20000005, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.787565688s ago: executing program 5 (id=1052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r2, 0x1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) 854.962254ms ago: executing program 4 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x100300, 0x0, 0x3, 0x9, 0x9, 0x7}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x202010, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}], [{@appraise_type}, {@fowner_gt={'fowner>', r2}}, {@hash}, {@fowner_lt={'fowner<', r2}}]}}) setreuid(r2, 0x0) getpriority(0x2, r3) 784.574775ms ago: executing program 5 (id=1054): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) 619.850245ms ago: executing program 4 (id=1055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd", 0xa}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 619.543135ms ago: executing program 6 (id=1056): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 238.627338ms ago: executing program 7 (id=1057): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x5, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 179.022529ms ago: executing program 1 (id=1058): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") 0s ago: executing program 7 (id=1059): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getpid() syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 31590][ T4436] Symlink component flag not implemented [ 85.948723][ T4436] Symlink component flag not implemented (128) [ 85.957148][ T4436] Symlink component flag not implemented (122) [ 86.260463][ T4429] sctp: failed to load transform for md5: -2 [ 86.361822][ T4431] F2FS-fs (loop2): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 86.783464][ T7] cfg80211: failed to load regulatory.db [ 86.924273][ T4288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.950713][ T4442] loop4: detected capacity change from 0 to 64 [ 88.499693][ T4288] usb 3-1: Using ep0 maxpacket: 32 [ 88.626471][ T4288] usb 3-1: device descriptor read/all, error -71 [ 89.730817][ T4459] loop0: detected capacity change from 0 to 1024 [ 89.746845][ T4463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.44'. [ 89.813644][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 90.281412][ T4478] netlink: 220 bytes leftover after parsing attributes in process `syz.3.48'. [ 91.187944][ T4490] loop4: detected capacity change from 0 to 64 [ 91.821183][ T4495] loop0: detected capacity change from 0 to 64 [ 91.995083][ T4495] hfs: unable to parse mount options [ 93.126873][ T4495] loop0: detected capacity change from 0 to 40427 [ 93.149102][ T4495] F2FS-fs (loop0): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 94.673801][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.242437][ T4525] netlink: 220 bytes leftover after parsing attributes in process `syz.2.62'. [ 96.824875][ T4522] loop4: detected capacity change from 0 to 262144 [ 96.839135][ T4516] loop0: detected capacity change from 0 to 1024 [ 96.928869][ T4522] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.59 (4522) [ 97.517141][ T4536] loop1: detected capacity change from 0 to 512 [ 97.565564][ T4522] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 97.575129][ T4522] BTRFS info (device loop4): using free space tree [ 97.581691][ T4522] BTRFS info (device loop4): has skinny extents [ 97.587986][ T4522] BTRFS info (device loop4): flagging fs with big metadata feature [ 97.639733][ T4536] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.65: inode has both inline data and extents flags [ 97.763950][ T4536] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.65: couldn't read orphan inode 15 (err -117) [ 98.793279][ T4536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.626178][ T4522] BTRFS error (device loop4): open_ctree failed: -12 [ 99.626412][ T4503] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by udevd (4503) [ 99.772834][ T4571] loop3: detected capacity change from 0 to 64 [ 99.944487][ T4571] hfs: unable to parse mount options [ 100.761213][ T4571] loop3: detected capacity change from 0 to 40427 [ 100.778767][ T4578] loop1: detected capacity change from 0 to 64 [ 100.944150][ T4571] F2FS-fs (loop3): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 103.150598][ T4288] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.285354][ T4600] netlink: 220 bytes leftover after parsing attributes in process `syz.2.75'. [ 103.901011][ T4288] usb 4-1: device not accepting address 2, error -71 [ 104.379182][ T4605] loop3: detected capacity change from 0 to 1024 [ 105.841410][ T4627] loop1: detected capacity change from 0 to 64 [ 106.924986][ T4634] loop2: detected capacity change from 0 to 1024 [ 108.341407][ T4641] loop0: detected capacity change from 0 to 64 [ 108.352743][ T26] audit: type=1800 audit(1762252287.124:2): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="memory.events" dev="loop2" ino=26 res=0 errno=0 [ 108.465983][ T4641] hfs: unable to parse mount options [ 108.584845][ T4400] hfsplus: b-tree write err: -5, ino 4 [ 108.874333][ T4644] loop3: detected capacity change from 0 to 40427 [ 108.924769][ T4644] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 108.932673][ T4644] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.073898][ T4644] F2FS-fs (loop3): invalid crc value [ 109.158132][ T4641] loop0: detected capacity change from 0 to 40427 [ 109.178299][ T4644] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.243388][ T4641] F2FS-fs (loop0): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 109.410180][ T4644] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.417708][ T4644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.014955][ T26] audit: type=1800 audit(1762252288.484:3): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 110.433829][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.891621][ T4663] loop1: detected capacity change from 0 to 1024 [ 110.925429][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 111.124554][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.447182][ T21] usb 1-1: config 0 has no interfaces? [ 111.461585][ T21] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 111.598070][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.682081][ T21] usb 1-1: config 0 descriptor?? [ 112.268242][ T4678] loop2: detected capacity change from 0 to 512 [ 112.276981][ T4679] loop1: detected capacity change from 0 to 1024 [ 112.462546][ T4678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.578794][ T4678] EXT4-fs (loop2): 1 truncate cleaned up [ 112.614211][ T21] usb 1-1: can't set config #0, error -71 [ 112.631934][ T21] usb 1-1: USB disconnect, device number 3 [ 112.690710][ T4678] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,grpjquota=,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 112.712155][ T4679] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.734150][ T4679] EXT4-fs (loop1): inline encryption not supported [ 112.902691][ T4679] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 114.187711][ T4679] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 114.841479][ T4719] loop4: detected capacity change from 0 to 1024 [ 115.264976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802badf800: rx timeout, send abort [ 115.391708][ T4726] loop0: detected capacity change from 0 to 40427 [ 115.398705][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802badf800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.152693][ T4726] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.160594][ T4726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.173334][ T4726] F2FS-fs (loop0): invalid crc value [ 116.309868][ T4735] loop4: detected capacity change from 0 to 512 [ 116.334912][ T4726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.381490][ T4726] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.389337][ T4726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.807101][ T26] audit: type=1800 audit(1762252295.574:4): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 117.234032][ T4745] loop2: detected capacity change from 0 to 64 [ 117.366261][ T4735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.545488][ T4745] hfs: unable to parse mount options [ 117.565455][ T4735] EXT4-fs (loop4): 1 truncate cleaned up [ 117.574478][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,grpjquota=,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 117.849945][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.858469][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.162721][ T4771] loop0: detected capacity change from 0 to 1024 [ 121.187085][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.339306][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.687535][ T4778] loop1: detected capacity change from 0 to 64 [ 122.893510][ T4706] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.902565][ T4706] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.912092][ T4706] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.921603][ T4706] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.957557][ T4789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.901372][ T4796] loop4: detected capacity change from 0 to 40427 [ 124.732674][ T4796] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.742023][ T4796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.757559][ T4796] F2FS-fs (loop4): invalid crc value [ 124.785410][ T4796] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.880873][ T4796] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.888508][ T4796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.092833][ T4811] loop1: detected capacity change from 0 to 2048 [ 125.303830][ T26] audit: type=1800 audit(1762252303.954:5): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.127" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 125.920069][ T4811] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 129.620816][ T4841] loop0: detected capacity change from 0 to 512 [ 129.875962][ T4841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.945826][ T4841] EXT4-fs (loop0): 1 truncate cleaned up [ 129.951542][ T4841] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,grpjquota=,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 130.051579][ T4847] loop4: detected capacity change from 0 to 256 [ 130.056738][ T4845] loop3: detected capacity change from 0 to 64 [ 130.109649][ T4847] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 130.170616][ T4845] hfs: unable to parse mount options [ 130.179422][ T4849] loop2: detected capacity change from 0 to 64 [ 130.219405][ T26] audit: type=1800 audit(1762252308.994:6): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file2" dev="loop4" ino=1048590 res=0 errno=0 [ 131.253154][ T4857] loop4: detected capacity change from 0 to 512 [ 132.570694][ T4866] loop1: detected capacity change from 0 to 40427 [ 132.648676][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657647][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055009][ T4866] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 133.062790][ T4866] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.140680][ T4866] F2FS-fs (loop1): invalid crc value [ 133.196236][ T4866] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.244890][ T4866] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.251990][ T4866] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.663936][ T26] audit: type=1800 audit(1762252312.284:7): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 135.602502][ T4894] loop0: detected capacity change from 0 to 2048 [ 135.740551][ T4894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.588773][ T4905] loop0: detected capacity change from 0 to 1024 [ 137.317048][ T26] audit: type=1800 audit(1762252316.094:8): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="memory.events" dev="loop0" ino=26 res=0 errno=0 [ 137.661458][ T156] hfsplus: b-tree write err: -5, ino 4 [ 138.618125][ T4916] loop4: detected capacity change from 0 to 64 [ 138.674679][ T4916] hfs: unable to parse mount options [ 139.397543][ T4924] loop0: detected capacity change from 0 to 1024 [ 139.528827][ T4911] loop1: detected capacity change from 0 to 32768 [ 139.602150][ T4911] XFS (loop1): Mounting V5 Filesystem [ 139.636494][ T4924] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.649932][ T2284] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.991029][ T4911] XFS (loop1): Ending clean mount [ 141.009907][ T4911] XFS (loop1): Quotacheck needed: Please wait. [ 141.023821][ T2284] usb 5-1: Using ep0 maxpacket: 32 [ 141.100765][ T4911] XFS (loop1): Quotacheck: Done. [ 141.173017][ T2284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.985042][ T2284] usb 5-1: config 0 has no interfaces? [ 142.028454][ T2284] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 142.078263][ T2284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.156550][ T2284] usb 5-1: config 0 descriptor?? [ 142.216095][ T2284] usb 5-1: can't set config #0, error -71 [ 142.265436][ T2284] usb 5-1: USB disconnect, device number 2 [ 142.421037][ T4183] XFS (loop1): Unmounting Filesystem [ 143.735628][ T4967] loop0: detected capacity change from 0 to 64 [ 145.406679][ T4980] loop3: detected capacity change from 0 to 64 [ 145.974579][ T4980] hfs: unable to parse mount options [ 146.464430][ T4992] loop2: detected capacity change from 0 to 32768 [ 146.972401][ T4980] loop3: detected capacity change from 0 to 40427 [ 147.037880][ T4992] XFS (loop2): Mounting V5 Filesystem [ 147.056815][ T4980] F2FS-fs (loop3): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 147.067421][ T4999] ./cgroup: Can't open blockdev [ 147.102777][ T4994] crypto_alloc_aead failed rc=-2 [ 147.508551][ T4992] XFS (loop2): Ending clean mount [ 147.516974][ T4992] XFS (loop2): Quotacheck needed: Please wait. [ 147.744401][ T4992] XFS (loop2): Quotacheck: Done. [ 147.883926][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.184006][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 148.351975][ T4187] XFS (loop2): Unmounting Filesystem [ 148.374355][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.499638][ T4232] usb 4-1: config 0 has no interfaces? [ 148.539214][ T4232] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 148.777379][ T5075] loop0: detected capacity change from 0 to 40427 [ 148.784489][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.806164][ T4232] usb 4-1: config 0 descriptor?? [ 148.837155][ T4232] usb 4-1: can't set config #0, error -71 [ 148.863396][ T5075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.871195][ T5075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.881560][ T5075] F2FS-fs (loop0): invalid crc value [ 148.901731][ T4232] usb 4-1: USB disconnect, device number 4 [ 148.975642][ T5075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.016620][ T5075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 149.023846][ T5075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.999255][ T26] audit: type=1800 audit(1762252328.064:9): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 151.931691][ T5102] loop2: detected capacity change from 0 to 1024 [ 152.288222][ T5104] hfsplus: bad catalog entry type [ 152.924619][ T4208] hfsplus: b-tree write err: -5, ino 4 [ 153.211569][ T5106] bond0: (slave bond_slave_0): Releasing backup interface [ 154.558772][ T5119] loop1: detected capacity change from 0 to 64 [ 154.784619][ T5119] hfs: unable to parse mount options [ 156.712543][ T5133] loop4: detected capacity change from 0 to 40427 [ 157.326569][ T5133] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.334458][ T5133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.358152][ T5133] F2FS-fs (loop4): invalid crc value [ 157.432005][ T5133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.490283][ T5133] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.497457][ T5133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.764528][ T26] audit: type=1800 audit(1762252336.514:10): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.199" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 158.774737][ T5150] loop2: detected capacity change from 0 to 65536 [ 159.047820][ T5150] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 159.056328][ T5150] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 159.065005][ T5150] XFS (loop2): Mounting V5 Filesystem [ 159.922934][ T5150] XFS (loop2): Ending clean mount [ 159.935755][ T5150] XFS (loop2): Quotacheck needed: Please wait. [ 159.985260][ T5150] XFS (loop2): Quotacheck: Done. [ 160.584684][ T5169] fuse: Unknown parameter '0x0000000000000003' [ 161.175470][ T4187] XFS (loop2): Unmounting Filesystem [ 164.427814][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.484593][ T5196] loop2: detected capacity change from 0 to 64 [ 164.751015][ T5196] hfs: unable to parse mount options [ 165.014441][ T21] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 165.092126][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.360716][ T21] usb 4-1: Product: syz [ 165.365503][ T21] usb 4-1: Manufacturer: syz [ 165.370207][ T21] usb 4-1: SerialNumber: syz [ 165.411449][ T21] usb 4-1: config 0 descriptor?? [ 165.682798][ T5207] loop1: detected capacity change from 0 to 40427 [ 165.722777][ T21] usb 4-1: USB disconnect, device number 5 [ 165.776740][ T5207] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 165.784581][ T5207] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.807295][ T5207] F2FS-fs (loop1): invalid crc value [ 165.885491][ T5207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.949170][ T5207] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.956317][ T5207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.099327][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.524370][ T26] audit: type=1800 audit(1762252344.974:11): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 167.243311][ T5205] loop2: detected capacity change from 0 to 40427 [ 167.452130][ T5205] F2FS-fs (loop2): Unrecognized mount option "checõ§Åý¯e˜isable" or missing value [ 170.740050][ T5236] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 170.748629][ T5236] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.321212][ T5245] loop0: detected capacity change from 0 to 512 [ 172.418980][ T5245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.505231][ T5244] loop4: detected capacity change from 0 to 8192 [ 172.585115][ T5245] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.225: invalid indirect mapped block 4294967295 (level 0) [ 172.666999][ T5245] EXT4-fs (loop0): Remounting filesystem read-only [ 173.196313][ T5245] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.225: invalid indirect mapped block 4294967295 (level 1) [ 173.222237][ T5245] EXT4-fs (loop0): Remounting filesystem read-only [ 173.701123][ T5245] EXT4-fs (loop0): 1 orphan inode deleted [ 173.712395][ T5245] EXT4-fs (loop0): 1 truncate cleaned up [ 173.718394][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 174.272080][ T5263] loop3: detected capacity change from 0 to 64 [ 174.538339][ T5263] hfs: unable to parse mount options [ 176.433789][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 176.669571][ T5274] loop0: detected capacity change from 0 to 32768 [ 176.683860][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 176.731891][ T5274] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by syz.0.233 (5274) [ 176.786380][ T5274] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 176.814260][ T21] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 176.825782][ T5274] BTRFS info (device loop0): using free space tree [ 176.834595][ T5274] BTRFS info (device loop0): has skinny extents [ 176.844355][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.881730][ T21] usb 2-1: config 0 descriptor?? [ 176.984434][ T21] as10x_usb: device has been detected [ 177.016369][ T21] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 177.180845][ T21] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 177.260904][ T5274] BTRFS info (device loop0): enabling ssd optimizations [ 177.324095][ T21] as10x_usb: error during firmware upload part1 [ 177.333600][ T21] Registered device nBox DVB-T Dongle [ 177.348939][ T21] usb 2-1: USB disconnect, device number 2 [ 177.397189][ T21] Unregistered device nBox DVB-T Dongle [ 177.413115][ T21] as10x_usb: device has been disconnected [ 177.453069][ T26] audit: type=1800 audit(1762252356.224:12): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 177.929601][ T5304] loop1: detected capacity change from 0 to 1024 [ 178.119421][ T5306] loop3: detected capacity change from 0 to 512 [ 178.232493][ T5306] EXT4-fs (loop3): Ignoring removed bh option [ 179.043895][ T5306] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue. Quota mode: writeback. [ 179.143934][ T5306] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.858020][ T5330] loop4: detected capacity change from 0 to 1024 [ 181.415125][ T5351] loop2: detected capacity change from 0 to 64 [ 181.460301][ T5351] hfs: unable to parse mount options [ 181.528047][ T5353] loop0: detected capacity change from 0 to 1024 [ 181.692206][ T5353] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 181.736149][ T5353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 181.791155][ T5353] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,noblock_validity,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 181.942710][ T5362] loop4: detected capacity change from 0 to 1024 [ 182.102418][ T5364] loop3: detected capacity change from 0 to 512 [ 182.179440][ T5362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.224288][ T5364] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.004055][ T4238] Bluetooth: hci2: command 0x0406 tx timeout [ 186.050569][ T4238] Bluetooth: hci0: command 0x0406 tx timeout [ 186.102222][ T4238] Bluetooth: hci3: command 0x0406 tx timeout [ 186.152683][ T4238] Bluetooth: hci4: command 0x0406 tx timeout [ 186.176791][ T4238] Bluetooth: hci1: command 0x0406 tx timeout [ 186.370486][ T5411] loop1: detected capacity change from 0 to 40427 [ 186.431527][ T5411] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 186.439403][ T5411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 186.454182][ T5411] F2FS-fs (loop1): invalid crc value [ 186.489996][ T5411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.538697][ T5411] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 186.545856][ T5411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.443866][ T26] audit: type=1800 audit(1762252365.574:13): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 187.931666][ T5421] netlink: 'syz.2.267': attribute type 29 has an invalid length. [ 187.968598][ T5421] netlink: 'syz.2.267': attribute type 29 has an invalid length. [ 187.982399][ T5422] netlink: 'syz.2.267': attribute type 29 has an invalid length. [ 188.098813][ T5413] loop0: detected capacity change from 0 to 32768 [ 188.249170][ T5413] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.266 (5413) [ 188.455219][ T5413] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.935095][ T5413] BTRFS info (device loop0): using free space tree [ 188.959571][ T5413] BTRFS info (device loop0): has skinny extents [ 190.399119][ T4183] attempt to access beyond end of device [ 190.399119][ T4183] loop1: rw=2049, want=40968, limit=40427 [ 191.209369][ T5413] BTRFS error (device loop0): open_ctree failed: -22 [ 193.949438][ T5494] loop2: detected capacity change from 0 to 1024 [ 194.008031][ T5497] loop4: detected capacity change from 0 to 128 [ 194.096604][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.102960][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.124134][ T5061] hfsplus: b-tree write err: -5, ino 4 [ 197.414335][ T5520] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.649131][ T5524] loop2: detected capacity change from 0 to 40427 [ 197.704368][ T5524] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 197.712145][ T5524] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.722321][ T5524] F2FS-fs (loop2): invalid crc value [ 197.790863][ T5524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.825605][ T5524] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 197.832676][ T5524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.749219][ T26] audit: type=1800 audit(1762252376.854:14): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.289" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 198.776494][ T5535] loop4: detected capacity change from 0 to 128 [ 199.825520][ T5543] attempt to access beyond end of device [ 199.825520][ T5543] loop4: rw=2049, want=222, limit=128 [ 201.135352][ T5560] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 203.842879][ T5582] syz.1.305 (5582) used greatest stack depth: 17696 bytes left [ 204.176717][ T5585] loop1: detected capacity change from 0 to 2048 [ 204.985701][ T5585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.338683][ T5594] loop2: detected capacity change from 0 to 40427 [ 205.442654][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 205.472421][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 205.498234][ T5600] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.566284][ T5594] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 205.574109][ T5594] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.284171][ T5594] F2FS-fs (loop2): invalid crc value [ 206.388566][ T5594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.532501][ T5594] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 206.540244][ T5594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.649264][ T5629] loop0: detected capacity change from 0 to 256 [ 209.426508][ T5642] loop4: detected capacity change from 0 to 2048 [ 210.178081][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.290324][ T5648] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 212.850657][ T5664] bridge0: port 3(gretap0) entered blocking state [ 212.883181][ T5664] bridge0: port 3(gretap0) entered disabled state [ 212.950856][ T5664] device gretap0 entered promiscuous mode [ 212.978445][ T5664] bridge0: port 3(gretap0) entered blocking state [ 212.985460][ T5664] bridge0: port 3(gretap0) entered forwarding state [ 213.229329][ T5668] loop1: detected capacity change from 0 to 40427 [ 213.249377][ T5667] device gretap0 left promiscuous mode [ 213.277211][ T5668] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 213.285122][ T5668] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.301035][ T5668] F2FS-fs (loop1): invalid crc value [ 213.353394][ T5667] bridge0: port 3(gretap0) entered disabled state [ 213.450893][ T5668] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.727663][ T5668] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 213.735132][ T5668] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.035910][ T5675] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 214.363867][ T26] audit: type=1800 audit(1762252392.894:15): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 214.910382][ T5692] loop2: detected capacity change from 0 to 2048 [ 215.041971][ T5692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.051184][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 215.145924][ T5676] chnl_net:caif_netlink_parms(): no params data found [ 215.333779][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 215.474143][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.501511][ T23] usb 1-1: config 0 has no interface number 0 [ 215.508911][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.561256][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.577566][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.604078][ T4238] Bluetooth: hci5: command 0x0409 tx timeout [ 215.672687][ T23] usb 1-1: config 0 descriptor?? [ 215.855780][ T23] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 216.136016][ T4238] usb 1-1: USB disconnect, device number 4 [ 216.175987][ T5689] loop0: detected capacity change from 0 to 1024 [ 217.104868][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.144991][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.171129][ T5676] device bridge_slave_0 entered promiscuous mode [ 217.204137][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 217.221419][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.242646][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.466198][ T5676] device bridge_slave_1 entered promiscuous mode [ 217.552236][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.585719][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.616841][ T5676] team0: Port device team_slave_0 added [ 217.625309][ T5676] team0: Port device team_slave_1 added [ 217.691569][ T5721] netlink: 220 bytes leftover after parsing attributes in process `syz.4.339'. [ 217.701277][ T5309] Bluetooth: hci5: command 0x041b tx timeout [ 217.982365][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.022509][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.113623][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.127407][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.134464][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.160826][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.173461][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.180933][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.661327][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.722644][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.813725][ T23] usb 2-1: Product: syz [ 218.823409][ T23] usb 2-1: Manufacturer: syz [ 218.828290][ T23] usb 2-1: SerialNumber: syz [ 218.966416][ T23] usb 2-1: config 0 descriptor?? [ 219.030077][ T23] usb 2-1: selecting invalid altsetting 0 [ 219.577038][ T5743] loop1: detected capacity change from 0 to 512 [ 219.764189][ T4238] Bluetooth: hci5: command 0x040f tx timeout [ 220.394200][ T23] usb 2-1: USB disconnect, device number 3 [ 220.572523][ T5747] loop2: detected capacity change from 0 to 1024 [ 220.672879][ T5676] device hsr_slave_0 entered promiscuous mode [ 220.684539][ T5676] device hsr_slave_1 entered promiscuous mode [ 220.885331][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.943126][ T5676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.262661][ T5676] Cannot create hsr debugfs directory [ 221.511370][ T5753] loop4: detected capacity change from 0 to 64 [ 221.943543][ T5756] loop1: detected capacity change from 0 to 256 [ 222.160103][ T5756] FAT-fs (loop1): Directory bread(block 64) failed [ 222.232393][ T4238] Bluetooth: hci5: command 0x0419 tx timeout [ 222.239692][ T5756] FAT-fs (loop1): Directory bread(block 65) failed [ 222.259780][ T5756] FAT-fs (loop1): Directory bread(block 66) failed [ 222.266683][ T5756] FAT-fs (loop1): Directory bread(block 67) failed [ 222.274141][ T5756] FAT-fs (loop1): Directory bread(block 68) failed [ 222.280816][ T5756] FAT-fs (loop1): Directory bread(block 69) failed [ 222.291052][ T5756] FAT-fs (loop1): Directory bread(block 70) failed [ 222.324765][ T5756] FAT-fs (loop1): Directory bread(block 71) failed [ 222.331503][ T5756] FAT-fs (loop1): Directory bread(block 72) failed [ 222.366544][ T5756] FAT-fs (loop1): Directory bread(block 73) failed [ 222.497091][ T5766] loop4: detected capacity change from 0 to 1024 [ 222.667978][ T5676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.881076][ T5772] hfsplus: bad catalog entry type [ 223.831932][ T5676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.857609][ T5069] hfsplus: b-tree write err: -5, ino 4 [ 223.872737][ T5676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.942953][ T5676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.951722][ T4208] attempt to access beyond end of device [ 223.951722][ T4208] loop1: rw=1, want=1480, limit=256 [ 224.141950][ T5783] loop2: detected capacity change from 0 to 40427 [ 224.167116][ T5786] loop4: detected capacity change from 0 to 512 [ 224.189010][ T5783] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 224.196975][ T5783] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 224.207913][ T5783] F2FS-fs (loop2): invalid crc value [ 224.232131][ T5786] EXT4-fs (loop4): Ignoring removed bh option [ 224.278367][ T4208] attempt to access beyond end of device [ 224.278367][ T4208] loop1: rw=1, want=1832, limit=256 [ 224.301290][ T5783] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.380710][ T5783] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 224.388143][ T5783] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 224.417361][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 224.431501][ T4208] attempt to access beyond end of device [ 224.431501][ T4208] loop1: rw=1, want=5856, limit=256 [ 224.442665][ T5786] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.887206][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.892313][ T4386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 226.902362][ T5819] loop4: detected capacity change from 0 to 764 [ 226.909534][ T4386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 226.971874][ T5815] Zero length message leads to an empty skb [ 227.052303][ T5819] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.065843][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.114403][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.164950][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.218163][ T5821] loop1: detected capacity change from 0 to 1024 [ 227.238877][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.260093][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.316572][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.323745][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.413731][ T5469] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 227.552404][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.571000][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.797519][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.859479][ T5469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.043937][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.051092][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.068959][ T5469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.101160][ T5825] loop0: detected capacity change from 0 to 2048 [ 228.143785][ T5469] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 228.163972][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.209068][ T5825] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.229053][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.229821][ T5469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.238160][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.256115][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.264913][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.273810][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.283971][ T5825] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 228.294332][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.310319][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.323425][ T5469] usb 5-1: config 0 descriptor?? [ 228.371659][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.405791][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.425550][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.550210][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.639687][ T5839] loop2: detected capacity change from 0 to 16 [ 228.650828][ T5838] loop0: detected capacity change from 0 to 1024 [ 228.668143][ T5052] device hsr_slave_0 left promiscuous mode [ 228.685105][ T5469] usbhid 5-1:0.0: can't add hid device: -71 [ 228.696129][ T5469] usbhid: probe of 5-1:0.0 failed with error -71 [ 228.703475][ T5052] device hsr_slave_1 left promiscuous mode [ 228.712886][ T5839] erofs: (device loop2): mounted with root inode @ nid 36. [ 228.753986][ T5052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.771933][ T5469] usb 5-1: USB disconnect, device number 3 [ 228.789595][ T5052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.874063][ T5835] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.924246][ T5835] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 228.971621][ T5835] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 228.978233][ T5052] device bridge_slave_1 left promiscuous mode [ 229.017018][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.091047][ T5846] hfsplus: bad catalog entry type [ 229.524739][ T5052] device bridge_slave_0 left promiscuous mode [ 229.603911][ T5063] hfsplus: b-tree write err: -5, ino 4 [ 229.834610][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.406363][ T5832] loop1: detected capacity change from 0 to 32768 [ 230.560309][ T5835] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 231.345290][ T5835] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 231.358841][ T5835] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 231.411765][ T5832] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 231.602060][ T5832] JBD2: recovery failed [ 232.028115][ T5832] (syz.1.363,5832,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 232.057954][ T5832] (syz.1.363,5832,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 232.068227][ T5832] (syz.1.363,5832,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 232.070794][ T5052] team0 (unregistering): Port device team_slave_1 removed [ 232.076040][ T5832] (syz.1.363,5832,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 232.102655][ T5832] (syz.1.363,5832,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 232.122967][ T5052] team0 (unregistering): Port device team_slave_0 removed [ 232.161289][ T5052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.188567][ T5052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.337177][ T5052] bond0 (unregistering): Released all slaves [ 233.076530][ T5852] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 233.419564][ T5878] loop1: detected capacity change from 0 to 4096 [ 233.547229][ T5878] ntfs3: Unknown parameter 'windows_names' [ 233.662608][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.690883][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.789079][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.954886][ T5894] loop4: detected capacity change from 0 to 128 [ 234.051940][ T5894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 234.094218][ T5896] loop1: detected capacity change from 0 to 1024 [ 234.122408][ T5894] hpfs: filesystem error: improperly stopped [ 234.168688][ T5894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 234.213995][ T5894] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 234.253432][ T5894] hpfs: You really don't want any checks? You are crazy... [ 234.279998][ T5894] hpfs: hpfs_map_sector(): read error [ 234.373730][ T5894] hpfs: code page support is disabled [ 234.379979][ T5894] hpfs: hpfs_map_4sectors(): unaligned read [ 234.414323][ T5894] hpfs: hpfs_map_4sectors(): unaligned read [ 234.420688][ T5894] hpfs: filesystem error: unable to find root dir [ 234.476459][ T5906] hfsplus: bad catalog entry type [ 235.075902][ T4538] hfsplus: b-tree write err: -5, ino 4 [ 235.274157][ T5917] loop1: detected capacity change from 0 to 164 [ 235.444910][ T5917] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 236.655327][ T5928] loop4: detected capacity change from 0 to 128 [ 236.929387][ T5928] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 236.945612][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.991933][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.067441][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.097578][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.158390][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.182400][ T5937] loop4: detected capacity change from 0 to 64 [ 237.304957][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.364423][ T5676] device veth0_vlan entered promiscuous mode [ 237.479762][ T5939] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.040455][ T5676] device veth1_vlan entered promiscuous mode [ 238.074647][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.454306][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.485736][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.565225][ T5676] device veth0_macvtap entered promiscuous mode [ 238.660242][ T5676] device veth1_macvtap entered promiscuous mode [ 238.830917][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.922843][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.039738][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.060747][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.081461][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.122689][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.157194][ T5951] loop1: detected capacity change from 0 to 256 [ 239.210564][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.259300][ T5953] loop4: detected capacity change from 0 to 1024 [ 239.273818][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.291272][ T5955] loop0: detected capacity change from 0 to 64 [ 239.335743][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.346429][ T5951] FAT-fs (loop1): Directory bread(block 64) failed [ 239.370293][ T5948] loop2: detected capacity change from 0 to 4096 [ 239.379621][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.397718][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.402428][ T5951] FAT-fs (loop1): Directory bread(block 65) failed [ 239.416550][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.429569][ T5951] FAT-fs (loop1): Directory bread(block 66) failed [ 239.452018][ T5951] FAT-fs (loop1): Directory bread(block 67) failed [ 239.485549][ T5951] FAT-fs (loop1): Directory bread(block 68) failed [ 239.503858][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.512778][ T5951] FAT-fs (loop1): Directory bread(block 69) failed [ 239.529861][ T5951] FAT-fs (loop1): Directory bread(block 70) failed [ 239.626505][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.637196][ T5951] FAT-fs (loop1): Directory bread(block 71) failed [ 239.644488][ T5951] FAT-fs (loop1): Directory bread(block 72) failed [ 239.651052][ T5951] FAT-fs (loop1): Directory bread(block 73) failed [ 239.694915][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.763518][ T5959] hfsplus: bad catalog entry type [ 239.975999][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.179421][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.306588][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.322506][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.332657][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.363795][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.364748][ T5948] ntfs3: loop2: failed to convert "0000" to iso8859-6 [ 240.385212][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.393220][ T5069] hfsplus: b-tree write err: -5, ino 4 [ 240.424473][ T5962] ntfs3: loop2: failed to convert "0000" to iso8859-6 [ 240.432300][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.460811][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.482862][ T5948] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 240.484077][ T5964] ntfs3: loop2: failed to convert "0000" to iso8859-6 [ 240.504601][ T5676] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.513368][ T5676] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.576023][ T5676] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.580574][ T5962] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 240.613827][ T5676] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.627046][ T5948] ntfs3: loop2: failed to convert name for inode 1e. [ 240.659855][ T5964] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 240.663988][ T5069] attempt to access beyond end of device [ 240.663988][ T5069] loop1: rw=1, want=1236, limit=256 [ 240.683719][ T5962] ntfs3: loop2: failed to convert name for inode 1e. [ 240.729381][ T5962] ntfs3: loop2: failed to convert "0032" to iso8859-6 [ 240.743990][ T5964] ntfs3: loop2: failed to convert name for inode 1e. [ 240.863902][ T5069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.893545][ T5069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.951798][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.998581][ T5066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.029108][ T5066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.098503][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.323632][ T5982] loop5: detected capacity change from 0 to 512 [ 241.365868][ T5983] input: syz1 as /devices/virtual/input/input7 [ 241.488398][ T5982] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.721677][ T5989] EXT4-fs (loop5): shut down requested (2) [ 241.893454][ T5994] loop2: detected capacity change from 0 to 64 [ 242.192195][ T5971] loop4: detected capacity change from 0 to 40427 [ 242.295811][ T5971] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 243.282307][ T5997] loop5: detected capacity change from 0 to 32768 [ 243.425915][ T5997] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 243.642176][ T5974] loop1: detected capacity change from 0 to 65536 [ 243.732940][ T5974] XFS (loop1): Mounting V5 Filesystem [ 243.807218][ T5676] ocfs2: Unmounting device (7,5) on (node local) [ 244.069614][ T5974] XFS (loop1): Ending clean mount [ 244.089382][ T5974] XFS (loop1): Quotacheck needed: Please wait. [ 244.133288][ T3031] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 244.170618][ T3031] XFS (loop1): Unmount and run xfs_repair [ 244.178804][ T6039] loop4: detected capacity change from 0 to 40427 [ 244.197750][ T3031] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 244.209326][ T6039] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 244.217284][ T6039] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 244.242667][ T6039] F2FS-fs (loop4): invalid crc value [ 244.274216][ T6039] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.292513][ T3031] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 244.327430][ T3031] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 244.342469][ T3031] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 244.351882][ T3031] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 244.361137][ T3031] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 244.371866][ T6039] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 244.379002][ T6039] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.509988][ T3031] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 244.574898][ T3031] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.583945][ T3031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.594371][ T3031] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 2 error 74 [ 244.609119][ T5974] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 244.715093][ T26] audit: type=1800 audit(1762252423.454:16): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 245.392982][ T4183] XFS (loop1): Unmounting Filesystem [ 248.291995][ T6094] loop0: detected capacity change from 0 to 64 [ 249.388102][ T6080] loop1: detected capacity change from 0 to 32768 [ 249.424843][ T6080] (syz.1.402,6080,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 249.473907][ T6080] (syz.1.402,6080,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 251.551096][ T6134] loop4: detected capacity change from 0 to 1024 [ 252.686126][ T6123] loop1: detected capacity change from 0 to 32768 [ 252.901593][ T6123] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 253.204924][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 254.284812][ T6148] loop0: detected capacity change from 0 to 40427 [ 254.685882][ T6148] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 254.745183][ T6148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 254.753586][ T6148] F2FS-fs (loop0): build fault injection attr: rate: 27487, type: 0x1ffff [ 254.810728][ T6148] F2FS-fs (loop0): invalid crc value [ 255.046855][ T6148] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.545188][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567458][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.887060][ T6148] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 256.150427][ T6196] loop2: detected capacity change from 0 to 64 [ 256.568197][ T6173] loop1: detected capacity change from 0 to 32768 [ 256.616747][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 256.640132][ T6173] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.427 (6173) [ 256.682479][ T6173] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 256.722454][ T6173] BTRFS info (device loop1): using free space tree [ 256.748656][ T6173] BTRFS info (device loop1): has skinny extents [ 256.760023][ T6204] loop0: detected capacity change from 0 to 128 [ 256.794780][ T6207] loop5: detected capacity change from 0 to 1024 [ 257.146181][ T6204] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.170953][ T6204] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.239291][ T6173] BTRFS error (device loop1): open_ctree failed: -12 [ 257.731005][ T6232] netlink: 220 bytes leftover after parsing attributes in process `syz.4.436'. [ 258.430228][ T4503] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4503) [ 258.562671][ T6243] loop5: detected capacity change from 0 to 4096 [ 258.617613][ T6243] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 258.823137][ T6243] ntfs3: loop5: ino=1b, "file0" directory corrupted [ 260.102396][ T6234] loop4: detected capacity change from 0 to 32768 [ 260.201364][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 260.287623][ T6244] loop1: detected capacity change from 0 to 32768 [ 260.294488][ T6234] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 260.356252][ T6234] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 260.385836][ T6244] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (6244) [ 260.519662][ T6238] loop0: detected capacity change from 0 to 40427 [ 260.845902][ T6238] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 261.051676][ T6238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 261.144011][ T6238] F2FS-fs (loop0): invalid crc value [ 261.241533][ T6244] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 261.276008][ T6276] loop5: detected capacity change from 0 to 1024 [ 261.284583][ T6244] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 261.293255][ T6244] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 261.293570][ T6238] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 261.323126][ T6244] BTRFS error (device loop1): open_ctree failed: -22 [ 262.335584][ T4503] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4503) [ 263.244808][ T6294] loop0: detected capacity change from 0 to 22 [ 263.579637][ T6316] loop5: detected capacity change from 0 to 47 [ 263.587521][ T6294] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 263.837009][ T4182] ocfs2: Unmounting device (7,4) on (node local) [ 263.972781][ T6294] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 265.547701][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.457'. [ 266.853464][ T6331] loop2: detected capacity change from 0 to 8192 [ 267.105609][ T6357] loop4: detected capacity change from 0 to 1024 [ 267.183790][ T6357] EXT4-fs (loop4): Ignoring removed oldalloc option [ 267.212452][ T6357] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 267.307672][ T6357] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.930848][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,resuid=0x0000000000000000,oldalloc,discard,max_dir_size_kb=0x00000000000007b1,acl,barrier=0x0000000000000001,nomblk_io_submit,nouid32,inode_readahead_blks=0x0000000000000020,. Quota mode: none. [ 268.332350][ T6371] loop2: detected capacity change from 0 to 2048 [ 268.362789][ T6335] loop1: detected capacity change from 0 to 32768 [ 268.451974][ T6371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.497677][ T6335] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 268.625709][ T6335] JBD2: recovery failed [ 268.677313][ T6335] (syz.1.461,6335,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 268.855544][ T6335] (syz.1.461,6335,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 269.032331][ T6335] (syz.1.461,6335,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 269.189078][ T6335] (syz.1.461,6335,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 269.334484][ T6378] loop4: detected capacity change from 0 to 1764 [ 269.352471][ T6335] (syz.1.461,6335,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 270.163952][ T6392] loop4: detected capacity change from 0 to 128 [ 270.480912][ T6392] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 270.561323][ T6392] hpfs: filesystem error: improperly stopped [ 270.568657][ T6392] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 270.576582][ T6392] hpfs: You really don't want any checks? You are crazy... [ 270.584257][ T6392] hpfs: hpfs_map_sector(): read error [ 270.589745][ T6392] hpfs: code page support is disabled [ 270.595390][ T6392] hpfs: hpfs_map_4sectors(): unaligned read [ 270.602494][ T6392] hpfs: hpfs_map_4sectors(): unaligned read [ 270.610223][ T6392] hpfs: filesystem error: unable to find root dir [ 270.796649][ T5063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.872550][ T6400] loop5: detected capacity change from 0 to 4096 [ 271.013346][ T6408] device syzkaller0 entered promiscuous mode [ 271.015734][ T6400] ntfs3: Unknown parameter 'windows_names' [ 271.167237][ T5063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.330491][ T5063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.404596][ T6417] loop1: detected capacity change from 0 to 64 [ 271.473535][ T5063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.734554][ T6400] loop5: detected capacity change from 0 to 40427 [ 272.742065][ T6397] loop0: detected capacity change from 0 to 32768 [ 272.821832][ T6400] F2FS-fs (loop5): Unrecognized mount option "active_ÊÔ¿¥ßÒ6ë©logs=6" or missing value [ 272.937335][ T6397] XFS (loop0): Mounting V5 Filesystem [ 274.258086][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 274.468307][ T6397] XFS (loop0): Ending clean mount [ 274.522840][ T6397] XFS (loop0): Quotacheck needed: Please wait. [ 274.583856][ T6397] XFS (loop0): Quotacheck: Done. [ 274.682956][ T4194] XFS (loop0): Unmounting Filesystem [ 274.688698][ T26] audit: type=1326 audit(1762252453.454:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.5.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f210c86c9 code=0x0 [ 274.875191][ T6431] chnl_net:caif_netlink_parms(): no params data found [ 274.893834][ T5469] Bluetooth: hci2: command 0x0409 tx timeout [ 275.047810][ T6484] loop1: detected capacity change from 0 to 1024 [ 275.107354][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.118573][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.127509][ T6431] device bridge_slave_0 entered promiscuous mode [ 275.140299][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.147565][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.159847][ T6431] device bridge_slave_1 entered promiscuous mode [ 275.791267][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.126288][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.661541][ T5063] device hsr_slave_0 left promiscuous mode [ 276.704666][ T5063] device hsr_slave_1 left promiscuous mode [ 276.764525][ T5063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.793061][ T5063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.879138][ T5063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.939351][ T5063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.030738][ T5063] device bridge_slave_1 left promiscuous mode [ 277.101875][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.120194][ T5468] Bluetooth: hci2: command 0x041b tx timeout [ 277.262967][ T5063] device bridge_slave_0 left promiscuous mode [ 277.339650][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.525177][ T5063] device veth1_macvtap left promiscuous mode [ 277.595984][ T5063] device veth0_macvtap left promiscuous mode [ 277.654502][ T5063] device veth1_vlan left promiscuous mode [ 277.660630][ T5063] device veth0_vlan left promiscuous mode [ 277.794652][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 278.251864][ T6507] loop5: detected capacity change from 0 to 32768 [ 278.476577][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.497 (6507) [ 279.245797][ T6506] loop1: detected capacity change from 0 to 32768 [ 279.281173][ T6507] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 279.529996][ T5468] Bluetooth: hci2: command 0x040f tx timeout [ 279.627224][ T6507] BTRFS info (device loop5): using free space tree [ 279.825235][ T6507] BTRFS info (device loop5): has skinny extents [ 280.254889][ T6557] loop4: detected capacity change from 0 to 128 [ 280.524488][ T6557] FAT-fs (loop4): bread failed, FSINFO block (sector = 1537) [ 280.524554][ T6563] loop1: detected capacity change from 0 to 2048 [ 280.575071][ T6507] BTRFS error (device loop5): open_ctree failed: -12 [ 280.607035][ T5063] team0 (unregistering): Port device team_slave_1 removed [ 280.667156][ T4680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4680) [ 280.691699][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.757164][ T5063] team0 (unregistering): Port device team_slave_0 removed [ 280.839306][ T5063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.505009][ T6581] netlink: 220 bytes leftover after parsing attributes in process `syz.1.507'. [ 282.187873][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 282.221304][ T5063] bond0 (unregistering): Released all slaves [ 282.489137][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 282.519746][ T6431] team0: Port device team_slave_0 added [ 283.403331][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.509'. [ 283.540107][ T6431] team0: Port device team_slave_1 added [ 283.761311][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.798866][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.909694][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.958757][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 284.058531][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.071069][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.115382][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.317877][ T6431] device hsr_slave_0 entered promiscuous mode [ 284.331891][ T6431] device hsr_slave_1 entered promiscuous mode [ 284.941707][ T6614] loop4: detected capacity change from 0 to 1024 [ 286.229217][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 286.285196][ T6431] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.374423][ T6431] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.428682][ T6431] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 287.275899][ T6431] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.352372][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.416548][ T6660] loop4: detected capacity change from 0 to 1024 [ 288.463468][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.480035][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.501466][ T26] audit: type=1800 audit(1762252467.274:18): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.524" name="memory.events" dev="loop4" ino=26 res=0 errno=0 [ 288.552716][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.610242][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.648034][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.769585][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.776815][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.859636][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.868032][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.877966][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.897888][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.905025][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.586765][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.605020][ T5066] hfsplus: b-tree write err: -5, ino 4 [ 289.622472][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.656959][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.714872][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.833750][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.844606][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.880731][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.928528][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.992310][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.039847][ T6431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.069277][ T6682] loop0: detected capacity change from 0 to 1024 [ 290.091499][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.125442][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.152639][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.696054][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.763748][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.783875][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.799546][ T6705] loop0: detected capacity change from 0 to 128 [ 291.856065][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 291.948432][ T6705] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 291.987516][ T6705] hpfs: filesystem error: improperly stopped [ 292.027313][ T6705] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 292.081260][ T6705] hpfs: You really don't want any checks? You are crazy... [ 292.124001][ T6705] hpfs: hpfs_map_sector(): read error [ 292.129437][ T6705] hpfs: code page support is disabled [ 292.198482][ T6705] hpfs: hpfs_map_4sectors(): unaligned read [ 292.221732][ T6705] hpfs: hpfs_map_4sectors(): unaligned read [ 292.269366][ T6705] hpfs: filesystem error: unable to find root dir [ 292.388224][ T6715] loop4: detected capacity change from 0 to 40427 [ 292.463820][ T6715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 292.471704][ T6715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 292.521381][ T6715] F2FS-fs (loop4): invalid crc value [ 292.579325][ T6715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 292.652975][ T6715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 292.660261][ T6715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 293.037541][ T26] audit: type=1800 audit(1762252471.674:19): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.533" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 293.195164][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.221972][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.308853][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.326800][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.368067][ T6431] device veth0_vlan entered promiscuous mode [ 293.389491][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.402000][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.434921][ T6431] device veth1_vlan entered promiscuous mode [ 293.513218][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.540685][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.570249][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.609797][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.648126][ T6431] device veth0_macvtap entered promiscuous mode [ 293.671328][ T6431] device veth1_macvtap entered promiscuous mode [ 293.731832][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.838658][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.875063][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.913693][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.923563][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.975055][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.013929][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.053880][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.098422][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.198912][ T6758] device syzkaller0 entered promiscuous mode [ 294.215167][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.251724][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.270006][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.300778][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.460999][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.483959][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.502359][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.526324][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.536573][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.553452][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.572291][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.583348][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.601101][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.656382][ T6431] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.687128][ T6431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.708596][ T6431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.717576][ T6431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.729391][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.748154][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.831826][ T6767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.507083][ T4182] attempt to access beyond end of device [ 295.507083][ T4182] loop4: rw=2049, want=40968, limit=40427 [ 295.875283][ T5066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.883572][ T5066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.936549][ T6776] loop5: detected capacity change from 0 to 1024 [ 295.954262][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.064561][ T5058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.093731][ T5058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.416916][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.946945][ T6796] loop6: detected capacity change from 0 to 1024 [ 297.001702][ T6801] loop5: detected capacity change from 0 to 512 [ 297.085585][ T6801] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.118592][ T6796] EXT4-fs (loop6): Ignoring removed orlov option [ 297.254090][ T6796] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 297.332604][ T6796] EXT4-fs (loop6): shut down requested (2) [ 298.378727][ T6828] loop0: detected capacity change from 0 to 40427 [ 298.496033][ T6828] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 298.504199][ T6828] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 298.535427][ T6828] F2FS-fs (loop0): invalid crc value [ 298.590088][ T6828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 298.697766][ T6828] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 298.705347][ T6828] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 298.923062][ T6841] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.584353][ T26] audit: type=1800 audit(1762252478.084:20): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 300.114737][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.551'. [ 300.123578][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.551'. [ 300.155203][ T6851] netlink: 'syz.6.551': attribute type 20 has an invalid length. [ 300.211355][ T6851] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.220954][ T6851] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.229795][ T6851] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.238606][ T6851] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.507836][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.551'. [ 300.602326][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.551'. [ 300.662989][ T6851] netlink: 'syz.6.551': attribute type 20 has an invalid length. [ 301.236895][ T4194] attempt to access beyond end of device [ 301.236895][ T4194] loop0: rw=2049, want=40968, limit=40427 [ 301.458159][ T6860] infiniband syz0: set down [ 301.463769][ T6860] infiniband syz0: added ipvlan0 [ 301.566036][ T6878] netlink: 220 bytes leftover after parsing attributes in process `syz.1.556'. [ 302.416264][ T6860] RDS/IB: syz0: added [ 302.421531][ T6860] smc: adding ib device syz0 with port count 1 [ 303.535482][ T6860] smc: ib device syz0 port 1 has pnetid [ 305.238145][ T6903] loop1: detected capacity change from 0 to 40427 [ 305.322641][ T6903] F2FS-fs (loop1): invalid crc value [ 305.463365][ T6903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 305.671125][ T6903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 306.583183][ T4183] attempt to access beyond end of device [ 306.583183][ T4183] loop1: rw=2049, want=45104, limit=40427 [ 307.170747][ T6944] device bridge1 entered promiscuous mode [ 309.578237][ T6978] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 311.769458][ T7027] netlink: 220 bytes leftover after parsing attributes in process `syz.6.584'. [ 315.700122][ T7056] loop6: detected capacity change from 0 to 1024 [ 316.726077][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'. [ 317.144322][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150779][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.123160][ T7104] loop1: detected capacity change from 0 to 1024 [ 318.431008][ T26] audit: type=1800 audit(1762252497.204:21): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.602" name="memory.events" dev="loop1" ino=26 res=0 errno=0 [ 318.704248][ T5055] hfsplus: b-tree write err: -5, ino 4 [ 319.083496][ T7117] loop1: detected capacity change from 0 to 1024 [ 319.147557][ T7122] tmpfs: Unknown parameter 'usrquota' [ 319.963892][ T7137] netlink: 220 bytes leftover after parsing attributes in process `syz.4.611'. [ 320.742516][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 322.200420][ T7158] loop4: detected capacity change from 0 to 1024 [ 323.086086][ T26] audit: type=1800 audit(1762252501.864:22): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="memory.events" dev="loop4" ino=26 res=0 errno=0 [ 323.142031][ T5055] hfsplus: b-tree write err: -5, ino 4 [ 323.934657][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 324.069495][ T7190] netlink: 220 bytes leftover after parsing attributes in process `syz.5.624'. [ 325.226968][ T7205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.357012][ T7216] loop4: detected capacity change from 0 to 1024 [ 326.421226][ T26] audit: type=1800 audit(1762252505.194:23): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="memory.events" dev="loop4" ino=26 res=0 errno=0 [ 326.491502][ T4208] hfsplus: b-tree write err: -5, ino 4 [ 327.749445][ T7237] tipc: Started in network mode [ 327.795314][ T7237] tipc: Node identity 7f000001, cluster identity 4711 [ 327.835496][ T7237] tipc: Enabled bearer , priority 10 [ 327.864129][ T7241] tipc: Enabled bearer , priority 10 [ 328.075284][ T7244] loop5: detected capacity change from 0 to 7 [ 328.865433][ T7237] 9pnet_virtio: no channels available for device syz [ 328.895387][ T6230] tipc: Node number set to 2130706433 [ 328.903804][ T5676] Dev loop5: unable to read RDB block 7 [ 328.913866][ T5676] loop5: AHDI p1 p2 [ 328.938208][ T5676] loop5: partition table partially beyond EOD, truncated [ 328.980723][ T5676] loop5: p1 start 1702000233 is beyond EOD, truncated [ 329.124153][ T7244] Dev loop5: unable to read RDB block 7 [ 329.150110][ T7244] loop5: AHDI p1 p2 [ 329.174755][ T7244] loop5: partition table partially beyond EOD, truncated [ 329.387849][ T7244] loop5: p1 start 1702000233 is beyond EOD, truncated [ 331.326988][ T7288] loop4: detected capacity change from 0 to 64 [ 331.384892][ T7288] hfs: unable to parse mount options [ 331.470201][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.653'. [ 333.053205][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.091362][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.102181][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.170368][ T7318] device bridge_slave_0 left promiscuous mode [ 333.317417][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.353068][ T7318] device bridge_slave_1 left promiscuous mode [ 333.456064][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.579333][ T7318] bond0: (slave bond_slave_0): Releasing backup interface [ 333.764578][ T7318] bond0: (slave bond_slave_1): Releasing backup interface [ 334.183381][ T7318] team0: Port device team_slave_0 removed [ 334.475239][ T7318] team0: Port device team_slave_1 removed [ 334.482221][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.497338][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.514867][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.522529][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.740893][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 338.741850][ T7408] loop5: detected capacity change from 0 to 64 [ 338.805642][ T7408] hfs: unable to parse mount options [ 339.184240][ T7418] netlink: 220 bytes leftover after parsing attributes in process `syz.1.678'. [ 339.523739][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 344.772697][ T7493] loop1: detected capacity change from 0 to 512 [ 344.940897][ T7493] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.962938][ T7499] loop0: detected capacity change from 0 to 1024 [ 344.979292][ T7493] EXT4-fs (loop1): shut down requested (2) [ 345.600574][ T7515] loop1: detected capacity change from 0 to 64 [ 345.618650][ T7515] hfs: unable to parse mount options [ 346.842683][ T7530] loop5: detected capacity change from 0 to 40427 [ 346.856152][ T7530] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 346.864063][ T7530] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 346.885656][ T7530] F2FS-fs (loop5): invalid crc value [ 347.021407][ T7530] F2FS-fs (loop5): Found nat_bits in checkpoint [ 347.170546][ T7530] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 347.177757][ T7530] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 347.325816][ T26] audit: type=1800 audit(1762252526.104:24): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.701" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 348.135317][ T5676] attempt to access beyond end of device [ 348.135317][ T5676] loop5: rw=2049, want=40968, limit=40427 [ 352.170697][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 352.240309][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.5.713'. [ 358.158262][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.178392][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.204600][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.333951][ T2284] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 358.760650][ T2284] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 358.783901][ T2284] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.964537][ T2284] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.978843][ T2284] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.997820][ T2284] usb 2-1: Product: syz [ 359.007474][ T2284] usb 2-1: Manufacturer: syz [ 359.013877][ T2284] usb 2-1: SerialNumber: syz [ 359.032210][ T2284] usb 2-1: config 0 descriptor?? [ 359.089862][ T2284] usb 2-1: selecting invalid altsetting 0 [ 359.607285][ T7725] netlink: 76 bytes leftover after parsing attributes in process `syz.1.732'. [ 359.636091][ T7725] usb 2-1: selecting invalid altsetting 0 [ 359.642265][ T7725] usb 2-1: 0:0: usb_set_interface failed (-22) [ 359.648830][ T7725] usb 2-1: selecting invalid altsetting 0 [ 359.654754][ T7725] usb 2-1: 0:0: usb_set_interface failed (-22) [ 361.309571][ T7724] usb 2-1: selecting invalid altsetting 0 [ 361.315422][ T7724] usb 2-1: 0:0: usb_set_interface failed (-22) [ 361.321606][ T7724] usb 2-1: selecting invalid altsetting 0 [ 361.327979][ T7724] usb 2-1: 0:0: usb_set_interface failed (-22) [ 361.334410][ T7724] usb 2-1: selecting invalid altsetting 0 [ 361.340609][ T7724] usb 2-1: 0:0: usb_set_interface failed (-22) [ 361.408424][ T2284] usb 2-1: USB disconnect, device number 4 [ 364.488639][ T7768] loop5: detected capacity change from 0 to 40427 [ 364.590650][ T7768] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 364.598761][ T7768] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 364.611327][ T7768] F2FS-fs (loop5): invalid crc value [ 364.712256][ T7768] F2FS-fs (loop5): Found nat_bits in checkpoint [ 364.897768][ T7768] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 364.905459][ T7768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 365.686912][ T26] audit: type=1800 audit(1762252543.764:25): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.748" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 365.863720][ T7781] IPVS: length: 24 != 12792 [ 367.394871][ T5676] attempt to access beyond end of device [ 367.394871][ T5676] loop5: rw=2049, want=40968, limit=40427 [ 369.779924][ T7839] loop4: detected capacity change from 0 to 1024 [ 370.372874][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 370.480864][ T5307] Bluetooth: hci3: command 0x0409 tx timeout [ 371.210028][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.243690][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.263349][ T7815] device bridge_slave_0 entered promiscuous mode [ 371.283225][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.300179][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.311414][ T7815] device bridge_slave_1 entered promiscuous mode [ 371.366773][ T7854] netlink: 220 bytes leftover after parsing attributes in process `syz.1.768'. [ 371.382106][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.418090][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.498625][ T7815] team0: Port device team_slave_0 added [ 371.580855][ T7815] team0: Port device team_slave_1 added [ 371.656596][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.803866][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.212840][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.490260][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.537867][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.640473][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 372.655031][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.694500][ T7815] device hsr_slave_0 entered promiscuous mode [ 372.707326][ T7815] device hsr_slave_1 entered promiscuous mode [ 372.857707][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.881110][ T7815] Cannot create hsr debugfs directory [ 373.323723][ T7815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.337091][ T7815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.353887][ T7815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.376434][ T7815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 373.608107][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.794617][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.802949][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.837749][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.891954][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.943568][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.952596][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.959774][ T5063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.993548][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.016448][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.046207][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.071500][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.078681][ T5063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.196980][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.267187][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.286115][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.831163][ T2284] Bluetooth: hci3: command 0x040f tx timeout [ 374.890262][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.903058][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.918498][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.035310][ T7815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.046658][ T7815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.080147][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.099710][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.126176][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.172864][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.207083][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.221627][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.529700][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.550959][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.629996][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.982107][ T7918] loop6: detected capacity change from 0 to 40427 [ 376.056607][ T7918] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 376.064426][ T7918] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 376.085908][ T7918] F2FS-fs (loop6): invalid crc value [ 376.141702][ T7918] F2FS-fs (loop6): Found nat_bits in checkpoint [ 376.195403][ T7918] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 376.202495][ T7918] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 376.272743][ T26] audit: type=1800 audit(1762252555.044:26): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.792" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 376.593926][ T7935] netlink: 220 bytes leftover after parsing attributes in process `syz.1.791'. [ 376.794425][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.814602][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.877709][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.893940][ T5307] Bluetooth: hci3: command 0x0419 tx timeout [ 376.903067][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.955215][ T7815] device veth0_vlan entered promiscuous mode [ 376.978607][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.992045][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.023611][ T7815] device veth1_vlan entered promiscuous mode [ 377.077125][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.086428][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.104549][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.130215][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.151670][ T7815] device veth0_macvtap entered promiscuous mode [ 377.176165][ T7815] device veth1_macvtap entered promiscuous mode [ 377.232428][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.263322][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.301905][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.322997][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.343297][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.364325][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.386368][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.403792][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.440319][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.454559][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.463437][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.483160][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.503406][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.527552][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.548700][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.569778][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.590610][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.639990][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.650772][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.660974][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.686469][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.699963][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.729572][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.743323][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.801184][ T7815] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.809704][ T7943] MPTCP: kernel_bind error, err=-98 [ 377.860784][ T7815] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.944912][ T7815] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.963399][ T7815] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.800360][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808778][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857600][ T6431] attempt to access beyond end of device [ 378.857600][ T6431] loop6: rw=2049, want=40968, limit=40427 [ 379.870466][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.804'. [ 379.947583][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.992561][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.035057][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.043435][ T5052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.156026][ T5052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.231548][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.250612][ T7972] loop4: detected capacity change from 0 to 64 [ 380.307483][ T7972] hfs: unable to parse mount options [ 383.685375][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.817'. [ 384.623044][ T8018] loop5: detected capacity change from 0 to 1024 [ 384.843928][ T6564] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 385.314540][ T6564] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.333802][ T6564] usb 2-1: config 0 interface 0 has no altsetting 0 [ 385.494085][ T6564] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.513508][ T6564] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 385.673680][ T6564] usb 2-1: Product: syz [ 385.679323][ T6564] usb 2-1: Manufacturer: syz [ 385.684032][ T6564] usb 2-1: SerialNumber: syz [ 385.691908][ T6564] usb 2-1: config 0 descriptor?? [ 385.737055][ T6564] usb 2-1: selecting invalid altsetting 0 [ 386.834827][ T8039] netlink: 76 bytes leftover after parsing attributes in process `syz.1.819'. [ 387.398241][ T8038] loop6: detected capacity change from 0 to 64 [ 387.507623][ T8038] hfs: unable to parse mount options [ 388.485315][ T4238] usb 2-1: USB disconnect, device number 5 [ 388.631102][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.831'. [ 392.402979][ T8086] loop5: detected capacity change from 0 to 1024 [ 392.769921][ T8088] loop7: detected capacity change from 0 to 40427 [ 392.862767][ T8088] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 392.870630][ T8088] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 392.902756][ T8088] F2FS-fs (loop7): invalid crc value [ 392.945130][ T8088] F2FS-fs (loop7): Found nat_bits in checkpoint [ 393.012069][ T8088] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 393.019242][ T8088] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 393.096027][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.845'. [ 393.123909][ T4196] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 393.467695][ T26] audit: type=1800 audit(1762252572.234:27): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.841" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 393.703917][ T4196] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 394.157732][ T4196] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.357049][ T4196] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 394.406828][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 394.449141][ T4196] usb 5-1: Product: syz [ 394.465648][ T4196] usb 5-1: Manufacturer: syz [ 394.488301][ T4196] usb 5-1: SerialNumber: syz [ 394.529622][ T4196] usb 5-1: config 0 descriptor?? [ 394.611036][ T4196] usb 5-1: selecting invalid altsetting 0 [ 395.249756][ T8123] netlink: 76 bytes leftover after parsing attributes in process `syz.4.843'. [ 395.261360][ T8123] usb 5-1: selecting invalid altsetting 0 [ 395.267261][ T8123] usb 5-1: 0:0: usb_set_interface failed (-22) [ 395.273502][ T8123] usb 5-1: selecting invalid altsetting 0 [ 395.279363][ T8123] usb 5-1: 0:0: usb_set_interface failed (-22) [ 397.018494][ T8123] usb 5-1: selecting invalid altsetting 0 [ 397.024392][ T8123] usb 5-1: 0:0: usb_set_interface failed (-22) [ 397.030576][ T8123] usb 5-1: selecting invalid altsetting 0 [ 397.036388][ T8123] usb 5-1: 0:0: usb_set_interface failed (-22) [ 397.042581][ T8123] usb 5-1: selecting invalid altsetting 0 [ 397.048461][ T8123] usb 5-1: 0:0: usb_set_interface failed (-22) [ 397.116371][ T13] usb 5-1: USB disconnect, device number 4 [ 399.877583][ T8168] loop6: detected capacity change from 0 to 64 [ 399.894145][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 399.964799][ T8168] hfs: unable to parse mount options [ 404.941909][ T8199] netlink: 220 bytes leftover after parsing attributes in process `syz.1.867'. [ 405.307684][ T8204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 406.372498][ T8212] loop4: detected capacity change from 0 to 1054 [ 406.847216][ T8212] hfsplus: invalid secondary volume header [ 406.853362][ T8212] hfsplus: unable to find HFS+ superblock [ 407.317772][ T8214] loop7: detected capacity change from 0 to 40427 [ 407.621276][ T8214] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 407.629115][ T8214] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 408.194709][ T8214] F2FS-fs (loop7): invalid crc value [ 408.233323][ T8214] F2FS-fs (loop7): Found nat_bits in checkpoint [ 408.286892][ T8214] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 408.294009][ T8214] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 408.511689][ T8228] loop4: detected capacity change from 0 to 40427 [ 408.575006][ T8228] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 408.582870][ T8228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 408.617347][ T8228] F2FS-fs (loop4): invalid crc value [ 408.749254][ T8228] F2FS-fs (loop4): Found nat_bits in checkpoint [ 408.890906][ T8228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 408.898386][ T8228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 409.626076][ T4538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.749415][ T26] audit: type=1800 audit(1762252588.524:28): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.879" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 409.834334][ T26] audit: type=1800 audit(1762252588.594:29): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.875" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 409.924721][ T4538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.169789][ T4538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.095574][ T4538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.526373][ T8268] loop1: detected capacity change from 0 to 64 [ 412.555080][ T8266] loop5: detected capacity change from 0 to 1024 [ 412.624823][ T8268] hfs: unable to parse mount options [ 414.479582][ T4538] device hsr_slave_0 left promiscuous mode [ 414.552640][ T4538] device hsr_slave_1 left promiscuous mode [ 414.616160][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.654720][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.728514][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.752286][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.774498][ T3031] attempt to access beyond end of device [ 414.774498][ T3031] loop4: rw=1, want=79888, limit=40427 [ 414.793519][ T4538] device bridge_slave_1 left promiscuous mode [ 414.851338][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.895819][ T4538] device bridge_slave_0 left promiscuous mode [ 415.051592][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.071578][ T3031] attempt to access beyond end of device [ 415.071578][ T3031] loop4: rw=1, want=81920, limit=40427 [ 415.835808][ T4538] device veth1_vlan left promiscuous mode [ 415.841661][ T4538] device veth0_vlan left promiscuous mode [ 416.863167][ T3031] attempt to access beyond end of device [ 416.863167][ T3031] loop4: rw=1, want=53248, limit=40427 [ 417.441318][ T3031] attempt to access beyond end of device [ 417.441318][ T3031] loop4: rw=1, want=58496, limit=40427 [ 418.028228][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.7.893'. [ 418.292705][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 419.169956][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 419.672207][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.778106][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.858049][ T4538] bond0 (unregistering): Released all slaves [ 421.097300][ T8341] loop4: detected capacity change from 0 to 40427 [ 421.157342][ T8341] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 421.165257][ T8341] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 421.182077][ T8341] F2FS-fs (loop4): invalid crc value [ 421.452663][ T8341] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.123106][ T8341] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 422.131021][ T8341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 423.313818][ T4291] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 423.553084][ T26] audit: type=1800 audit(1762252602.324:30): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.900" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 423.863925][ T4291] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.899688][ T4291] usb 6-1: config 0 interface 0 has no altsetting 0 [ 424.104243][ T4291] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 424.114840][ T4291] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 424.123164][ T4291] usb 6-1: Product: syz [ 424.133198][ T4291] usb 6-1: Manufacturer: syz [ 424.143411][ T4291] usb 6-1: SerialNumber: syz [ 424.171032][ T4291] usb 6-1: config 0 descriptor?? [ 424.267068][ T4291] usb 6-1: selecting invalid altsetting 0 [ 424.271220][ T8376] loop7: detected capacity change from 0 to 1024 [ 424.705646][ T8387] netlink: 76 bytes leftover after parsing attributes in process `syz.5.903'. [ 424.723691][ T8387] usb 6-1: selecting invalid altsetting 0 [ 424.729480][ T8387] usb 6-1: 0:0: usb_set_interface failed (-22) [ 424.735766][ T8387] usb 6-1: selecting invalid altsetting 0 [ 424.741556][ T8387] usb 6-1: 0:0: usb_set_interface failed (-22) [ 426.433500][ T8387] usb 6-1: selecting invalid altsetting 0 [ 426.439489][ T8387] usb 6-1: 0:0: usb_set_interface failed (-22) [ 426.445758][ T8387] usb 6-1: selecting invalid altsetting 0 [ 426.451505][ T8387] usb 6-1: 0:0: usb_set_interface failed (-22) [ 426.458714][ T8387] usb 6-1: selecting invalid altsetting 0 [ 426.464528][ T8387] usb 6-1: 0:0: usb_set_interface failed (-22) [ 426.525305][ T4196] usb 6-1: USB disconnect, device number 2 [ 429.204222][ T8441] loop4: detected capacity change from 0 to 64 [ 429.344808][ T8441] hfs: unable to parse mount options [ 430.500963][ T8451] netlink: 220 bytes leftover after parsing attributes in process `syz.5.916'. [ 432.687719][ T8470] loop7: detected capacity change from 0 to 40427 [ 432.839747][ T8470] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 432.847590][ T8470] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 432.857757][ T8470] F2FS-fs (loop7): invalid crc value [ 432.928091][ T8470] F2FS-fs (loop7): Found nat_bits in checkpoint [ 432.983691][ T4196] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 433.012275][ T8470] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 433.019377][ T8470] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 433.364186][ T4196] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 433.380656][ T26] audit: type=1800 audit(1762252612.154:31): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.919" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 433.464536][ T4196] usb 7-1: config 0 interface 0 has no altsetting 0 [ 433.623941][ T4196] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.633205][ T4196] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.733744][ T4196] usb 7-1: Product: syz [ 433.738069][ T4196] usb 7-1: Manufacturer: syz [ 433.742677][ T4196] usb 7-1: SerialNumber: syz [ 433.811752][ T4196] usb 7-1: config 0 descriptor?? [ 433.878284][ T4196] usb 7-1: selecting invalid altsetting 0 [ 434.468573][ T8500] netlink: 76 bytes leftover after parsing attributes in process `syz.6.920'. [ 434.479397][ T8500] usb 7-1: selecting invalid altsetting 0 [ 434.485189][ T8500] usb 7-1: 0:0: usb_set_interface failed (-22) [ 434.491364][ T8500] usb 7-1: selecting invalid altsetting 0 [ 434.497141][ T8500] usb 7-1: 0:0: usb_set_interface failed (-22) [ 436.913065][ T8500] usb 7-1: selecting invalid altsetting 0 [ 436.918961][ T8500] usb 7-1: 0:0: usb_set_interface failed (-22) [ 436.925222][ T8500] usb 7-1: selecting invalid altsetting 0 [ 436.930950][ T8500] usb 7-1: 0:0: usb_set_interface failed (-22) [ 436.939178][ T8500] usb 7-1: selecting invalid altsetting 0 [ 436.944982][ T8500] usb 7-1: 0:0: usb_set_interface failed (-22) [ 437.049951][ T5310] usb 7-1: USB disconnect, device number 2 [ 437.521585][ T8514] MPTCP: kernel_bind error, err=-98 [ 438.867356][ T4386] attempt to access beyond end of device [ 438.867356][ T4386] loop7: rw=1, want=79984, limit=40427 [ 438.911008][ T4386] attempt to access beyond end of device [ 438.911008][ T4386] loop7: rw=1, want=80040, limit=40427 [ 439.847087][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.854220][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.965447][ T8540] loop1: detected capacity change from 0 to 1024 [ 440.829413][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.936'. [ 441.316740][ T8562] loop5: detected capacity change from 0 to 40427 [ 441.377945][ T8562] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 441.385843][ T8562] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 441.396893][ T8562] F2FS-fs (loop5): invalid crc value [ 441.416758][ T8562] F2FS-fs (loop5): Found nat_bits in checkpoint [ 441.872759][ T8562] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 441.880024][ T8562] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 442.345477][ T26] audit: type=1800 audit(1762252621.124:32): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.937" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 442.490470][ T8584] loop6: detected capacity change from 0 to 2048 [ 442.928197][ T8584] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.564243][ T8594] loop6: detected capacity change from 0 to 40427 [ 443.663522][ T8594] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 443.671434][ T8594] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 443.684434][ T8594] F2FS-fs (loop6): invalid crc value [ 443.756063][ T8594] F2FS-fs (loop6): Found nat_bits in checkpoint [ 443.820023][ T8594] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 443.827332][ T8594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 444.194628][ T26] audit: type=1800 audit(1762252622.974:33): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.942" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 444.596697][ T3031] hfsplus: b-tree write err: -5, ino 4 [ 449.819954][ T8686] netlink: 220 bytes leftover after parsing attributes in process `syz.4.957'. [ 450.242629][ T8693] loop4: detected capacity change from 0 to 40427 [ 450.333095][ T8693] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 450.341092][ T8693] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 450.386460][ T8693] F2FS-fs (loop4): invalid crc value [ 450.641679][ T8693] F2FS-fs (loop4): Found nat_bits in checkpoint [ 450.838877][ T8693] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 450.846289][ T8693] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 451.897218][ T26] audit: type=1800 audit(1762252630.674:34): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.958" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 452.509596][ T8723] loop6: detected capacity change from 0 to 40427 [ 452.578785][ T8723] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 452.586725][ T8723] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 452.600258][ T8723] F2FS-fs (loop6): invalid crc value [ 452.625012][ T8723] F2FS-fs (loop6): Found nat_bits in checkpoint [ 452.668866][ T8723] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 452.676206][ T8723] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 452.947128][ T26] audit: type=1800 audit(1762252631.724:35): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.962" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 453.543957][ T5469] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 454.188991][ T4538] attempt to access beyond end of device [ 454.188991][ T4538] loop6: rw=1048577, want=80848, limit=40427 [ 454.194058][ T5469] usb 6-1: config 0 has no interfaces? [ 454.394594][ T5469] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.498292][ T5469] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.745945][ T5469] usb 6-1: Product: syz [ 454.848892][ T5469] usb 6-1: Manufacturer: syz [ 454.949032][ T5469] usb 6-1: SerialNumber: syz [ 454.978654][ T5469] usb 6-1: config 0 descriptor?? [ 455.291586][ T2284] usb 6-1: USB disconnect, device number 3 [ 456.189106][ T8773] netlink: 220 bytes leftover after parsing attributes in process `syz.5.968'. [ 460.166720][ T8806] netlink: 220 bytes leftover after parsing attributes in process `syz.5.979'. [ 460.479310][ T5469] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 460.911923][ T5469] usb 8-1: config 0 has no interfaces? [ 461.560802][ T5469] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.187525][ T5469] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 462.196773][ T5469] usb 8-1: Product: syz [ 462.200956][ T5469] usb 8-1: Manufacturer: syz [ 462.222638][ T5469] usb 8-1: SerialNumber: syz [ 462.301524][ T5469] usb 8-1: config 0 descriptor?? [ 462.959216][ T8833] loop6: detected capacity change from 0 to 1024 [ 462.967487][ T4238] usb 8-1: USB disconnect, device number 2 [ 463.178584][ T26] audit: type=1800 audit(1762252641.954:36): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.977" name="memory.events" dev="loop6" ino=26 res=0 errno=0 [ 464.398914][ T8856] MPTCP: kernel_bind error, err=-98 [ 466.053972][ T8872] netlink: 220 bytes leftover after parsing attributes in process `syz.4.993'. [ 467.764855][ T4238] Bluetooth: hci2: command 0x0406 tx timeout [ 469.473892][ T5469] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 470.014562][ T5469] usb 2-1: config 0 has no interfaces? [ 470.873864][ T5469] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.884413][ T4535] hfsplus: b-tree write err: -5, ino 4 [ 470.895231][ T5469] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.905109][ T5469] usb 2-1: Product: syz [ 470.909418][ T5469] usb 2-1: Manufacturer: syz [ 470.914536][ T5469] usb 2-1: SerialNumber: syz [ 470.922329][ T5469] usb 2-1: config 0 descriptor?? [ 471.187852][ T5469] usb 2-1: USB disconnect, device number 6 [ 471.264755][ T8929] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1007'. [ 472.760828][ T8947] MPTCP: kernel_bind error, err=-98 [ 473.087148][ T8927] loop6: detected capacity change from 0 to 40427 [ 473.164992][ T8927] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 473.179970][ T8927] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 473.206627][ T8927] F2FS-fs (loop6): invalid crc value [ 473.264842][ T8927] F2FS-fs (loop6): Found nat_bits in checkpoint [ 473.386646][ T8927] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 473.412606][ T8927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 474.415578][ T26] audit: type=1800 audit(1762252652.884:37): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1006" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 474.442895][ T8987] loop1: detected capacity change from 0 to 1024 [ 475.018879][ T26] audit: type=1800 audit(1762252653.794:38): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="memory.events" dev="loop1" ino=26 res=0 errno=0 [ 475.107901][ T9003] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1019'. [ 476.632802][ T4238] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 476.665279][ T6431] attempt to access beyond end of device [ 476.665279][ T6431] loop6: rw=2049, want=40968, limit=40427 [ 477.014140][ T4238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.082769][ T4276] hfsplus: b-tree write err: -5, ino 4 [ 477.203911][ T4238] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 477.223238][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 477.249679][ T4238] usb 5-1: Product: syz [ 477.259672][ T4238] usb 5-1: Manufacturer: syz [ 477.270309][ T4238] usb 5-1: SerialNumber: syz [ 477.292165][ T4238] usb 5-1: config 0 descriptor?? [ 477.384421][ T4238] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 477.457416][ T4680] udevd[4680]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.558744][ T6564] usb 5-1: USB disconnect, device number 5 [ 478.222926][ T9067] loop6: detected capacity change from 0 to 1024 [ 480.997044][ T9094] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 481.011438][ T9077] loop1: detected capacity change from 0 to 40427 [ 481.014149][ T9094] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 481.079279][ T9077] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 481.100959][ T9094] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 481.107595][ T9077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 481.126624][ T9094] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 481.167271][ T9077] F2FS-fs (loop1): invalid crc value [ 481.238518][ T9077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 481.369783][ T9077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 481.379200][ T9077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 481.504266][ T4238] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 481.684818][ T4291] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 481.893786][ T26] audit: type=1800 audit(1762252660.574:39): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1037" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 481.964331][ T4238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.003643][ T4291] usb 8-1: Using ep0 maxpacket: 16 [ 482.143833][ T4291] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.160079][ T4238] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.161503][ T4291] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.178559][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.213748][ T4238] usb 5-1: Product: syz [ 482.217966][ T4238] usb 5-1: Manufacturer: syz [ 482.235225][ T4238] usb 5-1: SerialNumber: syz [ 482.255080][ T4238] usb 5-1: config 0 descriptor?? [ 482.384223][ T4291] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.448674][ T4291] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.587330][ T4291] usb 8-1: Product: syz [ 482.635702][ T4291] usb 8-1: Manufacturer: syz [ 482.690292][ T4291] usb 8-1: SerialNumber: syz [ 483.111223][ T4238] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 483.119663][ T4238] usb 5-1: USB disconnect, device number 6 [ 483.204035][ T4291] usb 8-1: 0:2 : does not exist [ 483.286439][ T4291] usb 8-1: USB disconnect, device number 3 [ 483.325043][ T4680] udevd[4680]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.672665][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.861656][ T9144] input: syz0 as /devices/virtual/input/input23 [ 484.078842][ T5052] attempt to access beyond end of device [ 484.078842][ T5052] loop1: rw=1, want=79912, limit=40427 [ 484.164703][ T5052] attempt to access beyond end of device [ 484.164703][ T5052] loop1: rw=1, want=81920, limit=40427 [ 484.206924][ T5310] [ 484.209382][ T5310] ====================================================== [ 484.216387][ T5310] WARNING: possible circular locking dependency detected [ 484.223400][ T5310] syzkaller #0 Not tainted [ 484.227799][ T5310] ------------------------------------------------------ [ 484.234799][ T5310] kworker/0:14/5310 is trying to acquire lock: [ 484.240937][ T5310] ffff88807624cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 484.251972][ T5310] [ 484.251972][ T5310] but task is already holding lock: [ 484.259320][ T5310] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 484.268386][ T5310] [ 484.268386][ T5310] which lock already depends on the new lock. [ 484.268386][ T5310] [ 484.278784][ T5310] [ 484.278784][ T5310] the existing dependency chain (in reverse order) is: [ 484.287782][ T5310] [ 484.287782][ T5310] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 484.295755][ T5310] __mutex_lock_common+0x1eb/0x2390 [ 484.301493][ T5310] mutex_lock_nested+0x17/0x20 [ 484.306767][ T5310] rfkill_register+0x33/0x8a0 [ 484.311954][ T5310] hci_register_dev+0x452/0x970 [ 484.317317][ T5310] vhci_create_device+0x32c/0x5c0 [ 484.322846][ T5310] vhci_write+0x391/0x450 [ 484.327681][ T5310] vfs_write+0x712/0xd00 [ 484.332432][ T5310] ksys_write+0x14d/0x250 [ 484.337266][ T5310] do_syscall_64+0x4c/0xa0 [ 484.342190][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.348589][ T5310] [ 484.348589][ T5310] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 484.356393][ T5310] __mutex_lock_common+0x1eb/0x2390 [ 484.362110][ T5310] mutex_lock_nested+0x17/0x20 [ 484.367383][ T5310] vhci_send_frame+0x88/0x100 [ 484.372569][ T5310] hci_send_frame+0x1a9/0x2e0 [ 484.377754][ T5310] hci_tx_work+0x9f9/0x1710 [ 484.382763][ T5310] process_one_work+0x863/0x1000 [ 484.388212][ T5310] worker_thread+0xaa8/0x12a0 [ 484.393396][ T5310] kthread+0x436/0x520 [ 484.397972][ T5310] ret_from_fork+0x1f/0x30 [ 484.402897][ T5310] [ 484.402897][ T5310] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 484.412101][ T5310] __flush_work+0xdd/0x1b0 [ 484.417027][ T5310] hci_dev_do_close+0x1e7/0x1030 [ 484.422470][ T5310] hci_unregister_dev+0x2d7/0x580 [ 484.428007][ T5310] vhci_release+0x73/0xc0 [ 484.432845][ T5310] __fput+0x234/0x930 [ 484.437343][ T5310] task_work_run+0x125/0x1a0 [ 484.442450][ T5310] do_exit+0x61e/0x20a0 [ 484.447136][ T5310] do_group_exit+0x12e/0x300 [ 484.452246][ T5310] get_signal+0x6ca/0x12c0 [ 484.457178][ T5310] arch_do_signal_or_restart+0xc1/0x1300 [ 484.463324][ T5310] exit_to_user_mode_loop+0x9e/0x130 [ 484.469125][ T5310] exit_to_user_mode_prepare+0xee/0x180 [ 484.475185][ T5310] syscall_exit_to_user_mode+0x16/0x40 [ 484.481158][ T5310] do_syscall_64+0x58/0xa0 [ 484.486081][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.492488][ T5310] [ 484.492488][ T5310] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 484.500123][ T5310] __mutex_lock_common+0x1eb/0x2390 [ 484.505835][ T5310] mutex_lock_nested+0x17/0x20 [ 484.511120][ T5310] bg_scan_update+0x44/0x3b0 [ 484.516222][ T5310] process_one_work+0x863/0x1000 [ 484.521672][ T5310] worker_thread+0xaa8/0x12a0 [ 484.526858][ T5310] kthread+0x436/0x520 [ 484.531434][ T5310] ret_from_fork+0x1f/0x30 [ 484.536359][ T5310] [ 484.536359][ T5310] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 484.546161][ T5310] __lock_acquire+0x2c33/0x7c60 [ 484.551532][ T5310] lock_acquire+0x197/0x3f0 [ 484.556546][ T5310] __flush_work+0xdd/0x1b0 [ 484.561474][ T5310] __cancel_work_timer+0x3ac/0x520 [ 484.567125][ T5310] hci_request_cancel_all+0xcc/0x300 [ 484.572931][ T5310] hci_dev_do_close+0x4e/0x1030 [ 484.578295][ T5310] hci_rfkill_set_block+0x10a/0x190 [ 484.584014][ T5310] rfkill_set_block+0x1c6/0x420 [ 484.589383][ T5310] rfkill_epo+0x75/0x170 [ 484.594139][ T5310] rfkill_op_handler+0x76/0x220 [ 484.599507][ T5310] process_one_work+0x863/0x1000 [ 484.604958][ T5310] worker_thread+0xaa8/0x12a0 [ 484.610160][ T5310] kthread+0x436/0x520 [ 484.614741][ T5310] ret_from_fork+0x1f/0x30 [ 484.619679][ T5310] [ 484.619679][ T5310] other info that might help us debug this: [ 484.619679][ T5310] [ 484.629892][ T5310] Chain exists of: [ 484.629892][ T5310] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 484.629892][ T5310] [ 484.645601][ T5310] Possible unsafe locking scenario: [ 484.645601][ T5310] [ 484.653041][ T5310] CPU0 CPU1 [ 484.658391][ T5310] ---- ---- [ 484.663743][ T5310] lock(rfkill_global_mutex); [ 484.668494][ T5310] lock(&data->open_mutex); [ 484.675591][ T5310] lock(rfkill_global_mutex); [ 484.682893][ T5310] lock((work_completion)(&hdev->bg_scan_update)); [ 484.689467][ T5310] [ 484.689467][ T5310] *** DEADLOCK *** [ 484.689467][ T5310] [ 484.697614][ T5310] 3 locks held by kworker/0:14/5310: [ 484.702890][ T5310] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 484.713239][ T5310] #1: ffffc9000377fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 484.723586][ T5310] #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 484.733056][ T5310] [ 484.733056][ T5310] stack backtrace: [ 484.738929][ T5310] CPU: 0 PID: 5310 Comm: kworker/0:14 Not tainted syzkaller #0 [ 484.746455][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.756497][ T5310] Workqueue: events rfkill_op_handler [ 484.761884][ T5310] Call Trace: [ 484.765182][ T5310] [ 484.768110][ T5310] dump_stack_lvl+0x168/0x230 [ 484.772785][ T5310] ? load_image+0x3b0/0x3b0 [ 484.777279][ T5310] ? show_regs_print_info+0x20/0x20 [ 484.782483][ T5310] ? print_circular_bug+0x12b/0x1a0 [ 484.787667][ T5310] check_noncircular+0x274/0x310 [ 484.792589][ T5310] ? add_chain_block+0x940/0x940 [ 484.797511][ T5310] ? lockdep_lock+0x141/0x1e0 [ 484.802182][ T5310] ? __lock_acquire+0x12d9/0x7c60 [ 484.807195][ T5310] ? lockdep_lock+0x1e0/0x1e0 [ 484.811866][ T5310] ? mark_lock+0x94/0x320 [ 484.816201][ T5310] __lock_acquire+0x2c33/0x7c60 [ 484.821053][ T5310] ? verify_lock_unused+0x140/0x140 [ 484.826257][ T5310] ? verify_lock_unused+0x140/0x140 [ 484.831464][ T5310] ? ret_from_fork+0x1e/0x30 [ 484.836051][ T5310] lock_acquire+0x197/0x3f0 [ 484.840545][ T5310] ? __flush_work+0xc1/0x1b0 [ 484.845121][ T5310] ? __lock_acquire+0x7c60/0x7c60 [ 484.850151][ T5310] ? read_lock_is_recursive+0x10/0x10 [ 484.855516][ T5310] ? start_flush_work+0x776/0x820 [ 484.860531][ T5310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 484.866415][ T5310] __flush_work+0xdd/0x1b0 [ 484.870820][ T5310] ? __flush_work+0xc1/0x1b0 [ 484.875400][ T5310] ? flush_work+0x20/0x20 [ 484.879715][ T5310] ? try_to_grab_pending+0xf3/0x7e0 [ 484.884901][ T5310] ? lockdep_hardirqs_off+0x70/0x100 [ 484.890175][ T5310] ? mark_lock+0x94/0x320 [ 484.894495][ T5310] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 484.900469][ T5310] ? lock_chain_count+0x20/0x20 [ 484.905310][ T5310] ? lockdep_hardirqs_off+0x70/0x100 [ 484.910582][ T5310] ? mark_lock+0x94/0x320 [ 484.914900][ T5310] ? __cancel_work_timer+0x331/0x520 [ 484.920175][ T5310] __cancel_work_timer+0x3ac/0x520 [ 484.925284][ T5310] ? cancel_work_sync+0x20/0x20 [ 484.930125][ T5310] ? __cancel_work+0x1f4/0x2d0 [ 484.934881][ T5310] ? lockdep_hardirqs_on+0x94/0x140 [ 484.940072][ T5310] ? __cancel_work+0x26f/0x2d0 [ 484.944823][ T5310] ? cancel_work+0x20/0x20 [ 484.949228][ T5310] hci_request_cancel_all+0xcc/0x300 [ 484.954503][ T5310] hci_dev_do_close+0x4e/0x1030 [ 484.959360][ T5310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 484.965244][ T5310] ? _raw_spin_unlock+0x40/0x40 [ 484.970088][ T5310] ? kobject_uevent_env+0x371/0x890 [ 484.975372][ T5310] hci_rfkill_set_block+0x10a/0x190 [ 484.980561][ T5310] ? rcu_lock_release+0x20/0x20 [ 484.985401][ T5310] rfkill_set_block+0x1c6/0x420 [ 484.990244][ T5310] rfkill_epo+0x75/0x170 [ 484.994472][ T5310] rfkill_op_handler+0x76/0x220 [ 484.999312][ T5310] process_one_work+0x863/0x1000 [ 485.004273][ T5310] ? worker_detach_from_pool+0x240/0x240 [ 485.009890][ T5310] ? lockdep_hardirqs_off+0x70/0x100 [ 485.015175][ T5310] ? _raw_spin_lock_irq+0xab/0xe0 [ 485.020187][ T5310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 485.025572][ T5310] ? wq_worker_running+0x97/0x170 [ 485.030613][ T5310] worker_thread+0xaa8/0x12a0 [ 485.035283][ T5310] ? lockdep_hardirqs_on+0x94/0x140 [ 485.040471][ T5310] ? lockdep_hardirqs_on+0x94/0x140 [ 485.045653][ T5310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 485.051700][ T5310] kthread+0x436/0x520 [ 485.055768][ T5310] ? rcu_lock_release+0x20/0x20 [ 485.060607][ T5310] ? kthread_blkcg+0xd0/0xd0 [ 485.065184][ T5310] ret_from_fork+0x1f/0x30 [ 485.069593][ T5310] [ 485.175194][ T5052] attempt to access beyond end of device [ 485.175194][ T5052] loop1: rw=1, want=52800, limit=40427 [ 485.256047][ T5052] attempt to access beyond end of device [ 485.256047][ T5052] loop1: rw=1, want=53248, limit=40427 [ 485.294285][ T5052] attempt to access beyond end of device [ 485.294285][ T5052] loop1: rw=1, want=60160, limit=40427 [ 485.846980][ T9171] loop1: detected capacity change from 0 to 1024