last executing test programs: 2m32.05472111s ago: executing program 2 (id=144): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x67ef, 0x4) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x8000000, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x400a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x5ea) 2m30.256809528s ago: executing program 2 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x82}, 'port0\x00', 0x25, 0x60041, 0x8000, 0xfffffffe, 0x9, 0x0, 0x5, 0x0, 0x7, 0x9}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x8966, 0x0, 0xfff9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x58f50a3820f07eb3}, {{@in=@loopback, 0x1, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x4, 0x3, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m28.590115363s ago: executing program 2 (id=157): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffd, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) 2m21.996821634s ago: executing program 2 (id=182): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x67ef, 0x4) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x8000000, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x400a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x5ea) 2m21.158451817s ago: executing program 2 (id=187): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000000000008"], 0x34}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x30}}, 0x0) 2m19.754591355s ago: executing program 2 (id=189): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2db5, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x2c020400) openat$sndseq(0xffffffffffffff9c, 0x0, 0x440002) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x80000) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x20, 0x18, 0x8, 0x8, 0x31, 0x10, &(0x7f0000000040)="490036f682001cd756a70d4fdcac9266fea13b3c68c304b332e67367a67be28d7faeaac5ddd2b6c8439b3b662a57bc3388"}) 2m4.092394693s ago: executing program 32 (id=189): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2db5, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x2c020400) openat$sndseq(0xffffffffffffff9c, 0x0, 0x440002) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x80000) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x20, 0x18, 0x8, 0x8, 0x31, 0x10, &(0x7f0000000040)="490036f682001cd756a70d4fdcac9266fea13b3c68c304b332e67367a67be28d7faeaac5ddd2b6c8439b3b662a57bc3388"}) 1m54.972095254s ago: executing program 1 (id=279): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000000000008"], 0x34}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m50.695587896s ago: executing program 1 (id=291): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x101701) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB='-'], 0x8b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file5\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xa2f, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x81, 0xffff) 1m47.530310538s ago: executing program 1 (id=299): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0xfd90, &(0x7f0000000080)={0x0, 0x4c}, 0x7, 0x0, 0x0, 0x98a594acf120b0d4}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd65, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt(r5, 0xfffffffb, 0x30, &(0x7f0000000200)=""/117, &(0x7f0000000000)=0x75) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r7, 0x2000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040840) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) 1m47.318364569s ago: executing program 1 (id=301): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m47.148068696s ago: executing program 1 (id=302): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 1m45.747756184s ago: executing program 1 (id=306): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x7, 0x80}}, @l2cap_info_req={{0xa, 0x40, 0x2}, {0x43}}, @l2cap_move_chan_req={{0xe, 0x2, 0xfffffffffffffe2c}, {0x7f, 0x83}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x1000, 0x1}}, @l2cap_create_chan_req={{0xc, 0x10, 0x5}, {0x5, 0x10, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xffff, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0xbe, 0x4}, {0x80, 0x4}}]}}, 0x3e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 1m45.330857725s ago: executing program 33 (id=306): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x7, 0x80}}, @l2cap_info_req={{0xa, 0x40, 0x2}, {0x43}}, @l2cap_move_chan_req={{0xe, 0x2, 0xfffffffffffffe2c}, {0x7f, 0x83}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x1000, 0x1}}, @l2cap_create_chan_req={{0xc, 0x10, 0x5}, {0x5, 0x10, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xffff, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0xbe, 0x4}, {0x80, 0x4}}]}}, 0x3e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 9.043318707s ago: executing program 5 (id=747): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 7.874660883s ago: executing program 6 (id=760): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe800000000000000000e7ffffffffa93a0002000040000000000000000c9078010200010aa9b665cbf50f8ec6dc7886b3c070e00c8bc095352a77"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESHEX=0x0], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.384998011s ago: executing program 6 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 7.142368145s ago: executing program 6 (id=766): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0xfd90, &(0x7f0000000080)={0x0, 0x4c}, 0x7, 0x0, 0x0, 0x98a594acf120b0d4}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd65, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt(r5, 0xfffffffb, 0x30, &(0x7f0000000200)=""/117, &(0x7f0000000000)=0x75) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r7, 0x2000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040840) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) 6.261574802s ago: executing program 5 (id=768): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x13}, 0x10) 6.260677632s ago: executing program 6 (id=769): r0 = syz_open_dev$dri(&(0x7f0000000500), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000340)={r1, 0x0, 0x0, 0x3, 0x9, 0x518, 0x5f0264a, 0x1, 0x8, 0xa, 0x7f, 0xe00}) 6.152298992s ago: executing program 6 (id=770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/246, 0xf6}], 0x2) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039a97c89eb", 0x20}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) 5.689235198s ago: executing program 5 (id=776): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) 5.408233087s ago: executing program 5 (id=778): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.685247818s ago: executing program 6 (id=780): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x800) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 4.588020477s ago: executing program 5 (id=781): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4.587045747s ago: executing program 4 (id=782): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x101701) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB='-'], 0x8b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file5\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xa2f, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x81, 0xffff) 3.216283402s ago: executing program 0 (id=787): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [], "1b8d2069162baf34"}}}}}}}, 0x0) 3.099669674s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd730}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x4c, r2, 0x40d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x0, 0x0, {0x8, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x7, 0xe}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x40, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x26}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8860) 3.03548522s ago: executing program 5 (id=789): syz_usb_connect(0x0, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000406b1d010140000102030109025f0003010920a50904000000010100000a24010180040201020904010000010200000960090101010200000905010908000602f1072501eb8a09ca3a7c50158572"], 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x53}}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.971801077s ago: executing program 0 (id=790): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4089, 0xff9}], 0x1}, 0x1}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 2.83630201s ago: executing program 0 (id=792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2.628152441s ago: executing program 4 (id=793): socket(0x23, 0x2, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 2.53548852s ago: executing program 0 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.220211871s ago: executing program 3 (id=796): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.466556766s ago: executing program 3 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.454130026s ago: executing program 4 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r2, 0x5450) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.432610529s ago: executing program 0 (id=799): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x101701) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB='-'], 0x8b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file5\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xa2f, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x81, 0xffff) 1.340151848s ago: executing program 3 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.247309237s ago: executing program 3 (id=801): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.11609163s ago: executing program 3 (id=802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 320.181979ms ago: executing program 3 (id=803): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000000000008"], 0x34}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 286.652682ms ago: executing program 4 (id=804): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) 121.137609ms ago: executing program 0 (id=805): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000040)='./file0/file0\x00', 0x28) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xc000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_fuse_handle_req(r0, &(0x7f0000002140)="eddc08831620d1359f8d90cefe8b1dd29a70e297df50379dec21e6b6f4371769cd79891ca90cbe761297fd47a729fcad64093ca2856f8479d6b0f0fd103c4afce0e68bb7c9f5054d9ad45223f77b6f7777da1a60890bd6c8a4044c6f6907655abd8ee51c69e23dddc900ed32a4e04782700cc7827b298bed5d126d233fce354093b425b6e66614f2749ebd28f64d070143d8808a1d16b03d1c5c0d558b3e2a9c478864472c705053a3d701721c6f5d04a37f4979f886ecae86507ee83ba6c43a67586b3ba0b5e0d2b1c2346612eef3272983cf32d6eeb5c3bb91b5fdaa129620479faf422d416efe5e0b155d06c9ff2acb3dd9057d7047a311d32225554d80f28120a9cd4718658ec52de2a8d28cf1b0f75ae1c19e46e97a983599510b602001581d20a436690812d286dbaefae7ef84823046b898382cc0b3eccc4b9d45cf6c24637865ec8ae2b21aeefc30be8a6b740a3d27046a95afa77a34c6caa73c45b03a2c90977a23ecdaddef5c070c32f9195adda3c778d57579040489651b387391ad33374eed43572cd6a5441d701e77525322d82c202f5dda6c71e847f6bb3961075dc4eaf8a66c680c59d2ea854ab67ef95f86fd160b56e71c460c039a1d22d7deecfae271648c25439a332868f318d149d3aff739ffc5e918e17177791567f2135fbfdea63831b5f1d1d58740e29895c7fe2beae66e517baed6699e3a8c4d4d569a22da70a46daf6cd7edd66d249e271925c0897335cb9a928a0f85a9854fbac089e3567f7c655f7c5f38a092c0da4fbf87bbffb4105a77582e8f64372edd6062a1cee57c4cea6eb0557d722069a1034e5067dad45b6202ef56af0543eb87585112c03d243ccb4e340a02c555c50fdf201dc36fe8b2c1d8fcc3a5513e239bc693e4fa4dd4364b8810014c318f17e6d79bead5bcbe71bc2ddcc6a25559ba1b5839dfd9a121257cf8afbf94e0c36532b13b22be4ef5ce6e106c58c93bf1eaa5740dde7befdf54e91fe70a79b1e3e1a092e4a66e750bfc52ea38b0be72f69d33ab866f89955e4ef13987d60a67c58017aaca94eadcf556764e11ff2661c56b7fdf1d2b46585a37c2f552af49860d9790f0cca0141b615d52f4ffeabf297d315e06808561613e53087d5cc6f122749dad793e90bbba44354020f1315de3b228e122ee6ec9e941230fb9826e8c952e3659a99e3ba74b55c3f0fb42d27bd3bfa15c2324f71daef239ea272fd2fe8191349c7fb332d45f840eb66384ce5c0e2576c667fd41c1f9d9f0c5945fd7729f382da81df7d99c938600f7ff74dd4dea775e840a3a1350c147a023d71cd8f661dfc42e259561e44436d0ccf72c768a3c1c08156dddccba3872e2a84b00c95fd56deb04ff51b0a5f4c455ceed24716f94e957734dc61bf55bb96229288f7ccd2e916ef087ce5e9baac5bc295eaa701e0022ffe21e088f7ee28362be82a7e3eaabab7cea783fa3285d64b11ede3c5fb3e3a32f6e6fdcc7828580ee83958e3212271c9503a7d92f7c9b60043c205ecd3e6a37db8fc1d8fd6e62f275ea32f1c6b99dc64bbda8211a59b058929ebd8fec0cc6217b84b043c11618efc2735cd32fa9e8f75dc97648e48091e4bed37cb23f57a806e1ee5c08968953dce96e32c3bd6feeceffc585efb941760a33671dc2ee3baace168e0abec5be19df706fa854f24f6e531862d25ba2ed241da9a2132dcbde3a4d661d8038569f0880011f01022f3ce0012ce8368aa13ca2ea34baa40fa51a9ef908b297e34bfe7a2b10dddeef71a2ffaccf2e0f379bd8b3cd769005ef32d126e8acc72a67a700bdd041b4d91d3f50e16655b01e41c6dd74b0f1732bdb701fdb9651f1f757ba9208b24dd006e9b51096c543c252154b3d8d82d2d8bb464ca509c54f418a1663c5dae9523dc4f7693504eb4e865955c3da64b968c4fc3118277f09452bdbd46772b3e71a88f16dd972195db26c515058dc777642b772479258271a556449fbaa46bfe5ed3c3043a361cc45b35b2decc450cd881c0a5f6420a12117b022b4f4b9a2829919ede98b4f846ae027bf2d45661014ddd06bb17bcfc60e0faf3b86c97951df5d07d0d2e52c4c706ee9e6d1b20cb523173765a4cf5e3d6156c893e5774c9a1692b0c81a7c824552cba125a97180df847a220f52bb3d5b1a5d30da6922885d1f53f14eacdde694b0eb17d25c8b4bec368e9c39e050a77c6dea7bc28eeafbfe5057593d73f53b468cc79a5042a8fdae575e803bf5775849faee3991886e0ba7f6f0abfb6837137a3777b5d70fe9b20d8a9613b0e83415695703cd6d8ee9d4a55dc777eb6bdf1bc4d3fbf3be6a7efcc4d66505f9c45120bc1649cc214818d3dd5d65f9d745a559ba74bc1efd3d787745a6c3220e9bfd810e98a7d574332a5b274343724efc261ebe676dd55843ce4d69fb1538d77cd69715a5e565d703ee5c7e00d7502c3fe125b8be6cd825846b4a0a359e318383113dd552525d45ef673c5f910d856928623e4c0c611c4d839eb8c3a54afacd8b08b72c13695aace46f3099bef4eacb64450bacaf32c002350b10ac7ac8f6047b78bc20e11709970ab32a536c38ae9e3b0f8c887d99d2b24d2f279ee98411fd4c190fd940947a31348ea777d9673c5e2a661a57f5c91d48c92446be746d81b0eb9b093a63e33edf3eb7e96fddcc4becce2885f7cfadb4ebae55c749564f3aa3c7dcfef75a24edeb152411057623350be27961b7815a0c1f37945561602f3eb41d924a6280c4fda914a03e522ff801e605043286fae72e2fcaf705c0e0ac076e80144e9dc7ad99b02caa410151159d2a445648b1735851b6285bcbd3f4428ec273d2394cd314d022202fb109ef22da61c62672091a06ad8b32b4b809e7ae17e5ce49036064bc83d0423c413b5cbf37e359da8c220d3b2887f24a8044768e609c46340b19bb5e6e46ccae5cef0a8299c8e9a8c42c8fcafdda4a16684e6ba39e526d994dedde452db82a99ca3d309a4d2b79ce5e62a5e1ba23a2b56d2bf2fc778e1a68c234b526a4866a5181651265bb2e8ed12fb9267ab59b6b8aa320fe7a052b3c75a4f2e14b6f42d6aa5417a0af8cad9902238bbef4752f9412d36863f65e2b833bc25ba5baeb948d423c4c510b2ba7ec310c81da369c0d92c6aec8e942a9ea1b1b6d8a89c754bd189e9c63875897734e9bd82199bb6c032e296e1766570f617b64125ffa3f799acefb382839ed1ad467cd8cae08f2110e9a987458cd1130755e48350bb1ef7be1b68ddbfb4d5afd140bec076bce3915c69f8fa63c509596b4baf0f0320772132b764ec8801cc6bb9f7d6bedca869484f3b216b9928e3b051cd9277d177eed10ed428676fa5cf00dc7b5ace6594ffb93b056e35c70872a67d83431fb72cb008e9f93d34e2c1fdcc7dcd4251471677528d9927afefc2d096a37a64af210d12f11c04e96de1059ac18403bc8fe228bb3febd72fe483e9cb2add9c7a8dc631f3826aabe3b8aacd09f5589929d93b825c202b5b9d301b0bad3bc1642f56b70651916dbc47b368c94342e7713a0123d373eb30312dfe8f2b2c1fc5e504d93334686a78128402ee53b9c62f1dbdc1b93b9065eb02f245c995878a23766b2300d73069b25aed9eba351cff8367991cf2ff2df1e46d8bb4ebba855c97d285a8acf1967e94171e091f852eebfdb0a02a1638a59283b874122bdc2ab892f71b7b7c1de57b6a422641fa8b5699ccc434c31981d2b7843a1fa905da974d5dc10b80d4a15d2ccd5ed981eb92fbf0ec0b3c05308aef48780e91317c5bb80780d11e03fcfd0d6bcf488ef6a087fc7d154df6b7782dbcf0a5bd6b7e449b4f7fe86da88b6dc68b86b28563c3c79d8e9de27a8250b8145da5cc95f2c677ca8482e70f154d149deca496d073b38141675024ae871af91ea1bb48165679c35069a606bedb792f389a7818aae67f688a23f6f956173d85228bcb53c94fca992dc9ac7e62d9d38c14ea59bebf36b71aea4841f8e6873330a430f142dec5da1d5e5fab91351e71c59f7479d37e4741ed5133fc91719017c238b856a186be0f8f74f614f3a401c629ca203f4f637c0695cabdd7ff1fcfe65c0b3ef65513d97bcedbae6defa157957e288990c2ed17cf6ddb8a688e1c91824db832a996b6594d46f4fc673c8b1a3f35b7ac120fdceb293348b761ff679feaac66454ca6f0a4182f84385e4ab7b5d82f56fecbc4de14cb24139c1bfb432c0e206d8fb69c20bb3adc4a340c21259a397d681d379ef9cad5986587025029606c639be07a3dbe70538661d80aca995db8280c1fbdb03174378f5e11fda9c33ebda1ea78765f389f6a5933a4f18363d3dd6f88b4f6674781ea8793131245a83c1565e83515b54bff41c2b81619a6283d4e3982359ead8a923e9360a1472ccb363245497ab4bb016cd67d1960f9e1965ac34c2a9330793589ac53493b2532b175cb01ca201b4231b9359c2d44d14e6a32c0bd8c64e15142a293a0dbcb21c588ce4a84ac2a7dfe4ea1f379f338124b13b53e83d426d6c0a4cf68c265d0ea27dcb53077db5a2fda73ef07056e015a691ad30bf881d1bf9ecd32aea3761df5127f7adf6a021e72f5d4872aa5bb50f9ecf6c400af8d9a4d1565b2a6ddd83b20175d3adab46cb09536303b4721406d17d36e2d6d5960f7bfb2ccb520db72defd48c140c5d5d4fcc57b1bbfc8d2cede0a5b424eac842d713afbb30c66f7d7c1977c05b49bf1bd3e718c5a1df9a51c260a216af550a3528ccbe628ff70932a084ab83d33366cdb3d8da50404658f0d06a7f5f844657aefc1835f9170d550a1005a4008d3efe5d7e5f6f9b8f012ca1cf5b9881c9501dfec13deda78e8c41fd46f4db7d59d6374fe8db7c0271ccfe200875c56e3fa83d9f9260dec45908f44bdffc993db2b77773c2ad85d8ea45eddb88ad49e2992df0aa81a9993467a84c1b336006a29012f07378836c36838f17a41e40da67a04f8f7e392d1601d93f4f62023df068e8911c8d22720f36ea2f99bca3f67bb218c6082607eb07221696e9fe8b26c7f6358c9c3aebd9ea066e4d4b503c119a50e99602cd4a0c1939fe6d3dc6edac94d87407f0a03d40d6bb6fdd8a13bd3f2cd064f31f41ef4cd7b573fa66f3c1e762381c758ec83ccca8a567c85e26b34d2d415f56b328c98fdcf294b83b3a0fab06b34b5e64fe35610cbfefbca0905a283ce23d633789ace5d3e7ba387b5ed3f3b51c421faea04f1d92ac9caab7c35ee0565f523c6f5ba8d2b325255b0308347a4279d264fdd54bdd10f491c1da8a5a7d15ffe9e77a20a6c941de72b079818edbd8613e4a4992ab36ccb4c8c16a21684846a9cf9bebb7c18d979760be9dd4563b98674c499a52251912002011de82e426ee2bbcd0ce5ffa8f7d5c2c7756f6ca467446062044bec80593461286edc91431b77427f515ba55e4c6bd305885ad308d3992fddf3623b57a6962aba8c9f3d68c7c01187fffca440f9631e5dcba0ec6beb4ff7e0f3aeb4b42b0db6ae60f6dc53f1e450ef20c9d4437f873f7747f8b1588d9414dbdb303f4214097ef21e5291ab4602b9e13a13b11e41d3c855f3a1daad1e9972bfd7f0a71c5ab75c7558a3ebe750965714c54d76d0d7f22a4a5dd58480a642a92b80a23338322f46b7e4bd373b3dac7bf2912f9ed81d62702e7cbea90ff7ea23de844f97f1565d1e09f5248dd265ca1b15b480bd099dd5b4109beb01544c69f8006ebd3933d8f09635edea54a1ca9d81089e92cb304de6c09145cbd7e7d64a1e33343910d806768a11a52dfa414280e74f6cac667623afaef5fa121291ad4488718688d3dc21b4a4d48fca3ed0bf5dae28d5e7051cc7b43a1fb0bcc31c6f56492340c213c544581607e985e054171cdc6873541d65264c67154e59b938c3553d1aa2cf7762e3d66c143c5bb9cb0d9c2d74f8afe0f0e5b3f052de8d3d6ae8cd5328eb4df7ce79f8c1a1072f75cd6a24d8b4b3e6f57497b1e6f2d484c2621ad25daff1590a315b3e6ea02cc91a5754cc38046e0d3b21075b7ada7b85a7f796725262428485bf940c5e3a2782513cce1bc067571f1df53fd1f095cfd263c93429ec060fc982863467a06f9cd1d916ca318dcf06193a54763b5646666131f8d957b3d0d5f3409c3f9702de39fb73b947d4e895e53e95b4e5fda191b9ce1ba7c756658be8975fc331602bb59800a696fc4a3e372d02a1ad5597b08eb1d53de867241237ce0838963cc9b55807ef0f31ff2b134619307b1bab072f8b77563a4798878ed0b45fe476999774d5f1df9cd4b015d49e66581db3cec6ebf46f0f649d642d7a20e724078797106e8cf20be5f53afa5543159f9ee13198569d51e38b610d5205dc5368ab10724e5057f9a0d8b4466bc17e69d59c89c89ab5b698ee11a7eb799813449d5f5f3a865d892d1d30edfa50539c760392c7836c6251dc022f7fc640cb9867fe3b68ac8c474939abc9b45f8b3eb153769a6a786ea1fe3511528f69636d1e6149516c83bcf34af3adac7f95455a550074cb5e0eafb57f9cd30b6b937bb36ce58d3ffc11f3f796b637a07171d27c2a1ca5a0fda8e580b7a0a964e2f0f45a9ce456368aadebddae7906770885f82cb0ca8938868d0d6b0b13dfd6e57c1d6e477f2a0881923528d4b961978cd87fd6fb7d1ac60816488d7ee804714a1938875b274a244f7863ab7bce9dd013eb02464007ec30cf3bc1202f39c518454b742da6153964d34957a040134237a28de9ca792070ddc16ce963aea1a2d9ac198386644de148806034aee21252b91f3418fe90b3258e45032ad92c065a8819bb4d794eda6dc21cc0550d697151df89a49f058f8f5d72c32a937f1bde0c0dd496bd3b300a5da7e5a8e70edeb75f78b74ba167cb1bac6a58c80e977ec09b9532e1f7a79cd986246f5a6ce9ed01fe1fd97763e30a8bf3726fde0299c76919f0d4ab6de87be39f2be55549451d9989b02f248eb350a62ebaacb60432440fab0f405039c902a41b25681d8fdb950687991eba64a3438614eefe8f33c6d2a2d5196ed33dfbbf82dcedf778320e158f9e9b7d84477fa45dc8e789d728f25d510c8647380d3a145840827d88f119280e48f717706eba36e690550fea68e317a65d89c02a0cba8ec914f76768e1bf558e3e7799b1ee11fccc6ba517575c291de176e01d4cae39d5c4caad155571a7db27fc5fb31410909ede695f03a516e26f4d0cc2ecebaa6b68e82a7df5017aeb68ccb6b05440583ba505a6e770806eada7bcd8f75420e3b4ac587afba4df1587c48bf1899f9345841d907c4da7dbbcbec5ff216dd62a42fc5b08b76c1eec255bd36332de506fea1f3be27e09a44407478a3efc192992819d149a078b4e69b94f35e1bc2aa495ba8ec9777f692417d30f787811e33c9a6dc188c0b610f0f276ca7d1a43468b415f68086533ca86ecf8f9becee4719c61dee4640a84439575a4c77b63d8050c3f64ce04ad80c70f7ae3fc3d07d52e7324deb63950ff11e735034d9c894dda524ff0f837998f2d0dbfe650a759ff7890d249394936e0ab1d8b02d7f7bbc19adb1f92fe31c20589e8e68590e1904031ab2731c6a5c8334c985b556705a184af40c6b6239be9b5fbdaee65298d1ba652d9d7c6cc79864e2747a52f40b00a65f83b7d1f8477d1e6bffecfb8319e2f041b44ed1c846e8b62891dfce9263027cebb12753fc28ba87b8a86a26b3129df7107650d9b1a19999a63a29b52e60ed9a7a364cafa5cb8c10450534cf1281fd186ef1c9c3d47685f9beec390f1b0016687eb6a907d685d8c4325ff038c4e33971b17f1f929cb4ba781192fd0321683388f13a62b253f9a82c5210999a7e8d726631865460867621fc2f8d49f568902c4a0f3d8d7d8223c5e4fed911b0be5e06192acbd903bb08b148786a54fbe0bd045f57d0ce841ed97022e6a72467d5028f43218d2d859a74672548312da0fbd9f2a9767b209e178ad361d4327013e6d0d533b54d95d8134ecb0d12d54cc9dbaa7cb833014b7f9b388d52b558e93ce3d3236ea8344e9a6e549327f0c15607783698a7eb73f657dab52c7da663e34df48633ceaaba6bce098bab626708c019dd40dd08fc547cd39302fc0710af41138fa92e7d10bc4487fa6b523bca92f68d4b5b4115b168252105ae7d4ad43ba804fb7af32d45e15ad9cc87104e86202145f5fa166656b87dc0865bdc9b1355d3717bc457f51a8a637b839d9921e038ac2e8ddda834117be1fd4c1dee178f700a79ecf0114b7ed8e46a960f2f27f30e017e588f023b82dee0d084415ceef0e739e396ccac4b781deebccb5f81b55b3e0271de8c3f0f94e4837a65e44d73963fe06c64cb574591a8c80b02ad9ac5804783a4edaf64b3d9d94da55b8de7bdddedd4b1d4514974414025df132ea797048d0816bb5e903c1c592d7e7e8b75ebc57e29b016923b9cc19ee712c1373960462b1839bd4e9e7ec3b625cd07c7260a2015ef12b2aefa43369ad1e99b2b67df7c8b01351e90508d01c78d3dce7789be3bb78e79a62d4b83caff39ed67ed64a6dbb3093a67fef6dede6d345602870fc9f7f047d55892f227dda7912f6220f583d63d0a01d2695ed22b663a08470faedf261508beaf8af61725da3eb673d217ac04c88026790258900128e0baf06ed36186e346c5619100b4baa1717d853fba6d80edea5b4cca549e86dad042b6748bd4c6f5d881fe50f37196e8440af086e17c01df3548fc901666821f264a2fc891999f92f84102f4c88f7eb3dd08ad0cd5602731e9b46fd8b0a04410c543b884508e3f28f5de194ba2b1ca4adec8f2e5b0bd1df21f2489093cb117e13cfe9d95990d93b63fff0a938153cc598f381cd3d439e06cdfcbbc2f672d44821a6c22287e1d3766c7e50942fef8c14f61fc92629f7a7f92bf06b03fd537f6c05713a3946b0b0abf01fdc19bcca198493b3de2adea76d1b70a2415369bef7b5a7b24325e28063217509aaa00e76e8e70ee34739a4b79721da25419f1a0a77f4afc4464f01cebe7accd7ca06c309e715c01ad4200bd5982a8293bc078f8576c3862f7d862dacec3535f651fa4c06f29e95653df4f956c0d7223665fa78504ec78e59128df9e71ed0c5821380edc943f6689bc595ef084a7a11050d105304b6d5f83614a09fac54761157f801b2429be33cc90a33a39accc4299d46a595a36964dc444ac405946fdfd5f83f0e14ecd5ae0ed3fab375b1955175b2cae6e465a2d19feeac60391b226b41db31c06a3a96e69612d9bc9c082ab3f7c83449a7e1a52efcddf87074d65f9a842d599ebdc96d6ddd2194addf5b23723f8bf4c5f1a9058be17430508b80a8bc1cabcd30f79d1894d441650993da491344d6f2afb8de8351caebdacfd5886300096498265746aa7b8386431c996f79ff0e6357a974b0e0ba5b3033451cab54ac97d81ceb39fd6fffe67c417cde5b00bce5431cf7d76ecd663f19d638e2fbc821530d3f155bfaadf2b2e59633f8ba2396d32d124919eddbd1f21792b2dbf7768ed6772e2d1baeaeddedc08a005777bb331bc614ad5baaa048e7583052f0fffa1a5c398255ecaf11fdb58b5cb8ebd5b2532465c140647d1ec802b1c073cd1faab4d585e2077fdc50d0a22acf79b64b8e40f698d8ccda6e8b934ad1ab2ec58ffaba11e96cee74c496431b7c0c537c56b5818cdccdfd59cf47812dc6faee4ea896876220353cdb3e6e9e7f73416da4198766b8c86eb3a3dbe53a3b9663fcfb7750a591a56b129f44f379718401f4b77d819f0074788579d6a2afeccdcf99dd5a1b6a0eea8d04738e45846e295b11fc79b6c54ed92b869a21b317a2399233fd418c75c68ff31b6ec045cc4986537af07a1d9246a4ac491fd3ff5db6f934a7f2a734f07ead33e54300f39becd637ae986421f912928eadb2927234fd6b46a7bd33acf1397dc050b44e3945ae255d39b9b1c71c50b2340aa62b769056d809469ffaa687d547f6af09b8738763d847af7c1789cbc9e296351c36b24916c6db6f261ab1afa8feaa8b1f6651b86c55055eb982542457589ef291ee297297564011f7ec268b79cbdad2ea3f6d4665287a709fe40a0c3a3d1719a28e1ffe7d1bd38a78d684d941fa98c8fe4ac27b5d15430ff5262b487dc5ff13044473f0577a0476db071815bc5a03265ee7348fd1717b9ee4f0cc4af603a07ead890a2708ae89d6929535d3611c0a1313b2b687591733360e4654c15cb93fbbf9e22200a824463903637a1706eecb039fca4f82e40a15de077c964363c646b89633bb4ecc202b5459ed00b9c13f7db89b128258a13ed82502cdf08234466597cf71b4785f846e302571d32a299fc78005542e2975fd1c0200c39189b4f791009ce58a75af068b13a6f2966032e80fb1e3bb04a01990d722d6d14dcd75bdabf635bfaf39109ca8064eb3aca05dd9be7ba1b3dbeefde40f2be7aa3f5af14b0c4f5ff8f77ff825ac47804a98df922c4496f5f36eb2293c9589c607178b721ab7633779de0d5cf844188fffd04d31dab463d79a978f6c63dd80cd808894e28a576cf596786256dc6fba478b883e7b2b308bbd1c17799a4a0c2df029fbee9bdfdfbdfef8fcf21dbd042ead5eebe676b7dbcf00fd6ba394ba190db684f27a8b8f7434da427a3c40b393e32822e6a52de0caba46dbb82978273217ce10a25f82fcb607da4e2a34824362d5768f33b7123761c468053dfdfeb30f5eaa331429ced5d8e753f4b1d512ba951ea945b40026e8ecd4018071774be6b51387c8ebb8f2b185b24455eff20b6048845683c2874b361e50446f055d6e6dc651c815cffd5281e454a7184432b7072aaf169e221492e7fa0607c3806b484fd5285f1a0662c2385150cda84c7578f4abbb9477b6b08a1ca5c6c989324a525256fd9ae4142795c0dd5641f10d2ee5ac75c56cf40c0260bd5d319c62dcdd8ac14d0f9e4187c26b8244d309cd0a94956dc484f484f34de934a8cdf8b1744a1760cd0954d8a769bc65cae01374edc31da920e404ceaabed49eb5c32c0ed24bbdcc4288e3f46deca8de6f78334102b0d8020dc4ad03e4136b9d1fd9ca90c5734bc579711bcb50906041e36bb68a15e61244ec02b2144a2b0899d978a1a377a5ef3888ac8b4f8927c66da18307ccdf4da7673b0f009872bcf8607a20d4d6be9130d3954b42470606dda0ddddc208d754d1cc9dfbd39b3ff99d2a11e9b8c541ca2fc3093b72b817d71c33f886eb92392f61d3637c1af57a494ac1fa451bd25856065017729ce2452c7e3612db8678c242e70a6895a147847201443c7f0a2dd00b02f4d85d7fac4f0d4d6cfcad3a93d2d4f32708dd4a372129eea0294ad6688f33d13af78a8c1c107558a097d047d6bec1425b895d092515d94460c9928aab044a26fb29fe649d638d393bfbab59947129282d869a046c22d907e95a1c845aca9cfad4200deea8f28ff33b4b0ed2b782e3305ff426dff7a1c7484c10e459223dba903b429297b49ed5ba7ccea3bb1befc859731bb0cf71e4b7089127e86ecff65774e97f091fa2e805a9ae78447eff0b40d4a3a90bca860e283e3f7535e30ff6d617e12b382ef7c50ecf760165de7aaa6474b4d1b27136b83ecff9080a1", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x60, 0x0, 0xffffffffffffff94, {{0x9, 0x6, 0x5a, 0x35b4, 0x4, 0x4, 0x0, 0xffffff81}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=806): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x8, 0x9}) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001640)={@broadcast, @private}, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$unix(0x1, 0x5, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 78][ T4302] usb 1-1: USB disconnect, device number 2 [ 80.980147][ T4302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 80.991653][ T4302] cp210x 1-1:0.0: device disconnected [ 81.206622][ T4234] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 81.217986][ T4234] plantronics 0003:047F:FFFF.0001: parse failed [ 81.224900][ T4234] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 81.283228][ T4393] loop1: detected capacity change from 0 to 512 [ 81.311611][ T4393] ======================================================= [ 81.311611][ T4393] WARNING: The mand mount option has been deprecated and [ 81.311611][ T4393] and is ignored by this kernel. Remove the mand [ 81.311611][ T4393] option from the mount to silence this warning. [ 81.311611][ T4393] ======================================================= [ 81.415237][ T4302] usb 5-1: USB disconnect, device number 2 [ 81.451469][ T4393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.494042][ T4393] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.531839][ T4393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.42: bg 0: block 96: padding at end of block bitmap is not set [ 81.553486][ T4393] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 81.700475][ T4402] loop3: detected capacity change from 0 to 128 [ 81.778760][ T4406] loop1: detected capacity change from 0 to 128 [ 81.859175][ T4406] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.881178][ T4406] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.930126][ T4411] loop0: detected capacity change from 0 to 256 [ 81.992275][ T4411] exfat: Deprecated parameter 'utf8' [ 81.998704][ T4411] exfat: Unknown parameter 'keep_last_dots' [ 82.088762][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.167701][ T4423] loop4: detected capacity change from 0 to 1024 [ 82.221982][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 82.282867][ T4423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.325765][ T4432] loop3: detected capacity change from 0 to 1024 [ 82.369170][ T4432] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 82.382272][ T4434] loop1: detected capacity change from 0 to 16 [ 82.445542][ T4434] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.594367][ T4434] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 82.667939][ T4434] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 82.687133][ T4432] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.46: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 82.849001][ T4443] loop0: detected capacity change from 0 to 1764 [ 82.908440][ T4443] process 'syz.0.45' launched './file5' with NULL argv: empty string added [ 82.929585][ T4443] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 83.027954][ T4434] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 83.295396][ T4432] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.46: couldn't read orphan inode 11 (err -117) [ 83.338969][ T4449] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 83.408531][ T4434] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 83.417918][ T4434] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 83.428115][ T4434] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 83.429174][ T4449] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 83.438017][ T4434] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 83.457809][ T4434] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 83.467926][ T4434] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 83.477494][ T4434] attempt to access beyond end of device [ 83.477494][ T4434] loop1: rw=524288, want=32, limit=16 [ 83.489167][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 83.666638][ T4432] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.46: Invalid block bitmap block 0 in block_group 0 [ 83.817584][ T4465] loop4: detected capacity change from 0 to 128 [ 83.828383][ T4432] Quota error (device loop3): write_blk: dquota write failed [ 83.894480][ T4432] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 83.914074][ T4467] loop2: detected capacity change from 0 to 256 [ 83.933202][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.946381][ T4432] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.46: Failed to acquire dquot type 0 [ 83.958702][ T4465] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.025986][ T4467] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 84.053710][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 84.067837][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.072185][ T4465] EXT4-fs warning (device loop4): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 84.078349][ T4456] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.46: Invalid inode table block 8589934593 in block_group 0 [ 84.190462][ T382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm kworker/u4:3: Invalid inode table block 8589934593 in block_group 0 [ 84.225119][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.327661][ T4467] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 84.916519][ T4479] loop4: detected capacity change from 0 to 1024 [ 85.077400][ T4479] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.60: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.148308][ T4487] xt_NFQUEUE: number of total queues is 0 [ 85.176483][ T4479] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 85.191258][ T4479] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.60: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.254793][ T4489] ipt_CLUSTERIP: Please specify destination IP [ 85.921049][ T4479] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 85.942123][ T4479] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.60: Failed to acquire dquot type 0 [ 86.012268][ T4479] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 86.045304][ T4479] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.60: mark_inode_dirty error [ 87.756182][ T4495] loop0: detected capacity change from 0 to 1024 [ 87.772913][ T1110] cfg80211: failed to load regulatory.db [ 87.811166][ T4479] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 87.823262][ T4479] EXT4-fs (loop4): 1 orphan inode deleted [ 87.841096][ T4444] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.861235][ T4479] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 87.882566][ T4495] EXT4-fs (loop0): inline encryption not supported [ 87.896326][ T4501] loop1: detected capacity change from 0 to 512 [ 87.921055][ T4495] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.938930][ T4444] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 87.969201][ T4444] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:9: Failed to release dquot type 0 [ 87.994782][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,user_xattr,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 88.025556][ T4183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.127181][ T4501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.141102][ T4501] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.161685][ T4183] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 88.271291][ T4183] EXT4-fs error (device loop4): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 88.283146][ T4501] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.67: corrupted inode contents [ 88.351616][ T4501] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.67: mark_inode_dirty error [ 88.384780][ T4511] loop3: detected capacity change from 0 to 256 [ 88.402234][ T4501] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.67: corrupted inode contents [ 88.454686][ T4510] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.67: corrupted inode contents [ 88.493853][ T4510] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.67: mark_inode_dirty error [ 88.512974][ T4511] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 1) [ 88.535029][ T4511] exFAT-fs (loop3): failed to load alloc-bitmap [ 88.564188][ T4511] exFAT-fs (loop3): failed to recognize exfat type [ 88.621183][ T4510] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.67: corrupted inode contents [ 88.646183][ T4513] loop4: detected capacity change from 0 to 2048 [ 88.685211][ T4511] netlink: 666 bytes leftover after parsing attributes in process `syz.3.71'. [ 88.724974][ T4510] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.67: mark_inode_dirty error [ 88.759973][ T4510] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.67: corrupted inode contents [ 88.809229][ T4510] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.67: mark_inode_dirty error [ 88.931265][ T4513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.843594][ T4513] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.530408][ T4529] loop2: detected capacity change from 0 to 128 [ 93.131663][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.225844][ T4529] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.326584][ T4541] loop1: detected capacity change from 0 to 512 [ 93.397758][ T26] audit: type=1800 audit(1760669892.513:2): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 93.583406][ T4541] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.624905][ T4541] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.697656][ T4547] loop2: detected capacity change from 0 to 512 [ 94.366282][ T4547] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 94.438799][ T4547] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.637268][ T4559] loop4: detected capacity change from 0 to 2048 [ 94.738495][ T4559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.468312][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 96.520026][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.313635][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.583710][ T4573] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 100.194460][ T4622] loop4: detected capacity change from 0 to 512 [ 100.300574][ T4626] loop2: detected capacity change from 0 to 1024 [ 100.317361][ T4622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.341605][ T4622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.418238][ T4622] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.464813][ T4626] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,noquota,barrier,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 100.495873][ T4626] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.511340][ T4622] EXT4-fs (loop4): 1 truncate cleaned up [ 100.517304][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 100.608527][ T4626] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm syz.2.107: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.715137][ T4626] EXT4-fs (loop2): Remounting filesystem read-only [ 100.915321][ T4635] loop1: detected capacity change from 0 to 1024 [ 101.073641][ T4637] usb usb1: check_ctrlrecip: process 4637 (syz.4.105) requesting ep 01 but needs 81 [ 101.083309][ T4637] usb usb1: usbfs: process 4637 (syz.4.105) did not claim interface 0 before use [ 101.585813][ T4641] loop3: detected capacity change from 0 to 512 [ 101.636338][ T4643] loop4: detected capacity change from 0 to 512 [ 101.662356][ T4645] loop0: detected capacity change from 0 to 1024 [ 101.811405][ T4647] loop2: detected capacity change from 0 to 512 [ 101.839221][ T4641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.858709][ T4641] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.876221][ T4647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.898577][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.900572][ T4641] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 101.929333][ T4647] EXT4-fs (loop2): 1 truncate cleaned up [ 102.051380][ T4641] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.061736][ T4647] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 102.084465][ T4643] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.139028][ T4641] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.109: Failed to acquire dquot type 1 [ 102.211408][ T26] audit: type=1800 audit(1760669901.333:3): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.110" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 102.711768][ T4663] netlink: 27 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.446075][ T4671] loop3: detected capacity change from 0 to 136 [ 103.644850][ T4681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 103.733125][ T4190] rock: directory entry would overflow storage [ 103.739571][ T4190] rock: sig=0x4f50, size=4, remaining=3 [ 103.809320][ T26] audit: type=1326 audit(1760669902.923:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 103.821036][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 103.923775][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 103.960898][ T26] audit: type=1326 audit(1760669902.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.008261][ T26] audit: type=1326 audit(1760669902.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.131328][ T26] audit: type=1326 audit(1760669902.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.169185][ T4697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.250975][ T26] audit: type=1326 audit(1760669902.963:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.343445][ T4707] loop0: detected capacity change from 0 to 256 [ 104.360050][ T26] audit: type=1326 audit(1760669902.973:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.399000][ T4707] exfat: Unknown parameter '™ ¾úîuPäm [ 104.399000][ T4707] ØC¥Ì«ÅŒÝfQekÔê¨0ýø]&ýzOô ðßÍ÷Õ€Á~³¦Ü}Â' [ 104.463625][ T26] audit: type=1326 audit(1760669902.973:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db7b29ec9 code=0x7ffc0000 [ 104.581739][ T4711] loop3: detected capacity change from 0 to 1024 [ 104.642426][ T4715] loop0: detected capacity change from 0 to 512 [ 104.680200][ T4711] EXT4-fs (loop3): Ignoring removed bh option [ 104.691223][ T4711] EXT4-fs (loop3): Ignoring removed nobh option [ 104.710620][ T4711] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.734111][ T4718] loop2: detected capacity change from 0 to 512 [ 104.762182][ T4715] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.770500][ T4715] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.780936][ T4715] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.790081][ T4715] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.888235][ T4715] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.940913][ T4715] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 104.957826][ T4715] EXT4-fs (loop0): 1 truncate cleaned up [ 104.971111][ T4715] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 104.994254][ T4711] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,acl,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,init_itable=0x0000000000000101,dioread_nolock,,errors=continue. Quota mode: writeback. [ 105.029210][ T4718] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.131: Failed to acquire dquot type 1 [ 105.139837][ T4718] EXT4-fs (loop2): 1 truncate cleaned up [ 105.169990][ T4718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.175551][ T4711] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.130: Allocating blocks 497-513 which overlap fs metadata [ 105.249310][ T4711] EXT4-fs (loop3): pa ffff8880755fa460: logic 128, phys. 385, len 8 [ 105.258614][ T4711] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 105.268260][ T4718] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.371006][ T4248] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.458867][ T4731] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 105.812265][ T4248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 105.879545][ T4248] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 105.883171][ T4751] loop3: detected capacity change from 0 to 128 [ 105.923486][ T4752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.942039][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.992759][ T4248] usb 5-1: config 0 descriptor?? [ 106.070644][ T4751] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.072975][ T4758] loop0: detected capacity change from 0 to 16 [ 106.116895][ T4751] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.603904][ T4248] logitech 0003:046D:C626.0002: unbalanced collection at end of report description [ 106.631394][ T4248] logitech 0003:046D:C626.0002: parse failed [ 106.640941][ T4248] logitech: probe of 0003:046D:C626.0002 failed with error -22 [ 106.827159][ T4771] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 107.411813][ T2288] usb 5-1: USB disconnect, device number 3 [ 107.485477][ T4775] loop3: detected capacity change from 0 to 512 [ 107.713490][ T4775] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,journal_ioprio=0x0000000000000001,dioread_lock,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 107.858258][ T4775] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.193110][ T4793] loop4: detected capacity change from 0 to 16 [ 110.272691][ T4795] loop1: detected capacity change from 0 to 1024 [ 110.361030][ T4793] erofs: (device loop4): mounted with root inode @ nid 36. [ 112.230515][ T4810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.816325][ T4823] netlink: 104 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.896847][ T4854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.203770][ T4857] loop4: detected capacity change from 0 to 1024 [ 116.741013][ T4248] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 117.170935][ T4248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.512159][ T4871] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 117.605918][ T4873] netlink: 27 bytes leftover after parsing attributes in process `syz.2.187'. [ 117.625373][ T4248] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 117.643332][ T4248] usb 2-1: can't read configurations, error -71 [ 118.355810][ T4887] loop4: detected capacity change from 0 to 512 [ 118.484944][ T4887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.531199][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 118.705608][ T4887] EXT4-fs (loop4): 1 truncate cleaned up [ 118.720081][ T4887] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 118.894798][ T4901] loop0: detected capacity change from 0 to 512 [ 119.116689][ T4901] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 119.403423][ T4906] loop3: detected capacity change from 0 to 128 [ 119.506711][ T4901] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.520883][ T4901] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 119.563076][ T4901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.698100][ T4901] EXT4-fs (loop0): 1 truncate cleaned up [ 119.761056][ T4901] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,abort,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 119.930944][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 119.930959][ T26] audit: type=1800 audit(1760669919.053:11): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 120.898949][ T4482] attempt to access beyond end of device [ 120.898949][ T4482] loop3: rw=1, want=150, limit=128 [ 121.202178][ T4922] loop1: detected capacity change from 0 to 1764 [ 121.266294][ T4922] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 121.279910][ T4924] loop0: detected capacity change from 0 to 2048 [ 122.542067][ T4924] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 122.549773][ T4924] UDF-fs: Scanning with blocksize 512 failed [ 122.772826][ T4924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.044519][ T26] audit: type=1800 audit(1760669922.163:12): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.202" name="file1" dev="loop0" ino=818 res=0 errno=0 [ 123.651868][ T4941] netlink: 45 bytes leftover after parsing attributes in process `syz.0.209'. [ 123.865669][ T4944] loop0: detected capacity change from 0 to 256 [ 123.908060][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 123.979354][ T26] audit: type=1800 audit(1760669923.093:13): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.210" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 124.006509][ T4944] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 124.058468][ T4944] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 124.125625][ T4944] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 124.450280][ T4951] loop0: detected capacity change from 0 to 2048 [ 124.534801][ T4176] loop0: p1 < > p3 [ 124.560197][ T4176] loop0: p3 size 134217728 extends beyond EOD, truncated [ 124.654192][ T4951] loop0: p1 < > p3 [ 124.672755][ T4951] loop0: p3 size 134217728 extends beyond EOD, truncated [ 124.680275][ T4956] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.790875][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.043583][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 125.053918][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 125.065519][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 125.103105][ T4958] loop0: detected capacity change from 0 to 1024 [ 125.211069][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.291039][ T13] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 125.305059][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 125.310557][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 125.328600][ T13] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 125.352545][ T13] usb 5-1: config 17 has no interface number 0 [ 125.358788][ T13] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.406959][ T13] usb 5-1: config 17 interface 8 has no altsetting 0 [ 125.525304][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 125.531207][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 125.631839][ T13] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 125.650156][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.693469][ T13] usb 5-1: Product: syz [ 125.697785][ T13] usb 5-1: Manufacturer: syz [ 125.698546][ T4966] loop3: detected capacity change from 0 to 2048 [ 125.702758][ T13] usb 5-1: SerialNumber: syz [ 125.941647][ T4966] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4294906829, location=4294906829 [ 126.021323][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 126.829723][ T4966] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.884295][ T13] usb 5-1: selecting invalid altsetting 0 [ 126.923204][ T4966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.029497][ T13] usb 5-1: USB disconnect, device number 4 [ 127.290909][ T26] audit: type=1326 audit(1760669926.288:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 127.375649][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.484869][ T26] audit: type=1326 audit(1760669926.325:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 127.625507][ T26] audit: type=1326 audit(1760669926.325:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 127.807422][ T26] audit: type=1326 audit(1760669926.325:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 128.956721][ T26] audit: type=1326 audit(1760669926.325:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 129.014317][ T26] audit: type=1326 audit(1760669926.325:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 129.104255][ C0] sched: RT throttling activated [ 129.924643][ T5006] loop0: detected capacity change from 0 to 1024 [ 130.137135][ T26] audit: type=1326 audit(1760669926.325:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 130.280732][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.447059][ T26] audit: type=1326 audit(1760669926.335:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 130.495863][ T5020] loop0: detected capacity change from 0 to 1764 [ 130.539777][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 130.578482][ T26] audit: type=1326 audit(1760669926.363:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4977 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b3b83ec9 code=0x7ffc0000 [ 130.666641][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.677061][ T2288] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.703695][ T13] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.717288][ T13] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 130.737217][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.812737][ T13] usb 4-1: config 0 descriptor?? [ 130.877245][ T5032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.245'. [ 130.943915][ T2288] usb 2-1: Using ep0 maxpacket: 32 [ 131.193632][ T2288] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.216802][ T2288] usb 2-1: config 0 has no interface number 0 [ 131.240002][ T5004] loop3: detected capacity change from 0 to 4096 [ 131.895605][ T2288] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.937005][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.952550][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.014396][ T2288] usb 2-1: Product: syz [ 132.018661][ T2288] usb 2-1: Manufacturer: syz [ 132.078972][ T2288] usb 2-1: SerialNumber: syz [ 132.160969][ T2288] usb 2-1: config 0 descriptor?? [ 132.201735][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.233: corrupted inode contents [ 132.239121][ T2288] smsc95xx v2.0.0 [ 132.274829][ T5004] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #15: comm syz.3.233: mark_inode_dirty error [ 132.358499][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.233: corrupted inode contents [ 132.548037][ T5004] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.233: mark_inode_dirty error [ 132.702325][ T5052] loop4: detected capacity change from 0 to 1764 [ 132.940304][ T5052] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 133.390347][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.233: corrupted inode contents [ 133.436253][ T5004] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.233: mark_inode_dirty error [ 133.469984][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.476442][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.569956][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.233: corrupted inode contents [ 133.596072][ T2288] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 133.618525][ T5062] loop0: detected capacity change from 0 to 128 [ 133.631101][ T2288] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 133.735291][ T5004] EXT4-fs error (device loop3): ext4_truncate:4273: inode #15: comm syz.3.233: mark_inode_dirty error [ 133.778333][ T5004] EXT4-fs error (device loop3) in ext4_setattr:5608: Corrupt filesystem [ 133.868161][ T4296] usb 4-1: USB disconnect, device number 2 [ 133.938219][ T2288] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 133.986952][ T2288] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 134.012353][ T5069] loop4: detected capacity change from 0 to 2048 [ 134.027803][ T2288] usb 2-1: USB disconnect, device number 4 [ 134.119093][ T5072] loop3: detected capacity change from 0 to 256 [ 134.165982][ T5072] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.233223][ T5072] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 134.292962][ T5069] EXT4-fs (loop4): Ignoring removed bh option [ 134.397691][ T5072] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 134.474478][ T5069] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 134.949833][ T5081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.966819][ T5081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.979675][ T5081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.979675][ T5081] [ 134.989728][ T5081] EXT4-fs (loop4): Total free blocks count 0 [ 134.995874][ T5081] EXT4-fs (loop4): Free/Dirty block details [ 135.002797][ T5081] EXT4-fs (loop4): free_blocks=2415919104 [ 135.008788][ T5081] EXT4-fs (loop4): dirty_blocks=32 [ 135.014319][ T5081] EXT4-fs (loop4): Block reservation details [ 135.020452][ T5081] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 135.438395][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 135.454345][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.454345][ T154] [ 135.826890][ T5096] loop4: detected capacity change from 0 to 1024 [ 136.011517][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,noquota,barrier,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 136.034931][ T5070] chnl_net:caif_netlink_parms(): no params data found [ 136.254935][ T5096] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.397699][ T4248] Bluetooth: hci5: command 0x0409 tx timeout [ 136.533771][ T4318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.535681][ T5107] loop1: detected capacity change from 0 to 164 [ 136.546549][ T5096] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.604474][ T5096] EXT4-fs (loop4): Remounting filesystem read-only [ 137.581946][ T5107] isofs_fill_super: root inode is not a directory. Corrupted media? [ 137.994826][ T4318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.181473][ T5114] loop3: detected capacity change from 0 to 1764 [ 138.287188][ T5125] loop4: detected capacity change from 0 to 1024 [ 138.968794][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 139.024508][ T4184] syz-executor (4184) used greatest stack depth: 20960 bytes left [ 139.093177][ T5125] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 5: comm syz.4.268: lblock 5 mapped to illegal pblock 5 (length 1) [ 139.114551][ T5125] EXT4-fs (loop4): Remounting filesystem read-only [ 139.121446][ T5125] Quota error (device loop4): write_blk: dquota write failed [ 139.129221][ T5125] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.139673][ T5125] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.268: Failed to acquire dquot type 0 [ 139.151810][ T5125] EXT4-fs (loop4): Remounting filesystem read-only [ 139.159586][ T5125] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.268: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.189177][ T5125] EXT4-fs (loop4): Remounting filesystem read-only [ 139.197750][ T5125] EXT4-fs (loop4): 1 orphan inode deleted [ 139.204386][ T5125] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: writeback. [ 139.268348][ T5131] loop1: detected capacity change from 0 to 2048 [ 139.276728][ T4317] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 5: comm kworker/u4:6: lblock 5 mapped to illegal pblock 5 (length 1) [ 139.350355][ T5131] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 139.376089][ T4318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.411985][ T4317] EXT4-fs (loop4): Remounting filesystem read-only [ 139.420283][ T5129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 139.512079][ T5131] UDF-fs: Scanning with blocksize 512 failed [ 139.539767][ T4317] Quota error (device loop4): remove_tree: Can't read quota data block 5 [ 139.553304][ T4317] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 139.670385][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.678103][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.704793][ T5131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.729714][ T5129] EXT4-fs (loop4): Remounting filesystem read-only [ 139.781505][ T5070] device bridge_slave_0 entered promiscuous mode [ 139.815454][ T4317] EXT4-fs (loop4): Remounting filesystem read-only [ 139.922265][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.966045][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.975610][ T5070] device bridge_slave_1 entered promiscuous mode [ 139.994682][ T4318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.206403][ T5070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.242279][ T5070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.291274][ T5145] loop4: detected capacity change from 0 to 2048 [ 140.336815][ T5145] loop4: p1 < > p3 [ 140.342954][ T5145] loop4: p3 size 134217728 extends beyond EOD, truncated [ 140.567689][ T5070] team0: Port device team_slave_0 added [ 140.719515][ T5070] team0: Port device team_slave_1 added [ 140.749992][ T5149] netlink: 52 bytes leftover after parsing attributes in process `syz.0.276'. [ 140.784670][ T5142] loop4: detected capacity change from 0 to 8 [ 140.904491][ T5153] loop3: detected capacity change from 0 to 1764 [ 142.805955][ T4296] Bluetooth: hci5: command 0x040f tx timeout [ 142.851386][ T5151] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 142.876239][ T5149] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.885282][ T5149] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.136270][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 144.589279][ T5157] loop4: detected capacity change from 0 to 1024 [ 144.745128][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.761126][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.889201][ T5070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.951055][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.991138][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.018860][ T4296] Bluetooth: hci5: command 0x0419 tx timeout [ 145.164051][ T5070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.355092][ T5070] device hsr_slave_0 entered promiscuous mode [ 145.381660][ T5070] device hsr_slave_1 entered promiscuous mode [ 145.403029][ T5070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.433453][ T5070] Cannot create hsr debugfs directory [ 145.955899][ T5191] loop4: detected capacity change from 0 to 1024 [ 146.141352][ T5191] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 146.164229][ T5191] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.195962][ T5191] EXT4-fs (loop4): Remounting filesystem read-only [ 147.190445][ T5070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.276541][ T5205] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)$™æ`¡Æ6L) Ñι] [ 147.279232][ T5070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.337092][ T5070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.345473][ T5208] loop3: detected capacity change from 0 to 512 [ 147.351346][ T5205] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 147.413043][ T5205] Error parsing options; rc = [-22] [ 147.467883][ T5070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.503299][ T5208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.563971][ T5208] EXT4-fs (loop3): 1 truncate cleaned up [ 147.621657][ T5208] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 148.359097][ T26] audit: type=1326 audit(1760669945.991:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 148.389491][ T4318] device hsr_slave_0 left promiscuous mode [ 148.406897][ T4318] device hsr_slave_1 left promiscuous mode [ 148.482058][ T26] audit: type=1326 audit(1760669946.065:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5e3e23f79 code=0x7ffc0000 [ 148.507947][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.575701][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.625372][ T26] audit: type=1326 audit(1760669946.065:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 148.690092][ T5234] loop1: detected capacity change from 0 to 1764 [ 148.697031][ T4318] device bridge_slave_1 left promiscuous mode [ 148.705034][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.715507][ T26] audit: type=1326 audit(1760669946.065:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 148.819181][ T5241] loop3: detected capacity change from 0 to 1024 [ 148.861359][ T4318] device bridge_slave_0 left promiscuous mode [ 148.892768][ T26] audit: type=1326 audit(1760669946.065:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5e3e23f79 code=0x7ffc0000 [ 148.939761][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.965209][ T5234] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 149.014992][ T26] audit: type=1326 audit(1760669946.065:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5e3e23f79 code=0x7ffc0000 [ 149.038213][ T5241] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 149.079767][ T4318] device veth1_macvtap left promiscuous mode [ 149.090501][ T5241] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.126002][ T26] audit: type=1326 audit(1760669946.065:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 149.149539][ T26] audit: type=1326 audit(1760669946.065:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 149.162081][ T4318] device veth0_macvtap left promiscuous mode [ 149.179255][ T26] audit: type=1326 audit(1760669946.065:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 149.190772][ T5241] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.296: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.260529][ T26] audit: type=1326 audit(1760669946.065:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 149.270018][ T4318] device veth1_vlan left promiscuous mode [ 149.291049][ T5241] EXT4-fs (loop3): 1 orphan inode deleted [ 149.301360][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.367542][ T4318] device veth0_vlan left promiscuous mode [ 149.637930][ T5264] loop3: detected capacity change from 0 to 4096 [ 149.682576][ T5264] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.801426][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.298: corrupted inode contents [ 149.870289][ T5264] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #15: comm syz.3.298: mark_inode_dirty error [ 149.905024][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.298: corrupted inode contents [ 149.961058][ T5264] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.298: mark_inode_dirty error [ 150.022130][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.298: corrupted inode contents [ 150.073777][ T5264] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.298: mark_inode_dirty error [ 150.126375][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #15: comm syz.3.298: corrupted inode contents [ 150.146645][ T5264] EXT4-fs error (device loop3): ext4_truncate:4273: inode #15: comm syz.3.298: mark_inode_dirty error [ 150.198924][ T5264] EXT4-fs error (device loop3) in ext4_setattr:5608: Corrupt filesystem [ 150.302325][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 150.410124][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 150.458295][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.652542][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.510102][ T4318] bond0 (unregistering): Released all slaves [ 151.663413][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 152.131531][ T5287] loop4: detected capacity change from 0 to 128 [ 152.147928][ T5070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.207081][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.247157][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.268832][ T5070] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.312347][ T5287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.323612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.353802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.374953][ T5287] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.408703][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.415955][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.433419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.450793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.546463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.576779][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.584353][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.648341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.716012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.769294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.804964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.832999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.880605][ T5070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.909292][ T5070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.952377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.961873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.050820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.114739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.154965][ T5298] loop0: detected capacity change from 0 to 8192 [ 153.168950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.204748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.248031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.726319][ T5324] loop3: detected capacity change from 0 to 1764 [ 154.483402][ T5324] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 154.721887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.745604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.775202][ T5309] chnl_net:caif_netlink_parms(): no params data found [ 154.801568][ T5070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.916196][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 155.197847][ T4248] Bluetooth: hci1: command 0x0409 tx timeout [ 155.216830][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.248620][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.290546][ T5309] device bridge_slave_0 entered promiscuous mode [ 155.315755][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.345783][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.377978][ T5309] device bridge_slave_1 entered promiscuous mode [ 155.505849][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.550494][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.673882][ T5309] team0: Port device team_slave_0 added [ 155.735124][ T5309] team0: Port device team_slave_1 added [ 155.750833][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.810117][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.346091][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.422503][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.423198][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 157.504850][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.565219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.584430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.627079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.669011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.692137][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.699788][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.774266][ T5380] loop4: detected capacity change from 0 to 128 [ 157.803767][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.845397][ T5070] device veth0_vlan entered promiscuous mode [ 157.936843][ T5380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.980782][ T5380] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.039309][ T5070] device veth1_vlan entered promiscuous mode [ 158.305658][ T5309] device hsr_slave_0 entered promiscuous mode [ 158.321252][ T5309] device hsr_slave_1 entered promiscuous mode [ 158.348303][ T5385] loop3: detected capacity change from 0 to 2048 [ 158.751930][ T5309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.773454][ T5309] Cannot create hsr debugfs directory [ 158.969438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.986881][ T5385] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 158.989993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.022379][ T5385] UDF-fs: Scanning with blocksize 512 failed [ 159.205552][ T5385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.253832][ T5070] device veth0_macvtap entered promiscuous mode [ 159.266365][ T5070] device veth1_macvtap entered promiscuous mode [ 159.284042][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.345727][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.488216][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.564070][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.625068][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.721316][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.732078][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 159.777902][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.813255][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.855788][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.041490][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.060453][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.096954][ T5407] loop4: detected capacity change from 0 to 128 [ 160.115668][ T5409] loop3: detected capacity change from 0 to 128 [ 160.117558][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.160629][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.188619][ T5309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.322452][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.350771][ T5309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.370509][ T5409] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.630675][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.641985][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.653367][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.664233][ T5070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.673672][ T5070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.683125][ T5070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.693280][ T5070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.706876][ T5309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.724668][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.759170][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.306330][ T5309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.466618][ T5431] loop3: detected capacity change from 0 to 128 [ 161.549722][ T5441] loop0: detected capacity change from 0 to 512 [ 161.719024][ T5431] FAT-fs (loop3): bogus number of FAT structure [ 161.753021][ T5441] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nodelalloc,usrquota,barrier=0x0000000000000825,sysvgroups,resuid=0x0000000000000000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 161.777884][ T5441] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.783391][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.819511][ T5431] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 161.839846][ T5431] FAT-fs (loop3): Can't find a valid FAT filesystem [ 161.929170][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.957220][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 162.264682][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.609131][ T5441] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.332: corrupted inode contents [ 162.623716][ T5441] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #2: comm syz.0.332: mark_inode_dirty error [ 162.636998][ T5441] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #2: comm syz.0.332: corrupted inode contents [ 162.650253][ T5441] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.332: mark_inode_dirty error [ 162.705691][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.777201][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.800398][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.823319][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.876285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.914566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.075834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.160674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.171111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.180199][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.187445][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.213469][ T5466] loop0: detected capacity change from 0 to 2048 [ 163.222285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.419235][ T5466] EXT4-fs (loop0): Ignoring removed bh option [ 163.496836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.518343][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.525544][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.553506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.567183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.579163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.597021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.613591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.623343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.665713][ T5466] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 163.747036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.838380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.892673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.971296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.993285][ T5309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.218691][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.645661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.687848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.721063][ T5506] loop4: detected capacity change from 0 to 164 [ 164.756828][ T4318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.118532][ T4318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.826584][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.850183][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.875096][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 165.884740][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.943426][ T4318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.071616][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 166.215715][ T5537] loop3: detected capacity change from 0 to 512 [ 166.431521][ T5537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.476823][ T5550] loop5: detected capacity change from 0 to 2048 [ 166.509751][ T5537] EXT4-fs (loop3): 1 truncate cleaned up [ 166.536056][ T5537] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 166.612708][ T5550] EXT4-fs (loop5): Ignoring removed bh option [ 166.684059][ T5556] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 166.758720][ T4318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.942391][ T5550] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 167.054469][ T5566] loop4: detected capacity change from 0 to 1764 [ 167.096230][ T5566] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 168.038002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.040389][ T5582] loop3: detected capacity change from 0 to 128 [ 168.074295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.219544][ T5588] loop5: detected capacity change from 0 to 256 [ 168.236041][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.249379][ T5582] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 168.293045][ T5588] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.309269][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.330257][ T5588] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 168.351270][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.379200][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.401345][ T5588] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.417865][ T5309] device veth0_vlan entered promiscuous mode [ 168.496677][ T5309] device veth1_vlan entered promiscuous mode [ 168.652666][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.682304][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.756459][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.768247][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.794508][ T5600] loop5: detected capacity change from 0 to 512 [ 168.840053][ T5600] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 168.930451][ T5309] device veth0_macvtap entered promiscuous mode [ 168.973937][ T5309] device veth1_macvtap entered promiscuous mode [ 169.605397][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.687822][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.818783][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.886649][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.923435][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.966215][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.976355][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.019675][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.049331][ T5618] loop0: detected capacity change from 0 to 2048 [ 170.050050][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.083857][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.130866][ T5618] EXT4-fs (loop0): Ignoring removed bh option [ 170.147474][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.168243][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.205040][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.232175][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.251213][ T5618] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 170.320716][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.332687][ T5632] loop3: detected capacity change from 0 to 512 [ 170.404470][ T5632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.405272][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.427638][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.526246][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.587744][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.615667][ T5632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 170.617355][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.731643][ T5639] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.748908][ T5639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.761875][ T5639] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.761875][ T5639] [ 170.772093][ T5639] EXT4-fs (loop0): Total free blocks count 0 [ 170.778330][ T5639] EXT4-fs (loop0): Free/Dirty block details [ 170.784717][ T5639] EXT4-fs (loop0): free_blocks=2415919104 [ 170.791316][ T5639] EXT4-fs (loop0): dirty_blocks=32 [ 170.796628][ T5639] EXT4-fs (loop0): Block reservation details [ 170.803061][ T5639] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 170.962987][ T5632] EXT4-fs (loop3): 1 orphan inode deleted [ 170.968948][ T5632] EXT4-fs (loop3): 1 truncate cleaned up [ 171.007962][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.161359][ T5632] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.370: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 171.202351][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.219798][ T3083] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 171.239721][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.263519][ T3083] EXT4-fs (loop0): This should not happen!! Data will be lost [ 171.263519][ T3083] [ 171.283379][ T4196] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.292663][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 171.323491][ T5309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.340213][ T5309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.351358][ T5309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.380934][ T5309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.049553][ T4196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.087742][ T4196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.125456][ T4482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.175599][ T4482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.228047][ T4196] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 173.237519][ T4196] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 173.255013][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.292529][ T4196] usb 6-1: Manufacturer: syz [ 173.299026][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.331725][ T4196] usb 6-1: config 0 descriptor?? [ 173.367430][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.398335][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.694322][ T4318] device hsr_slave_0 left promiscuous mode [ 173.709624][ T4196] usbhid 6-1:0.0: can't add hid device: -71 [ 173.716329][ T4196] usbhid: probe of 6-1:0.0 failed with error -71 [ 173.777579][ T4196] usb 6-1: USB disconnect, device number 2 [ 173.794487][ T5685] loop5: detected capacity change from 0 to 2048 [ 173.837794][ T4318] device hsr_slave_1 left promiscuous mode [ 173.845839][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.856178][ T5692] loop3: detected capacity change from 0 to 1764 [ 173.920263][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.944106][ T5685] EXT4-fs (loop5): Ignoring removed bh option [ 173.998743][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.028435][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.057065][ T5692] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 174.116526][ T5685] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 174.171013][ T4318] device bridge_slave_1 left promiscuous mode [ 174.177853][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.260305][ T4318] device bridge_slave_0 left promiscuous mode [ 174.271720][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.368882][ T4318] device veth1_macvtap left promiscuous mode [ 174.415414][ T4318] device veth0_macvtap left promiscuous mode [ 174.448977][ T4318] device veth1_vlan left promiscuous mode [ 174.496434][ T4318] device veth0_vlan left promiscuous mode [ 174.612676][ T5708] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.628410][ T5708] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 174.640858][ T5708] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.640858][ T5708] [ 174.651411][ T5708] EXT4-fs (loop5): Total free blocks count 0 [ 174.658865][ T5708] EXT4-fs (loop5): Free/Dirty block details [ 174.665180][ T5708] EXT4-fs (loop5): free_blocks=2415919104 [ 174.671592][ T5708] EXT4-fs (loop5): dirty_blocks=32 [ 174.678195][ T5708] EXT4-fs (loop5): Block reservation details [ 174.685313][ T5708] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 175.107071][ T4480] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 175.152256][ T4480] EXT4-fs (loop5): This should not happen!! Data will be lost [ 175.152256][ T4480] [ 175.352164][ T5715] loop6: detected capacity change from 0 to 164 [ 175.801401][ T5730] loop6: detected capacity change from 0 to 2048 [ 175.841362][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 175.910132][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 175.941962][ T5730] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 175.955373][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.986632][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.086247][ T5730] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.392: bg 0: block 234: padding at end of block bitmap is not set [ 176.147110][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 176.147128][ T26] audit: type=1326 audit(1760669971.977:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5729 comm="syz.6.392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f0bb01ec9 code=0x0 [ 176.186552][ T5730] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 270 with error 28 [ 176.203414][ T5730] EXT4-fs (loop6): This should not happen!! Data will be lost [ 176.203414][ T5730] [ 176.214004][ T5730] EXT4-fs (loop6): Total free blocks count 0 [ 176.220097][ T5730] EXT4-fs (loop6): Free/Dirty block details [ 176.222044][ T4318] bond0 (unregistering): Released all slaves [ 176.226332][ T5730] EXT4-fs (loop6): free_blocks=0 [ 176.226410][ T5730] EXT4-fs (loop6): dirty_blocks=272 [ 176.287220][ T5730] EXT4-fs (loop6): Block reservation details [ 176.302836][ T5730] EXT4-fs (loop6): i_reserved_data_blocks=17 [ 176.366617][ T5738] loop3: detected capacity change from 0 to 164 [ 178.071081][ T5750] loop4: detected capacity change from 0 to 1024 [ 178.181792][ T5750] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.357723][ T5750] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 178.792279][ T5750] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 179.303896][ T5750] syz.4.395 (5750) used greatest stack depth: 20776 bytes left [ 180.077883][ T5790] loop6: detected capacity change from 0 to 1764 [ 180.100704][ T5793] loop5: detected capacity change from 0 to 256 [ 180.314103][ T5790] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.322825][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 180.670131][ T5805] capability: warning: `syz.3.410' uses deprecated v2 capabilities in a way that may be insecure [ 181.508746][ T5827] loop4: detected capacity change from 0 to 2048 [ 181.612979][ T5827] EXT4-fs (loop4): Ignoring removed bh option [ 181.742455][ T5827] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 181.981134][ T5842] binder: 5841:5842 ioctl c06c4124 0 returned -22 [ 182.270614][ T5848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.286459][ T5848] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.298868][ T5848] EXT4-fs (loop4): This should not happen!! Data will be lost [ 182.298868][ T5848] [ 182.308757][ T5848] EXT4-fs (loop4): Total free blocks count 0 [ 182.315036][ T5848] EXT4-fs (loop4): Free/Dirty block details [ 182.321199][ T5848] EXT4-fs (loop4): free_blocks=2415919104 [ 182.327626][ T5848] EXT4-fs (loop4): dirty_blocks=32 [ 182.333203][ T5848] EXT4-fs (loop4): Block reservation details [ 182.339851][ T5848] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 182.772844][ T4267] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 182.847598][ T4267] EXT4-fs (loop4): This should not happen!! Data will be lost [ 182.847598][ T4267] [ 183.082252][ T5861] loop4: detected capacity change from 0 to 512 [ 183.236416][ T5861] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.279462][ T5861] EXT4-fs (loop4): 1 orphan inode deleted [ 183.300186][ T5861] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.306932][ T5870] loop3: detected capacity change from 0 to 16 [ 183.409404][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 183.418455][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.526576][ T5870] erofs: (device loop3): mounted with root inode @ nid 36. [ 183.731564][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.026547][ T5889] loop6: detected capacity change from 0 to 2048 [ 184.082867][ T5889] EXT4-fs (loop6): Ignoring removed bh option [ 184.155005][ T5889] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 184.216544][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 184.488983][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 184.550826][ T5899] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 184.566879][ T5899] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 184.579928][ T5899] EXT4-fs (loop6): This should not happen!! Data will be lost [ 184.579928][ T5899] [ 184.589770][ T5899] EXT4-fs (loop6): Total free blocks count 0 [ 184.595865][ T5899] EXT4-fs (loop6): Free/Dirty block details [ 184.601902][ T5899] EXT4-fs (loop6): free_blocks=2415919104 [ 184.608546][ T5899] EXT4-fs (loop6): dirty_blocks=32 [ 184.614249][ T5899] EXT4-fs (loop6): Block reservation details [ 184.620472][ T5899] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 184.692818][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.889453][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.956727][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.029665][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.077100][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.130252][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.172836][ T4480] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 185.194904][ T21] usb 4-1: config 0 descriptor?? [ 185.227248][ T4480] EXT4-fs (loop6): This should not happen!! Data will be lost [ 185.227248][ T4480] [ 185.440716][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 185.574311][ T5914] loop4: detected capacity change from 0 to 1024 [ 185.597261][ T5917] loop6: detected capacity change from 0 to 128 [ 185.673075][ T5917] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 185.732702][ T21] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 185.753246][ T5914] hfsplus: invalid xattr key length: 0 [ 185.768084][ T21] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 185.784169][ T13] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 185.788057][ T21] microsoft 0003:045E:07DA.0003: unknown main item tag 0xd [ 185.823395][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.836243][ T21] HID 045e:07da: Invalid code 65791 type 1 [ 185.868296][ T13] usb 6-1: Product: syz [ 185.872567][ T13] usb 6-1: Manufacturer: syz [ 185.878580][ T13] usb 6-1: SerialNumber: syz [ 185.881410][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 185.910072][ T13] usb 6-1: config 0 descriptor?? [ 185.946325][ T5884] loop3: detected capacity change from 0 to 8 [ 185.966192][ T13] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 185.974434][ T9] hfsplus: b-tree write err: -5, ino 8 [ 185.999016][ T13] usb 6-1: Detected FT-X [ 186.048159][ T5884] SQUASHFS error: Unable to read inode 0x11f [ 186.055011][ T21] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 186.189434][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 186.209453][ T5929] loop6: detected capacity change from 0 to 16 [ 186.220721][ T13] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 186.235347][ T5921] Disabled LAPIC found during irq injection [ 186.264787][ T5929] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 186.286400][ T13] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 186.292920][ T4253] usb 4-1: USB disconnect, device number 3 [ 186.345954][ T13] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 186.427378][ T13] usb 6-1: USB disconnect, device number 3 [ 186.443289][ T5928] fido_id[5928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 186.488366][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 186.504198][ T13] ftdi_sio 6-1:0.0: device disconnected [ 188.034058][ T5940] loop6: detected capacity change from 0 to 128 [ 188.051683][ T5944] 9pnet: Insufficient options for proto=fd [ 188.109412][ T26] audit: type=1800 audit(1760669983.161:93): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.443" name="bus" dev="loop6" ino=1048620 res=0 errno=0 [ 189.183815][ T4248] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 189.192779][ T4248] Bluetooth: hci0: Injecting HCI hardware error event [ 189.229040][ T4201] Bluetooth: hci0: hardware error 0x00 [ 189.800601][ T5969] netlink: 48 bytes leftover after parsing attributes in process `syz.5.453'. [ 190.874814][ T5991] netlink: 27 bytes leftover after parsing attributes in process `syz.5.457'. [ 192.299579][ T6010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.609712][ T6024] loop5: detected capacity change from 0 to 1024 [ 193.640229][ T6038] loop0: detected capacity change from 0 to 512 [ 193.679300][ T6038] EXT4-fs (loop0): Test dummy encryption mode enabled [ 193.698698][ T6038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.793935][ T6038] EXT4-fs (loop0): 1 truncate cleaned up [ 193.799866][ T6038] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,noinit_itable,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 194.032920][ T6053] netlink: 27 bytes leftover after parsing attributes in process `syz.3.470'. [ 194.190816][ T6038] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 194.946349][ T6061] loop3: detected capacity change from 0 to 1024 [ 194.979195][ T6063] loop6: detected capacity change from 0 to 2048 [ 195.078367][ T6061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.089630][ T6061] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.157160][ T6063] EXT4-fs (loop6): Ignoring removed bh option [ 195.234681][ T6063] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 195.281485][ T6065] loop5: detected capacity change from 0 to 8192 [ 195.498316][ T6079] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.514387][ T6079] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.526754][ T6079] EXT4-fs (loop6): This should not happen!! Data will be lost [ 195.526754][ T6079] [ 195.536629][ T6079] EXT4-fs (loop6): Total free blocks count 0 [ 195.542779][ T6079] EXT4-fs (loop6): Free/Dirty block details [ 195.548976][ T6079] EXT4-fs (loop6): free_blocks=2415919104 [ 195.554752][ T6079] EXT4-fs (loop6): dirty_blocks=32 [ 195.560444][ T6079] EXT4-fs (loop6): Block reservation details [ 195.566458][ T6079] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 195.583283][ T6085] loop4: detected capacity change from 0 to 1764 [ 195.630016][ T6031] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.802133][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.908631][ T3083] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 195.931906][ T4248] Bluetooth: hci2: command 0x0406 tx timeout [ 195.949904][ T4248] Bluetooth: hci4: command 0x0406 tx timeout [ 196.006287][ T3083] EXT4-fs (loop6): This should not happen!! Data will be lost [ 196.006287][ T3083] [ 197.271882][ T6110] netlink: 27 bytes leftover after parsing attributes in process `syz.5.483'. [ 199.673133][ T6126] loop6: detected capacity change from 0 to 2048 [ 199.681233][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.695056][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.809400][ T6126] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 199.866961][ T6126] UDF-fs: Scanning with blocksize 512 failed [ 199.963900][ T6126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.433128][ T6146] netlink: 27 bytes leftover after parsing attributes in process `syz.6.497'. [ 200.738495][ T6153] loop5: detected capacity change from 0 to 1764 [ 200.979737][ T6151] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.270050][ T26] audit: type=1326 audit(1760669997.346:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 203.421765][ T26] audit: type=1326 audit(1760669997.374:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 203.484095][ T26] audit: type=1326 audit(1760669997.374:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 203.553016][ T26] audit: type=1326 audit(1760669997.374:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 203.579005][ T6183] loop6: detected capacity change from 0 to 8 [ 203.655650][ T6183] squashfs image failed sanity check [ 203.695448][ T26] audit: type=1326 audit(1760669997.374:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 203.824077][ T26] audit: type=1326 audit(1760669997.374:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 204.005540][ T26] audit: type=1326 audit(1760669997.374:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 204.130181][ T26] audit: type=1326 audit(1760669997.374:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 204.361175][ T26] audit: type=1326 audit(1760669997.374:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 204.626279][ T6212] netlink: 27 bytes leftover after parsing attributes in process `syz.5.513'. [ 204.976163][ T26] audit: type=1326 audit(1760669997.374:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc5e3e87ec9 code=0x7ffc0000 [ 205.249781][ T6214] loop6: detected capacity change from 0 to 1764 [ 205.351712][ T6223] loop4: detected capacity change from 0 to 128 [ 205.404368][ T6214] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 205.642436][ T6224] loop5: detected capacity change from 0 to 2048 [ 205.711130][ T6232] loop6: detected capacity change from 0 to 128 [ 206.221114][ T6224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.306122][ T6232] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.360937][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.405527][ T6232] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.156894][ T6259] loop6: detected capacity change from 0 to 512 [ 207.232407][ T6262] loop4: detected capacity change from 0 to 512 [ 207.254537][ T6259] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.913341][ T6262] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.026740][ T6262] EXT4-fs (loop4): 1 truncate cleaned up [ 208.032561][ T6262] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 208.070154][ T6259] EXT4-fs (loop6): 1 truncate cleaned up [ 208.076504][ T6259] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000800000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 208.668504][ T6276] loop5: detected capacity change from 0 to 1764 [ 208.752068][ T6276] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 209.041519][ T6277] netlink: 27 bytes leftover after parsing attributes in process `syz.0.529'. [ 209.264147][ T6290] usb usb1: check_ctrlrecip: process 6290 (syz.5.534) requesting ep 01 but needs 81 [ 209.290818][ T6290] usb usb1: usbfs: process 6290 (syz.5.534) did not claim interface 0 before use [ 209.672893][ T6295] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 210.842257][ T6297] loop4: detected capacity change from 0 to 2048 [ 211.032654][ T6297] EXT4-fs (loop4): Ignoring removed bh option [ 211.159773][ T6297] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 211.482407][ T6307] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.499173][ T6307] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 211.512721][ T6307] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.512721][ T6307] [ 211.523125][ T6307] EXT4-fs (loop4): Total free blocks count 0 [ 211.529578][ T6307] EXT4-fs (loop4): Free/Dirty block details [ 211.536041][ T6307] EXT4-fs (loop4): free_blocks=2415919104 [ 211.542697][ T6307] EXT4-fs (loop4): dirty_blocks=32 [ 211.548241][ T6307] EXT4-fs (loop4): Block reservation details [ 211.555441][ T6307] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 211.753814][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 211.955569][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.955569][ T144] [ 212.091712][ T6316] loop5: detected capacity change from 0 to 16 [ 212.177798][ T6316] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.225542][ T6318] loop0: detected capacity change from 0 to 128 [ 212.317379][ T4201] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -13 in[56, 4040] out[9000] [ 212.352168][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.361889][ T6316] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -13 in[56, 4040] out[4096] [ 212.391857][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 212.391874][ T26] audit: type=1800 audit(1760670005.874:123): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 212.548685][ T6318] FAT-fs (loop0): bogus number of FAT structure [ 212.692255][ T6318] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 212.704905][ T6331] loop6: detected capacity change from 0 to 128 [ 212.777456][ T6318] FAT-fs (loop0): Can't find a valid FAT filesystem [ 212.884433][ T6331] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.913691][ T6331] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.362068][ T6339] loop4: detected capacity change from 0 to 512 [ 213.548244][ T6347] loop6: detected capacity change from 0 to 256 [ 213.695714][ T6339] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 213.796181][ T6339] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.254319][ T26] audit: type=1800 audit(1760670007.614:124): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.544" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 215.729094][ T2288] Bluetooth: hci2: command 0x0409 tx timeout [ 215.733604][ T26] audit: type=1326 audit(1760670008.324:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.6.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0bb01ec9 code=0x0 [ 216.029176][ T6374] loop0: detected capacity change from 0 to 2048 [ 216.295079][ T6374] EXT4-fs (loop0): Ignoring removed bh option [ 216.329358][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.638948][ T6392] loop5: detected capacity change from 0 to 128 [ 217.371019][ T26] audit: type=1800 audit(1760670010.279:126): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.555" name="file1" dev="loop5" ino=1048625 res=0 errno=0 [ 217.519924][ T6374] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 217.769534][ T6402] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.769821][ T6402] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 217.769893][ T6402] EXT4-fs (loop0): This should not happen!! Data will be lost [ 217.769893][ T6402] [ 217.769912][ T6402] EXT4-fs (loop0): Total free blocks count 0 [ 217.769928][ T6402] EXT4-fs (loop0): Free/Dirty block details [ 217.769945][ T6402] EXT4-fs (loop0): free_blocks=2415919104 [ 217.769964][ T6402] EXT4-fs (loop0): dirty_blocks=32 [ 217.769979][ T6402] EXT4-fs (loop0): Block reservation details [ 217.769993][ T6402] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 219.089147][ T6424] loop5: detected capacity change from 0 to 1764 [ 219.287428][ T6423] loop4: detected capacity change from 0 to 732 [ 219.343097][ T6422] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.363540][ T6423] isofs_fill_super: get root inode failed [ 219.379701][ T6421] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.563244][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 219.737783][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 219.737783][ T9] [ 220.415668][ T6458] loop0: detected capacity change from 0 to 512 [ 220.625142][ T6458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.703331][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.568'. [ 220.862140][ T6458] EXT4-fs (loop0): 1 truncate cleaned up [ 220.959605][ T6458] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 222.878184][ T6501] libceph: resolve 'c.' (ret=-3): failed [ 225.233168][ T6521] loop5: detected capacity change from 0 to 2048 [ 225.463442][ T6521] EXT4-fs (loop5): Ignoring removed bh option [ 226.015585][ T6521] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 226.241393][ T6543] loop6: detected capacity change from 0 to 1764 [ 226.449236][ T6550] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.464768][ T6550] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 226.477134][ T6550] EXT4-fs (loop5): This should not happen!! Data will be lost [ 226.477134][ T6550] [ 226.486850][ T6550] EXT4-fs (loop5): Total free blocks count 0 [ 226.492855][ T6550] EXT4-fs (loop5): Free/Dirty block details [ 226.498837][ T6550] EXT4-fs (loop5): free_blocks=2415919104 [ 226.505364][ T6550] EXT4-fs (loop5): dirty_blocks=32 [ 226.510615][ T6550] EXT4-fs (loop5): Block reservation details [ 226.517104][ T6550] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 226.529686][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 226.775646][ T144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 226.815356][ T6543] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.040434][ T144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 227.040434][ T144] [ 227.493842][ T6561] netlink: 27 bytes leftover after parsing attributes in process `syz.5.594'. [ 227.790476][ T26] audit: type=1800 audit(1760670020.275:127): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.592" name="bus" dev="ramfs" ino=41524 res=0 errno=0 [ 228.739694][ T6589] loop0: detected capacity change from 0 to 2048 [ 228.827053][ T6589] EXT4-fs (loop0): Ignoring removed bh option [ 229.074563][ T6589] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 229.101999][ T6599] loop5: detected capacity change from 0 to 1764 [ 229.186831][ T6599] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 229.560521][ T6613] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 229.575948][ T6613] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 229.588394][ T6613] EXT4-fs (loop0): This should not happen!! Data will be lost [ 229.588394][ T6613] [ 229.598314][ T6613] EXT4-fs (loop0): Total free blocks count 0 [ 229.604815][ T6613] EXT4-fs (loop0): Free/Dirty block details [ 229.611124][ T6613] EXT4-fs (loop0): free_blocks=2415919104 [ 230.269417][ T6613] EXT4-fs (loop0): dirty_blocks=32 [ 230.269520][ T6613] EXT4-fs (loop0): Block reservation details [ 230.269537][ T6613] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 230.391286][ T4267] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 230.391372][ T4267] EXT4-fs (loop0): This should not happen!! Data will be lost [ 230.391372][ T4267] [ 230.601656][ T4296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 230.949164][ T4296] usb 7-1: Using ep0 maxpacket: 32 [ 231.082847][ T4296] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 231.199896][ T4296] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.687024][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.741343][ T4296] usb 7-1: config 0 descriptor?? [ 231.778077][ T6608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 231.805943][ T4296] hub 7-1:0.0: bad descriptor, ignoring hub [ 231.815794][ T4296] hub: probe of 7-1:0.0 failed with error -5 [ 231.837913][ T4296] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 231.900556][ T2288] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 232.569262][ T2288] usb 5-1: Using ep0 maxpacket: 32 [ 232.740500][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 232.879864][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 233.125459][ T2288] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 233.142141][ T2288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.187607][ T2288] usb 5-1: Product: syz [ 233.225353][ T2288] usb 5-1: Manufacturer: syz [ 233.256936][ T2288] usb 5-1: SerialNumber: syz [ 233.329691][ T2288] usb 5-1: config 0 descriptor?? [ 233.360923][ T6626] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 233.420764][ T13] usb 7-1: USB disconnect, device number 2 [ 233.456398][ T2288] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 233.647456][ T2288] usb 5-1: USB disconnect, device number 5 [ 233.698086][ T3083] usb 5-1: Failed to submit usb control message: -71 [ 233.733666][ T3083] usb 5-1: unable to send the bmi data to the device: -71 [ 233.759313][ T3083] usb 5-1: unable to get target info from device [ 233.765938][ T3083] usb 5-1: could not get target info (-71) [ 233.772554][ T3083] usb 5-1: could not probe fw (-71) [ 234.610459][ T6716] loop4: detected capacity change from 0 to 2048 [ 234.708137][ T6716] EXT4-fs (loop4): Ignoring removed bh option [ 234.739743][ T6716] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 234.963306][ T6716] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.978787][ T6716] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 234.992334][ T6716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 234.992334][ T6716] [ 235.002078][ T6716] EXT4-fs (loop4): Total free blocks count 0 [ 235.008481][ T6716] EXT4-fs (loop4): Free/Dirty block details [ 235.014511][ T6716] EXT4-fs (loop4): free_blocks=2415919104 [ 235.020566][ T6716] EXT4-fs (loop4): dirty_blocks=32 [ 235.025946][ T6716] EXT4-fs (loop4): Block reservation details [ 235.032054][ T6716] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 235.147789][ T4480] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 235.198308][ T4480] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.198308][ T4480] [ 235.376427][ T6752] loop8: detected capacity change from 0 to 8 [ 235.403804][ T6752] Dev loop8: unable to read RDB block 8 [ 235.419337][ T6752] loop8: unable to read partition table [ 235.462535][ T6752] loop8: partition table beyond EOD, truncated [ 235.495963][ T6752] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 235.510182][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 235.713544][ T21] usb 6-1: device descriptor read/64, error -71 [ 236.055519][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 236.168997][ T6771] netlink: 27 bytes leftover after parsing attributes in process `syz.6.648'. [ 236.269485][ T21] usb 6-1: device descriptor read/64, error -71 [ 236.406960][ T21] usb usb6-port1: attempt power cycle [ 237.479075][ T2288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.793515][ T2288] usb 5-1: Using ep0 maxpacket: 32 [ 238.241266][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.241362][ T4241] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 238.333527][ T6825] loop0: detected capacity change from 0 to 1764 [ 238.433904][ T6825] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 238.483014][ T21] usb 6-1: device descriptor read/8, error -71 [ 238.588789][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 238.697759][ T4241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.726456][ T4241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.738589][ T4241] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.759474][ T4241] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.777976][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.793364][ T2288] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 238.802812][ T2288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.830182][ T4241] usb 7-1: config 0 descriptor?? [ 238.846643][ T2288] usb 5-1: Product: syz [ 238.850954][ T2288] usb 5-1: Manufacturer: syz [ 238.855995][ T2288] usb 5-1: SerialNumber: syz [ 238.877288][ T2288] usb 5-1: config 0 descriptor?? [ 239.055829][ T2288] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 239.097213][ T6807] udc-core: couldn't find an available UDC or it's busy [ 239.128565][ T6807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.164557][ T2288] usb 5-1: USB disconnect, device number 6 [ 239.178224][ T4480] usb 5-1: Failed to submit usb control message: -71 [ 239.207134][ T4480] usb 5-1: unable to send the bmi data to the device: -71 [ 239.218845][ T6807] udc-core: couldn't find an available UDC or it's busy [ 239.229355][ T6807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.259333][ T4480] usb 5-1: unable to get target info from device [ 239.285049][ T4480] usb 5-1: could not get target info (-71) [ 239.301998][ T4480] usb 5-1: could not probe fw (-71) [ 239.370859][ T4241] usbhid 7-1:0.0: can't add hid device: -71 [ 239.377321][ T4241] usbhid: probe of 7-1:0.0 failed with error -71 [ 239.409547][ T4241] usb 7-1: USB disconnect, device number 3 [ 239.959228][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 240.396655][ T6886] netlink: 27 bytes leftover after parsing attributes in process `syz.6.675'. [ 240.890454][ T6905] loop8: detected capacity change from 0 to 8 [ 240.946470][ T4174] Dev loop8: unable to read RDB block 8 [ 240.961061][ T4174] loop8: unable to read partition table [ 240.985576][ T4174] loop8: partition table beyond EOD, truncated [ 240.997779][ T6905] Dev loop8: unable to read RDB block 8 [ 241.040655][ T6905] loop8: unable to read partition table [ 241.069759][ T6905] loop8: partition table beyond EOD, truncated [ 241.113069][ T6905] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 241.995800][ T6931] loop6: detected capacity change from 0 to 2048 [ 242.050852][ T6925] sctp: failed to load transform for md5: -2 [ 242.315444][ T6931] EXT4-fs (loop6): Ignoring removed bh option [ 242.827191][ T6931] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 243.122310][ T6931] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 243.139232][ T6931] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.152808][ T6931] EXT4-fs (loop6): This should not happen!! Data will be lost [ 243.152808][ T6931] [ 243.163281][ T6931] EXT4-fs (loop6): Total free blocks count 0 [ 243.169486][ T6931] EXT4-fs (loop6): Free/Dirty block details [ 243.175549][ T6931] EXT4-fs (loop6): free_blocks=2415919104 [ 243.182010][ T6931] EXT4-fs (loop6): dirty_blocks=32 [ 243.187392][ T6931] EXT4-fs (loop6): Block reservation details [ 243.193724][ T6931] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 243.241544][ T4482] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 243.311336][ T4482] EXT4-fs (loop6): This should not happen!! Data will be lost [ 243.311336][ T4482] [ 243.893230][ T6995] loop4: detected capacity change from 0 to 1764 [ 244.047415][ T6995] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 244.428355][ T6993] loop0: detected capacity change from 0 to 2048 [ 244.561891][ T6993] EXT4-fs (loop0): Ignoring removed bh option [ 244.576274][ T6998] overlayfs: './file0' not a directory [ 244.649028][ T6993] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 244.731449][ T6993] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 244.747228][ T6993] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 244.761797][ T6993] EXT4-fs (loop0): This should not happen!! Data will be lost [ 244.761797][ T6993] [ 244.772359][ T6993] EXT4-fs (loop0): Total free blocks count 0 [ 244.778562][ T6993] EXT4-fs (loop0): Free/Dirty block details [ 244.785036][ T6993] EXT4-fs (loop0): free_blocks=2415919104 [ 244.791070][ T6993] EXT4-fs (loop0): dirty_blocks=32 [ 244.796402][ T6993] EXT4-fs (loop0): Block reservation details [ 244.802598][ T6993] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 244.865454][ T4480] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 244.898280][ T4480] EXT4-fs (loop0): This should not happen!! Data will be lost [ 244.898280][ T4480] [ 245.181220][ T21] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 245.212160][ T7033] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 245.258956][ T7033] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 245.354120][ T4296] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.410762][ T7031] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 245.430105][ T7031] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 245.661397][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 245.897392][ T4296] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.987970][ T4296] usb 5-1: config 0 has no interface number 0 [ 246.195261][ T4296] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.391588][ T21] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 246.442188][ T4296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.452261][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.512150][ T4296] usb 5-1: config 0 descriptor?? [ 246.715306][ T4296] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.870898][ T4296] usb 5-1: USB disconnect, device number 7 [ 246.995237][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.004693][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.016108][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.102429][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.111383][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.156008][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.241634][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.273799][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.295270][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.391305][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.400595][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.411869][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.429497][ T7088] ksmbd: Unknown IPC event: 6, ignore. [ 247.531553][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.540524][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.560600][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.648161][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.663079][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.677803][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.771890][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.799692][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.817247][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.907086][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.918233][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.949475][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 248.090941][ T7122] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 248.143343][ T7122] cramfs: wrong magic [ 248.172126][ T21] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 248.200354][ T21] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 248.235510][ T21] usb 6-1: Product: syz [ 248.260014][ T21] usb 6-1: Manufacturer: syz [ 248.290449][ T21] usb 6-1: config 0 descriptor?? [ 248.332598][ T21] usb 6-1: can't set config #0, error -71 [ 248.359449][ T21] usb 6-1: USB disconnect, device number 8 [ 248.442145][ T4296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 248.904319][ T4296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 248.914563][ T4296] usb 7-1: no configurations [ 248.931283][ T4296] usb 7-1: can't read configurations, error -22 [ 249.461595][ T7194] kvm: pic: level sensitive irq not supported [ 249.461802][ T7194] kvm: pic: level sensitive irq not supported [ 249.469752][ T7194] kvm: pic: single mode not supported [ 249.476002][ T7194] kvm: pic: level sensitive irq not supported [ 249.482386][ T7194] kvm: pic: single mode not supported [ 249.489075][ T7194] kvm: pic: level sensitive irq not supported [ 249.511429][ T7194] kvm: pic: single mode not supported [ 249.518086][ T7194] kvm: pic: level sensitive irq not supported [ 249.531635][ T7194] kvm: pic: single mode not supported [ 249.538028][ T7194] kvm: pic: level sensitive irq not supported [ 249.549602][ T7194] kvm: pic: single mode not supported [ 249.556184][ T7194] kvm: pic: level sensitive irq not supported [ 249.574677][ T7194] kvm: pic: single mode not supported [ 249.580860][ T7194] kvm: pic: level sensitive irq not supported [ 249.593473][ T7194] kvm: pic: single mode not supported [ 249.599781][ T7194] kvm: pic: level sensitive irq not supported [ 249.612855][ T7194] kvm: pic: single mode not supported [ 249.619094][ T7194] kvm: pic: level sensitive irq not supported [ 249.640076][ T7194] kvm: pic: single mode not supported [ 249.656455][ T7194] kvm: pic: single mode not supported [ 249.744377][ T7200] netlink: 'syz.6.757': attribute type 10 has an invalid length. [ 249.780540][ T7200] device syz_tun entered promiscuous mode [ 249.831819][ T7200] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 250.357313][ T7217] netlink: 27 bytes leftover after parsing attributes in process `syz.3.762'. [ 250.965672][ T7227] loop0: detected capacity change from 0 to 1764 [ 251.476087][ T4196] Bluetooth: hci1: command 0x2016 tx timeout [ 251.515737][ T7224] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 251.609675][ T7230] comedi comedi3: no devices specified [ 253.352979][ T7268] loop6: detected capacity change from 0 to 2048 [ 253.483334][ T7268] EXT4-fs (loop6): Ignoring removed bh option [ 253.613772][ T7278] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 253.874136][ T7280] loop4: detected capacity change from 0 to 1764 [ 254.418897][ T2288] Bluetooth: hci1: command 0x0406 tx timeout [ 254.467204][ T7274] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 254.492941][ T7268] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 254.892670][ T7292] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.908057][ T7292] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 254.920447][ T7292] EXT4-fs (loop6): This should not happen!! Data will be lost [ 254.920447][ T7292] [ 254.930370][ T7292] EXT4-fs (loop6): Total free blocks count 0 [ 254.936823][ T7292] EXT4-fs (loop6): Free/Dirty block details [ 254.943184][ T7292] EXT4-fs (loop6): free_blocks=2415919104 [ 254.949009][ T7292] EXT4-fs (loop6): dirty_blocks=32 [ 254.954231][ T7292] EXT4-fs (loop6): Block reservation details [ 254.954409][ T7297] netlink: 'syz.4.788': attribute type 126 has an invalid length. [ 254.960403][ T7292] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 255.036372][ T7299] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.070348][ T7294] netlink: 'syz.4.788': attribute type 7 has an invalid length. [ 255.155008][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.565794][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 256.459761][ T21] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 256.476842][ T21] usb 6-1: config 0 has no interface number 0 [ 256.483209][ T21] usb 6-1: config 0 interface 48 has no altsetting 0 [ 256.701134][ T21] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 256.960195][ T7328] loop0: detected capacity change from 0 to 1764 [ 256.993026][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.260402][ T21] usb 6-1: Product: syz [ 257.414857][ T21] usb 6-1: Manufacturer: syz [ 257.446679][ T21] usb 6-1: SerialNumber: syz [ 257.452497][ T7326] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 257.462428][ T21] usb 6-1: config 0 descriptor?? [ 257.748788][ T7291] udc-core: couldn't find an available UDC or it's busy [ 257.765843][ T7291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.788345][ T7336] netlink: 27 bytes leftover after parsing attributes in process `syz.3.803'. [ 257.799147][ T4201] Bluetooth: hci5: Unknown advertising packet type: 0xd49b [ 257.799233][ T4201] Bluetooth: hci5: Unknown advertising packet type: 0x1bb5 [ 257.807559][ T4201] ================================================================== [ 257.823721][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 257.832243][ T4201] Read of size 1 at addr ffff88807c5e6406 by task kworker/u5:8/4201 [ 257.840454][ T4201] [ 257.842878][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 257.850682][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.861205][ T4201] Workqueue: hci5 hci_rx_work [ 257.866210][ T4201] Call Trace: [ 257.869729][ T4201] [ 257.872696][ T4201] dump_stack_lvl+0x168/0x230 [ 257.877512][ T4201] ? show_regs_print_info+0x20/0x20 [ 257.882861][ T4201] ? load_image+0x3b0/0x3b0 [ 257.887399][ T4201] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 257.892871][ T4201] print_address_description+0x60/0x2d0 [ 257.898463][ T4201] ? hci_le_meta_evt+0x12db/0x3b80 [ 257.903797][ T4201] kasan_report+0xdf/0x130 [ 257.908400][ T4201] ? hci_le_meta_evt+0x12db/0x3b80 [ 257.913564][ T4201] hci_le_meta_evt+0x12db/0x3b80 [ 257.918638][ T4201] ? hci_event_packet+0x2b0/0x12f0 [ 257.924077][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 257.924323][ T4196] usb 6-1: USB disconnect, device number 9 [ 257.930288][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 257.930363][ T4201] ? mark_lock+0x94/0x320 [ 257.930407][ T4201] ? mutex_unlock+0x10/0x10 [ 257.930429][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 257.930483][ T4201] ? lock_chain_count+0x20/0x20 [ 257.930508][ T4201] ? __rwlock_init+0x140/0x140 [ 257.930540][ T4201] hci_event_packet+0xe05/0x12f0 [ 257.930573][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 257.930628][ T4201] ? rcu_lock_release+0x20/0x20 [ 257.930657][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 257.930691][ T4201] hci_rx_work+0x255/0xa10 [ 257.930727][ T4201] process_one_work+0x863/0x1000 [ 257.930782][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 257.930804][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 257.930838][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 257.930859][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 257.930898][ T4201] ? wq_worker_running+0x97/0x170 [ 257.930923][ T4201] worker_thread+0xaa8/0x12a0 [ 257.930946][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 257.930967][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 257.930997][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 257.931021][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 257.931056][ T4201] kthread+0x436/0x520 [ 257.931075][ T4201] ? rcu_lock_release+0x20/0x20 [ 258.060513][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 258.065144][ T4201] ret_from_fork+0x1f/0x30 [ 258.069613][ T4201] [ 258.072657][ T4201] [ 258.075038][ T4201] Allocated by task 7291: [ 258.079561][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 258.084194][ T4201] __alloc_skb+0x22c/0x750 [ 258.088645][ T4201] vhci_write+0xbc/0x450 [ 258.093007][ T4201] vfs_write+0x712/0xd00 [ 258.097282][ T4201] ksys_write+0x14d/0x250 [ 258.101635][ T4201] do_syscall_64+0x4c/0xa0 [ 258.106075][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.112043][ T4201] [ 258.114476][ T4201] The buggy address belongs to the object at ffff88807c5e6000 [ 258.114476][ T4201] which belongs to the cache kmalloc-1k of size 1024 [ 258.128776][ T4201] The buggy address is located 6 bytes to the right of [ 258.128776][ T4201] 1024-byte region [ffff88807c5e6000, ffff88807c5e6400) [ 258.142939][ T4201] The buggy address belongs to the page: [ 258.146645][ T7339] overlayfs: workdir and upperdir must reside under the same mount [ 258.148867][ T4201] page:ffffea0001f17800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807c5e3000 pfn:0x7c5e0 [ 258.148898][ T4201] head:ffffea0001f17800 order:3 compound_mapcount:0 compound_pincount:0 [ 258.148914][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 258.148945][ T4201] raw: 00fff00000010200 ffffea0000899600 0000000200000002 ffff888016841dc0 [ 258.148964][ T4201] raw: ffff88807c5e3000 000000008010000b 00000001ffffffff 0000000000000000 [ 258.148975][ T4201] page dumped because: kasan: bad access detected [ 258.148991][ T4201] page_owner tracks the page as allocated [ 258.148998][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4325, ts 76589513192, free_ts 76449069898 [ 258.149031][ T4201] get_page_from_freelist+0x1b77/0x1c60 [ 258.149060][ T4201] __alloc_pages+0x1e1/0x470 [ 258.149080][ T4201] new_slab+0xc0/0x4b0 [ 258.149099][ T4201] ___slab_alloc+0x81e/0xdf0 [ 258.149116][ T4201] __kmalloc+0x1cd/0x330 [ 258.149132][ T4201] alloc_workqueue+0x169/0x13f0 [ 258.149151][ T4201] loop_configure+0x5af/0x1480 [ 258.149174][ T4201] lo_ioctl+0x8c8/0x1cf0 [ 258.149192][ T4201] blkdev_ioctl+0x33c/0x690 [ 258.149213][ T4201] block_ioctl+0xac/0xf0 [ 258.149229][ T4201] __se_sys_ioctl+0xfa/0x170 [ 258.149253][ T4201] do_syscall_64+0x4c/0xa0 [ 258.149271][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.149290][ T4201] page last free stack trace: [ 258.149296][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 258.149317][ T4201] free_unref_page+0x94/0x280 [ 258.149336][ T4201] __unfreeze_partials+0x1a5/0x200 [ 258.149355][ T4201] put_cpu_partial+0x12d/0x190 [ 258.149373][ T4201] qlist_free_all+0x35/0x90 [ 258.149394][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 258.149416][ T4201] __kasan_slab_alloc+0x2f/0xd0 [ 258.149436][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 258.149454][ T4201] kmem_cache_alloc+0x100/0x290 [ 258.149471][ T4201] getname_flags+0xb5/0x500 [ 258.149494][ T4201] do_sys_openat2+0xcf/0x4a0 [ 258.358033][ T4201] __x64_sys_openat+0x135/0x160 [ 258.362922][ T4201] do_syscall_64+0x4c/0xa0 [ 258.367366][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.373295][ T4201] [ 258.375673][ T4201] Memory state around the buggy address: [ 258.381318][ T4201] ffff88807c5e6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 258.389410][ T4201] ffff88807c5e6380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 258.397509][ T4201] >ffff88807c5e6400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.405613][ T4201] ^ [ 258.409709][ T4201] ffff88807c5e6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.418245][ T4201] ffff88807c5e6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.426707][ T4201] ================================================================== [ 258.434794][ T4201] Disabling lock debugging due to kernel taint [ 258.455439][ T382] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 258.501600][ T382] EXT4-fs (loop6): This should not happen!! Data will be lost [ 258.501600][ T382] [ 258.512341][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.519794][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 258.528809][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.539135][ T4201] Workqueue: hci5 hci_rx_work [ 258.543920][ T4201] Call Trace: [ 258.547214][ T4201] [ 258.550353][ T4201] dump_stack_lvl+0x168/0x230 [ 258.555050][ T4201] ? show_regs_print_info+0x20/0x20 [ 258.560353][ T4201] ? load_image+0x3b0/0x3b0 [ 258.564988][ T4201] panic+0x2c9/0x7f0 [ 258.568998][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 258.573511][ T4201] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 258.579412][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 258.584267][ T4201] ? hci_le_meta_evt+0x12db/0x3b80 [ 258.589381][ T4201] check_panic_on_warn+0x80/0xa0 [ 258.594479][ T4201] ? hci_le_meta_evt+0x12db/0x3b80 [ 258.599690][ T4201] end_report+0x6d/0xf0 [ 258.603938][ T4201] kasan_report+0x102/0x130 [ 258.608619][ T4201] ? hci_le_meta_evt+0x12db/0x3b80 [ 258.613912][ T4201] hci_le_meta_evt+0x12db/0x3b80 [ 258.618939][ T4201] ? hci_event_packet+0x2b0/0x12f0 [ 258.624170][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 258.630817][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 258.636837][ T4201] ? mark_lock+0x94/0x320 [ 258.641181][ T4201] ? mutex_unlock+0x10/0x10 [ 258.645881][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.652219][ T4201] ? lock_chain_count+0x20/0x20 [ 258.657167][ T4201] ? __rwlock_init+0x140/0x140 [ 258.662217][ T4201] hci_event_packet+0xe05/0x12f0 [ 258.667354][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 258.672735][ T4201] ? rcu_lock_release+0x20/0x20 [ 258.677596][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 258.682808][ T4201] hci_rx_work+0x255/0xa10 [ 258.687251][ T4201] process_one_work+0x863/0x1000 [ 258.692214][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 258.697943][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 258.703433][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 258.708494][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 258.713881][ T4201] ? wq_worker_running+0x97/0x170 [ 258.719002][ T4201] worker_thread+0xaa8/0x12a0 [ 258.723687][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 258.729963][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 258.735202][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 258.740535][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 258.746466][ T4201] kthread+0x436/0x520 [ 258.750757][ T4201] ? rcu_lock_release+0x20/0x20 [ 258.755705][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 258.760428][ T4201] ret_from_fork+0x1f/0x30 [ 258.764859][ T4201] [ 258.768152][ T4201] Kernel Offset: disabled [ 258.772599][ T4201] Rebooting in 86400 seconds..