last executing test programs: 4m37.192883058s ago: executing program 32 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r4, 0x0, r5}) 3m56.151754921s ago: executing program 33 (id=385): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 3m49.059509308s ago: executing program 34 (id=435): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) fdatasync(r1) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 3m47.069511543s ago: executing program 35 (id=446): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2000, 0x200, 0x0) 3m46.960148724s ago: executing program 36 (id=448): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x409, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x7171, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 3m28.910395482s ago: executing program 37 (id=498): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), 0x4) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m0.877145235s ago: executing program 38 (id=554): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000100)='./bus\x00', 0x2004, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 2m22.961647877s ago: executing program 39 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m11.546132192s ago: executing program 40 (id=819): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 1m14.38578305s ago: executing program 41 (id=1144): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="2fdeff46ef0d", 0x6}, {&(0x7f00000003c0)="f13f05ab0fe2cfbb1f654176dc16d96506e14842fad8224e54faa099a0003b763f48151b9c1b73823a8105fc8bb104412dce9b7e477e4f83d74bfa0f922c35b37f35ce28186b021cd2", 0x49}, {&(0x7f0000000440)="941a84a03ccf29d9b555bd06bceed69db2d75ea2ee322aa5897df2c994ad6488d15319443086a848becee5f338548011026f81fcd6d0598daeb4f2f651d6db670fb4866338de223db5d19b35b4b7b48e779290b09ff76345b52e5e03da0e39f576f1da771ee0893bf3f8085c0d2a3b44808c07c1fe25ac4f07c48336ed13002c398bbf922b273a5f64ccfc87543c206e216adfb2c3a0ec6a308abc", 0x9b}, {&(0x7f0000000580)="64df6aeb5373fd37e2ad04352f5c4fa1ff6811e4ee97890b08dc97d53cb257378755344dc4beb43b0dcb6b4dfce2cd0b7315563cb3c99c1b00a76ccf6297f252d6ca68a8bf73b29d3df9e1de41d9036b83ac0f356eccf606466223f1d9bee6edc5eb30baf0a1d5c5ec6a07c54ac4cc8e59527f0af5bb5dfe851f0340309f42f53c4708074a97596a2e7dcc7d872daedde4ae2d167117b1a67a55a7fd8e444b44a175cb0bd159516d837d4c26e810441450f64b84f35ac208f25625f2cae360163bda7625e0191f43c276f9b0ba0841", 0xcf}, {&(0x7f0000000080)="00f87e71511b66c69b66610c5c42477279430a0ff2", 0x15}, {&(0x7f0000002100)="3cd45a144fc0fd24b7453ea1bfb04160b16f548d3b18cddd0e2950968d56689e405b66731e6986b4ada1d0f6e65c8d396e44dc9b5b18d5f53b6c48f3e61bbdf35a57c09ddde83d0efce4dd7cdf82d0eff3786207e94ce8a303fb7972db17ba85198870a63088158ef87bbef4df8c2939a65360e42c852270592093bbaa65afdc2f2921b7bd2cdcd390ea04e2e0db70fc4cd7806a2a0d053668586ffb9da5407ff7268f8599e28edd48447e89df6f85ca983fffc1aeb4d9706031579fe64c25c2d3f681658f455334a200be508f20969be94f43baf5d5b0e510cf252f29ebe1a7ace3f987d136b4eeb2d5c8ce4c4ae94cf3ec794fb5a5fe7068193daef8f9642595815a9a61dd5449e1fb40e1df4c1a59f92fcaabea2a270dd83da8777fe2eef7324da50845f0a744709ed9ef8df19c1dcd9f5e4082585efda58719eed66f98803276a0e9c5965d5682422e4718926ac4b7de8eaeb0dd14779abc7709a419e135bbefffb7430aba0a0ee2ad3d12c882eb10d6152e7695677f7a4ceebb2cc23a2d6fd6b0af852cee345547b81cc7b24146b16cdc78ef4582112155a9b81eeda6db4a48b94d769e235b721c220b169d4dac4f59bd81d86fadf68607b730271d6966a9d919032c3260e9a6cffd4da52daf49b4adb56753553084ee93a294157c8a9d6134130f484f272fef068a822dae0ae5e8dc823b7c0e7ebcf6fc6c22387ac7b5c97a19282c9a532b86da31ee55734e0b2223c5a5de03531f54b355914f62c96680e2400ec03b217391cb976a80723814eafc31051f81ca1e6a50b8f933506796cd87a79fb6206d5ff523f96a0a3d3633e79483fd2c0d08d79a8c5121d3c4d7a79811f2de6eae01ccbcd85d37bae67a93a50f7d3acf10e8c9345f793b947a66c246764a3497fc4914214a42d518b9fca8714b710cc85b2129a19d3a9e3784a69c9e7209b9602c537ff5fed2893aeedd9954ac4fa39a5e422656ec8efe23d1236635c000ee09edfda57244fc97bd50560fba09bd45884fa3b90a398ba8b35409de73d56472932f29c16ff275826f8678d674e19e3e1d4d8690885f0127276e2e010b77621b1d0aebc70174864b92bd455ff5c93cc8dc060ab45dde79183a7b352202a38955ea3237f5201303e4b1e5feb2b5c39c35e470203142b6fbc155611ae4f7e383023cd36f7cf3331e04431d9c5b8247d75d44b491d67833d2f2636e62cbb5412ee4da8056ead2da6d306ded1dd1d662bddd0996bbda096450dd19a8ddace04a18c32a765558680e4e062c30973361a4b7cc8cf6f9ee9c3a391944b0392f1f123536a225b1a36bcfe55330a2495d7a2c21ba9675a4ed3b6d0776a31b239889536393ad546950090429a1c6a5bc333c4bee7684716d78f16000", 0x3db}], 0x6}, 0x20004815) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4) 54.79951031s ago: executing program 0 (id=1244): unshare(0x66000080) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff9e48fc26ffffffff05", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1=0xe0000300}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x4004000) 54.095767099s ago: executing program 0 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$eJzs3c9rHOUbAPBnNkl/f79NoRT1IIEerNRumsQfFYTWo2ixoPe6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j8gePVc0EKREvTgJTKb2XabzSabZHW37ucD077vzGSfeXfmffd5d3bZAAbWWPZPIeLFiPgiiTjctG048o1ja/utPL4xnS1JrK5+9HsSSb6usX+S/38wr7wQET9+FnGy0Bq3urQ8VyqX04W8Pl6bvzpeXVo+dXm+NJvOplcmp6bOvDE1+fZbb3atra9e+PPrD++/d+bz4ytfff/wyN0kzsWhfFtzO3bhVnNlLMby52Qkzq3bcaILwfpJ0usDYEeG8n4+EtkYcDiG8l4P/PfdjIhVYEAl+j8MqEYe0Jjbd2ke/Nx49O7aBKi1/cNr743Evvrc6MBK8szMKJvvjnYhfhbjh9/u3c2W2OJ9iJtdiAfQcOt2RJweHm4d/5J8/Nu50/U3jze3Psagvf5AL93P8p/XNsp/Ck/yn2jJf36uZ467HR+io/5feNiFMG1l+d87G+a/T4au0aG89r96zjeSXLpcTk9HxP8j4kSM7M3qm93PObPyYLXdtub8L1uy+I1cMD+Oh8N7n/2bmVKttJs2N3t0O+Klp/lvEi3j/756rrs+/82ejwsdxjiW3nu53bat29+s+xnw6ncRr2x4/p/e0Uo2vz85Xr8exhtXRas/7hz7qV387bW/+7Lzf2Dz9o8mzfdrq9uP8e2+v9J223Z6/e9JPq6X9+TrrpdqtYWJiD3JB63rJ5/+baPe2D9r/4njm49/G13/+yPikw7bf+fonba79sP5n9nW+d9+4cH7n37TLn5n5//1eulEvqaT8a/TA9zNcwcAAAAAAAD9phARhyIpFJ+UC4Vice07vEfjQKFcqdZOXqosXpmJ+ndlR2Ok0LjTfbjp8xAT+edhG/XJdfWpiDgSEV8O7a/Xi9OV8kyvGw8AAAAAAAAAAAAAAAAAAAB94mCb7/9nfh3q9dEB/zg/+Q2Da8v+341fegL6ktd/GFz6Pwwu/R8GV4f9/5ctf80deO54/YfBpf/D4NL/YXBt3P/N9gEAAAAAAAAAAAAAAAAAAAAAAAAAAGCHLpw/ny2rK49vTGf1mWtLi3OVa6dm0upccX5xujhdWbhanK1UZstpcboyv9XjlSuVqxOTsXh9vJZWa+PVpeWL85XFK7WLl+dLs+nFdORfaRUAAAAAAAAAAAAAAAAAAAA8X6pLy3OlcjldUGhbOBt9cRg7LiRbneWz+cWwoxDDm+2zfzePrNDLQg8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY5+8AAAD//5d3NP0=") r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 53.060103447s ago: executing program 0 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 51.797651358s ago: executing program 0 (id=1246): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000340)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {}, {@uid}, {@gid}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 51.525559738s ago: executing program 0 (id=1248): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f00000002c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 51.116006926s ago: executing program 0 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x17, &(0x7f0000000340)=0x3) 50.750694776s ago: executing program 42 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x17, &(0x7f0000000340)=0x3) 46.650350304s ago: executing program 2 (id=1285): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 46.340336831s ago: executing program 2 (id=1290): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000034d, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf09918bc75bdfc4b, 0x5, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x3, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 46.148546323s ago: executing program 2 (id=1293): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)) close(r0) 45.734709213s ago: executing program 2 (id=1294): bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./bus\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWbbVOLZk5/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAeJBeGvvG0GHv/wDwkXLO538AAAAAAAAAAAAAANjpUhTxZ5Hi1Z+004Xqekf9TGv2ytXxkdHNd9uTIkUtiqq+/Fs/eOjwkaPHjg938877f9iejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nX/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/8KPf4nZneOyKIn4WKerfezc1I6IW9z4Wd3nu3G97qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0YPYC7uSSPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+O7tqd2HPm5BX9m3IuJmPARztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFz6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVh/794UHa4a9N9ShionrFb6cPfrADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MXe6nrH0uIm7E1s7J7c+nDqda+efD7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/elM3e15z63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDI2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfR3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234/1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNuwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnN/58oc1/wM9267lef1xnv+Dd5n/v48Uf/LTp3JdZ+wP5dsfr/5dm//fiRT/9avra4/l2n1rtQe32q3tVs7/lyLFiR/9aLXPef7zyK7NUO/8f7Zvfa4+S7Zp/h/v2TaQ23X4lxyLj6LF17/9WnN6emrBBRce2IXyKGIHNMOFO1zY7lcmHoTy/f+fI8ULZ2qpexyT3/8/1rm2dvz3/nfW3v9f2JCrtun9f1/PthfyUUt/X0R9aWa+f39EffH1b3+5NdO8PHV5anb42NEjzw8fO/Z8/67usd3apS0P3SOhnP8zkeKVn/7L6ueY9cd/mx//792Qq7Zp/j/Z26d1xzVbHoqPpHL+r0eK77797urnzTsd/3c//x/4wvpc/f+3TfP/qZ5t1W/8Px7xfM+2A5+OOLXVxwIAAIBHzN68Tv6nv/4Pq+e8r//8H1/s1vZ+/3M7O+H8fwAAAAAA+Kjbm4r4q0jxP0NfSt1zyLby+8/JDblqm37/t79n2+QDOq9ly4MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALADpSji6Ujx6k/aabkor3fUz7Rmr1wdHxndfLc9KVLUoqjqy7/1g4cOHzl67PhwN++8/4ftyXh57Nypxum5mfmFqcXFqcnG+Gzr4tzk1Jbv4V7332iwGoDGzGtXJi9dWmwceu7wupuvDryz+7H9AyeOv3h+X7d2fGR0dKynpq//Az/6LdJttu+KIi5Fivr33k3/UUTU4t7H4i7PnfttT9WJwaoT4yOjVUemW83ZpfLGVMtVtYiBnp1OdsfoAczFPWlEXCubXzZ4sOze2HxzoTkxPdU421xYai215mZTrdPasj8DUYvhFDEfEe3i1rvrjyImIsX332+nt4uIojsOz7409o2hw3dvT+0+9LHXync33dxX9q2IuBkPwZztYLujiI9Fih+cH4qfFZ1xrYbtmYivl/l0xDfLXI64nq+n8gnyVMR7mzyfeLj0RRFnI8Vcaqf/LPLcV68rZ15pfG320lxPbfd15aF/f3iQdvhrUz2K+Hn1it9OP/f/GQAAAADgEVLEb0aKGzMHUrU+uLqm2Jq93DjXnJjufK3f/e6/kfdaWVlZGUidbOQcynky59mcF3LO57yW83rON3PeyPlWzps5l3O2c0YtP37ORs6hnCdzns15Ied8zms5r+d8M+eNnG/lvJlzOWc7Z/ieHAAAAAAAANiBalHEE5Hih2+000rRWeC9EJ1cts75yPv/AAAA////DD1f") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x200000000000000, 0x0, 0x0, 0x5, 0x8, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c678082004bdbcef549ba19700e47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326713181c208220000000b9000000000000000000fffffffffff2ff00", [0x1, 0x2000000000004]}) rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 45.101690493s ago: executing program 2 (id=1297): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) close(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) 44.551073277s ago: executing program 2 (id=1302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xffff, 0x0, 0x14, 0x13, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000480)={0x2, 0x8, 0x9, 0x5, 0xd, "a8e0ba1ab745238f8a6afcb2425cfb11701031"}) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 44.114249014s ago: executing program 43 (id=1302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xffff, 0x0, 0x14, 0x13, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000480)={0x2, 0x8, 0x9, 0x5, 0xd, "a8e0ba1ab745238f8a6afcb2425cfb11701031"}) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 37.01518295s ago: executing program 9 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) 36.822552005s ago: executing program 9 (id=1326): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x20040400) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 36.545466794s ago: executing program 9 (id=1335): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) 35.377910734s ago: executing program 9 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 34.191833581s ago: executing program 9 (id=1341): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@local, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local}, 0x1, 0x0, 0x40}) 33.508245088s ago: executing program 9 (id=1357): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) r1 = fanotify_init(0x222, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x800003e, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.811526067s ago: executing program 44 (id=1357): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) r1 = fanotify_init(0x222, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x800003e, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.05452682s ago: executing program 3 (id=1359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 28.742588989s ago: executing program 3 (id=1361): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x571, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9cc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 28.042151352s ago: executing program 3 (id=1374): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 27.720114589s ago: executing program 3 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 27.564985393s ago: executing program 3 (id=1366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 27.004541569s ago: executing program 3 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 26.238654506s ago: executing program 45 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 23.735809622s ago: executing program 8 (id=1377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 22.068096618s ago: executing program 8 (id=1380): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) 21.061138055s ago: executing program 8 (id=1382): r0 = socket(0x400000000010, 0x3, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8080) 19.191913869s ago: executing program 8 (id=1387): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc420, &(0x7f0000000200)=ANY=[], 0x0, 0x1517, &(0x7f00000019c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) lseek(r0, 0x7ff, 0x2) getdents64(r0, 0x0, 0x0) 18.389994262s ago: executing program 8 (id=1390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.021572827s ago: executing program 8 (id=1395): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 16.476279642s ago: executing program 46 (id=1395): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 9.420030218s ago: executing program 1 (id=1425): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000002b00)=ANY=[@ANYBLOB="0300000c010000000000140000004f", @ANYRES32=0x41424344], 0x16a) 6.562255157s ago: executing program 7 (id=1438): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x679, 0x40, 0x35, 0x4, 0xe, 0x6}) 6.407996383s ago: executing program 4 (id=1439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.389772924s ago: executing program 7 (id=1440): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) 6.250460454s ago: executing program 1 (id=1441): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 6.023568696s ago: executing program 4 (id=1443): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESOCT=r0]) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 5.995725584s ago: executing program 7 (id=1444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1, 0x0, 0x0, 0xa4}, 0x0) 5.643747965s ago: executing program 1 (id=1446): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f00000006c0)='./file0\x00', 0x208000, &(0x7f0000000800)=ANY=[], 0x1, 0x5eae, &(0x7f0000005e00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000001f40)='./file0\x00', 0x0, 0x2000000, 0x0) 5.642872701s ago: executing program 4 (id=1447): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "00d0"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xffff00, 0xff000000, 0xff], 'erspan0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0xb, 0x42}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffff12dd, {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x507, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x0, 0x400, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 5.205398162s ago: executing program 7 (id=1448): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2200440, &(0x7f0000000f40)=ANY=[], 0x1, 0xeb3, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) 5.044291507s ago: executing program 5 (id=1449): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) 4.860103293s ago: executing program 6 (id=1450): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) 4.693299315s ago: executing program 5 (id=1451): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xf, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x109, 0x7, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) 4.692731069s ago: executing program 7 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 4.435379636s ago: executing program 4 (id=1453): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfffffe50) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x401, 0x0) dup3(r2, r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.320000742s ago: executing program 5 (id=1454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r1}, &(0x7f0000000040)=""/213, 0xd5, 0x0) 3.285926751s ago: executing program 5 (id=1455): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100}, &(0x7f00000003c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0)={0x0, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d1) 3.274390375s ago: executing program 4 (id=1456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4}, {0x0, 0xb}}}, 0x24}}, 0x0) 3.160037791s ago: executing program 6 (id=1457): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) 3.159501454s ago: executing program 7 (id=1458): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 2.780617643s ago: executing program 47 (id=1458): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 2.760944543s ago: executing program 1 (id=1460): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 2.760314792s ago: executing program 5 (id=1461): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x7999, 0x13290, 0x0, 0xfffffffd}, 0x0, 0x0) r2 = inotify_init1(0x0) read(r2, 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.476281891s ago: executing program 4 (id=1462): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x51e5, 0x8, 0x4, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88) 2.127995508s ago: executing program 1 (id=1463): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000b80)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c2faee9cd398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9", 0x12d}, {&(0x7f0000000a00)="a632d1428982a252326f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b979273bf80dbc4659935a61e2b9a7fe3a4a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e21e88845975bdd29854d19f8a6d5dcc1711be7098139fe5", 0x99}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729", 0xb8}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f00000006c0)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad0569", 0xbf}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000d40)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5e572b0c0b18b3e22cbf3c7ea1647e70850bd24a2c2d1799f7c441bc6a347dbf3e3", 0x9f}, {&(0x7f00000004c0)="166dd105954670f2bc6924ec9c86a36264c6a25ce099134ad41bba0cfe62a0703d880c53e3be74003df9e5a0dd9b7cc933331488f13c5f6cef0365d0553643348dafe58f84c1176b8d70d7317a7a34df9d654baf988eb68b4b05", 0x5a}], 0x2}}], 0x3, 0xc044) write$binfmt_misc(r2, &(0x7f0000000300), 0x5b0) 2.038239304s ago: executing program 6 (id=1464): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0)='4', 0x1) tee(r1, r0, 0x3, 0x0) 1.881492819s ago: executing program 1 (id=1465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) 1.644065573s ago: executing program 5 (id=1466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x9, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0xff80}]}}]}, 0x3c}}, 0x0) 944.419705ms ago: executing program 6 (id=1467): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 681.544955ms ago: executing program 6 (id=1468): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000008000000fb00", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r2, r2, 0x0, 0xfffe80) 0s ago: executing program 6 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 05.296811][ T9651] EXT4-fs error (device loop1): dx_make_map:1327: inode #2: block 18: comm syz.1.1035: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 305.324805][ T9651] EXT4-fs (loop1): Remounting filesystem read-only [ 305.335505][ T9639] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 305.355803][ T9639] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 305.436545][ T8218] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.461948][ T9639] F2FS-fs (loop9): Found nat_bits in checkpoint [ 305.633507][ T9639] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 305.651102][ T9639] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 305.841267][ T9639] syz.9.1031: attempt to access beyond end of device [ 305.841267][ T9639] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 305.889520][ T9674] input: syz1 as /devices/virtual/input/input14 [ 305.913089][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 306.195161][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 306.235362][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 306.975855][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 307.146660][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'. [ 307.302633][ T9714] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 308.541759][ T5900] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 308.721991][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 308.731064][ T5900] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 308.741799][ T5842] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 308.752947][ T9754] loop3: detected capacity change from 0 to 1024 [ 308.761414][ T9754] EXT4-fs: Ignoring removed i_version option [ 308.791915][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.806955][ T9754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.851259][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.917569][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.932118][ T5900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.941356][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.951905][ T9763] bridge_slave_1: left allmulticast mode [ 308.958272][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.971736][ T5842] usb 10-1: Using ep0 maxpacket: 16 [ 308.991927][ T9763] netlink: 'syz.3.1072': attribute type 2 has an invalid length. [ 309.015573][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 309.021919][ T9763] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 309.057038][ T5900] usb 7-1: Product: syz [ 309.065646][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.079920][ T5900] usb 7-1: Manufacturer: syz [ 309.108772][ T5900] usb 7-1: SerialNumber: syz [ 309.148496][ T5842] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.189045][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.212004][ T5842] usb 10-1: Product: syz [ 309.216321][ T5842] usb 10-1: Manufacturer: syz [ 309.221054][ T5842] usb 10-1: SerialNumber: syz [ 309.249990][ T5842] usb 10-1: config 0 descriptor?? [ 309.261562][ T5842] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.273841][ T5842] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 309.387779][ T8701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.620740][ T5900] usb 7-1: 0:2 : does not exist [ 309.894948][ T5842] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 309.912878][ T5842] em28xx 10-1:0.0: Config register raw data: 0x6b [ 309.922007][ T5842] em28xx 10-1:0.0: I2S Audio (1 sample rate(s)) [ 309.932216][ T5842] em28xx 10-1:0.0: No AC97 audio processor [ 310.431893][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 310.471119][ T9782] loop3: detected capacity change from 0 to 32768 [ 310.479144][ T9782] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1084 (9782) [ 310.504794][ T9782] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.515050][ T9782] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 310.523579][ T9782] BTRFS info (device loop3): using free-space-tree [ 310.635396][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.654450][ T47] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.664118][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.676920][ T47] usb 3-1: config 0 descriptor?? [ 310.695482][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 310.703869][ T9782] BTRFS info (device loop3): rebuilding free space tree [ 310.751839][ T26] usb 10-1: USB disconnect, device number 10 [ 310.824586][ T8701] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.936910][ T5900] usb 7-1: 1:0: cannot get min/max values for control 6 (id 1) [ 310.993085][ T5900] usb 7-1: USB disconnect, device number 11 [ 311.144383][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.162548][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.176553][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.186147][ T9807] loop1: detected capacity change from 0 to 128 [ 311.202297][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.210347][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.237798][ T9807] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.262768][ T9807] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.440976][ T47] pwc: recv_control_msg error -71 req 02 val 2000 [ 311.462305][ T47] pwc: recv_control_msg error -71 req 02 val 2100 [ 311.488198][ T47] pwc: recv_control_msg error -71 req 04 val 1500 [ 311.501563][ T47] pwc: recv_control_msg error -71 req 02 val 2500 [ 311.508545][ T47] pwc: recv_control_msg error -71 req 02 val 2400 [ 311.515829][ T47] pwc: recv_control_msg error -71 req 02 val 2600 [ 311.523219][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 311.543403][ T8218] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.558245][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 311.587345][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 311.600461][ T9815] loop3: detected capacity change from 0 to 2048 [ 311.619393][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.658125][ T47] pwc: Registered as video103. [ 311.669563][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 311.730215][ T47] usb 3-1: USB disconnect, device number 5 [ 311.743435][ T9815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.831816][ T5835] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 311.841153][ T5835] Bluetooth: hci5: Injecting HCI hardware error event [ 311.851343][ T5856] Bluetooth: hci5: hardware error 0x00 [ 312.649061][ T8701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.036923][ T9846] loop3: detected capacity change from 0 to 512 [ 313.057604][ T9846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.090732][ T9846] EXT4-fs (loop3): 1 truncate cleaned up [ 313.104763][ T9846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.133964][ T9846] EXT4-fs (loop3): shut down requested (1) [ 313.140952][ T9846] fscrypt (loop3, inode 18): Error -5 getting encryption context [ 313.204388][ T8701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.357806][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1109'. [ 313.788906][ T9871] overlayfs: failed to get inode (-116) [ 313.810341][ T9871] overlayfs: failed to get inode (-116) [ 313.822836][ T9871] overlayfs: failed to get inode (-116) [ 313.836971][ T9871] overlayfs: failed to get inode (-116) [ 314.082450][ T5856] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 314.262643][ T5856] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 315.048721][ T9888] input: syz0 as /devices/virtual/input/input17 [ 315.286680][ T9899] tipc: Started in network mode [ 315.295653][ T9899] tipc: Node identity 4, cluster identity 4711 [ 315.302721][ T9899] tipc: Node number set to 4 [ 315.709696][ T9912] loop6: detected capacity change from 0 to 1024 [ 315.837771][ T6238] hfsplus: bad catalog entry type [ 316.038423][ T63] hfsplus: b-tree write err: -5, ino 4 [ 316.547118][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.577536][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 316.577557][ T30] audit: type=1804 audit(1742726248.063:82): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1146" name="/newroot/72/bus/file0" dev="overlay" ino=420 res=1 errno=0 [ 316.661925][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 316.728064][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.804161][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.821776][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 316.830657][ T9] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.850269][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.876815][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.897234][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.925435][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.948541][ T9] usb 10-1: Product: syz [ 316.985252][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 316.996673][ T9] usb 10-1: Manufacturer: syz [ 317.001422][ T9] usb 10-1: SerialNumber: syz [ 317.027837][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.038618][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.231920][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 317.285510][ T63] bridge_slave_1: left allmulticast mode [ 317.299719][ T63] bridge_slave_1: left promiscuous mode [ 317.312635][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.344726][ T63] bridge_slave_0: left allmulticast mode [ 317.370057][ T63] bridge_slave_0: left promiscuous mode [ 317.386624][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.395240][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 317.407764][ T5898] usb 2-1: config 0 has no interfaces? [ 317.423391][ T5898] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 317.454197][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.491976][ T5898] usb 2-1: config 0 descriptor?? [ 317.499568][ T9] usb 10-1: 0:2 : does not exist [ 317.536502][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.549656][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.557968][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.567174][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.577238][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.585384][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.757939][ T9943] hid-generic 0000:0000:0000.0006: pid 9943 passed too large report [ 317.802474][ T5900] usb 2-1: USB disconnect, device number 10 [ 318.724195][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.757310][ T9] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 318.792968][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.812409][ T9] usb 10-1: USB disconnect, device number 11 [ 318.875053][ T63] bond0 (unregistering): Released all slaves [ 319.049995][ T63] tipc: Left network mode [ 319.672746][ T5835] Bluetooth: hci3: command tx timeout [ 319.833480][ T9969] loop0: detected capacity change from 0 to 32768 [ 319.925350][ T9969] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.104881][ T9998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.356177][T10003] loop2: detected capacity change from 0 to 512 [ 320.364318][T10003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.392850][T10003] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1167: iget: bogus i_mode (0) [ 320.393364][ T9969] XFS (loop0): Ending clean mount [ 320.410878][T10003] EXT4-fs (loop2): Remounting filesystem read-only [ 320.429812][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.492706][ T9969] XFS (loop0): Quotacheck needed: Please wait. [ 320.547948][ T9962] loop3: detected capacity change from 0 to 65536 [ 320.575644][ T63] hsr_slave_0: left promiscuous mode [ 320.597577][ T9969] XFS (loop0): Quotacheck: Done. [ 320.602207][ T63] hsr_slave_1: left promiscuous mode [ 320.613493][ T9962] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 320.623076][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.630528][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.689254][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.704806][ T30] audit: type=1804 audit(1742726252.193:83): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1156" name="/newroot/77/file2/bus" dev="loop0" ino=9292 res=1 errno=0 [ 320.732004][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.759967][ T63] veth1_macvtap: left promiscuous mode [ 320.786337][ T9962] XFS (loop3): Ending clean mount [ 320.796330][ T63] veth0_macvtap: left promiscuous mode [ 320.803373][ T9962] XFS (loop3): Quotacheck needed: Please wait. [ 320.812019][ T63] veth1_vlan: left promiscuous mode [ 320.844790][ T63] veth0_vlan: left promiscuous mode [ 320.919486][ T8075] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.938142][ T9962] XFS (loop3): Quotacheck: Done. [ 320.938297][T10023] loop1: detected capacity change from 0 to 512 [ 321.015710][T10023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.064015][T10023] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.135450][ T8701] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 321.498580][T10029] loop0: detected capacity change from 0 to 8 [ 321.621946][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.752142][ T5835] Bluetooth: hci3: command tx timeout [ 321.772063][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 321.837082][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.843749][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.941718][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 321.959959][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.981885][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.001732][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 322.018859][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.043027][ T26] usb 1-1: config 0 descriptor?? [ 322.227977][ T63] team0 (unregistering): Port device team_slave_1 removed [ 322.349131][ T63] team0 (unregistering): Port device team_slave_0 removed [ 323.324161][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 323.341107][ T26] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 323.367105][ T26] usb 1-1: USB disconnect, device number 10 [ 323.490694][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 323.537315][ T8902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.834586][ T5835] Bluetooth: hci3: command tx timeout [ 323.849927][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.857991][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.865353][ T9956] bridge_slave_0: entered allmulticast mode [ 323.873955][ T9956] bridge_slave_0: entered promiscuous mode [ 323.882222][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.890859][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.899093][ T9956] bridge_slave_1: entered allmulticast mode [ 323.906587][ T9956] bridge_slave_1: entered promiscuous mode [ 324.046254][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.092318][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.231452][ T9956] team0: Port device team_slave_0 added [ 324.288348][ T9956] team0: Port device team_slave_1 added [ 324.306984][ T30] audit: type=1326 audit(1742726255.783:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.0.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53e0d8d169 code=0x0 [ 324.341751][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.452966][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.476393][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.538680][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.560843][ T47] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 324.589578][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 324.607361][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.621409][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 324.629693][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.680515][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.693114][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.717383][ T47] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.751603][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.778971][ T47] usb 2-1: config 0 descriptor?? [ 324.788066][T10064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.841592][ T9956] hsr_slave_0: entered promiscuous mode [ 324.849982][ T9956] hsr_slave_1: entered promiscuous mode [ 324.859031][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.878143][ T9956] Cannot create hsr debugfs directory [ 324.976048][T10062] loop2: detected capacity change from 0 to 32768 [ 324.983772][T10062] XFS: ikeep mount option is deprecated. [ 325.026780][T10062] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.102855][T10062] XFS (loop2): Ending clean mount [ 325.110115][T10062] XFS (loop2): Quotacheck needed: Please wait. [ 325.226896][T10062] XFS (loop2): Quotacheck: Done. [ 325.253440][ T47] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 325.276622][ T47] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 325.306479][ T30] audit: type=1800 audit(1742726256.793:85): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1183" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 325.355813][ T47] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 325.485195][ T30] audit: type=1800 audit(1742726256.963:86): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1183" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 325.569168][ T9956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.628639][ T9956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.657277][ T10] usb 2-1: USB disconnect, device number 11 [ 325.700585][ T9956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.754797][ T9956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 325.912204][ T5835] Bluetooth: hci3: command tx timeout [ 326.003358][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.064584][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.079258][ T8902] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 326.095582][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.102757][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.119989][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.127197][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.354178][ T9956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.930560][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.572778][ T9956] veth0_vlan: entered promiscuous mode [ 327.602577][ T9956] veth1_vlan: entered promiscuous mode [ 327.723353][ T9956] veth0_macvtap: entered promiscuous mode [ 327.801508][ T9956] veth1_macvtap: entered promiscuous mode [ 327.820741][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.871758][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.900624][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.936473][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.963931][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.001153][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.050333][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.091201][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.124627][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.147526][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.210989][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.265998][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.317335][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.346505][T10113] loop9: detected capacity change from 0 to 32768 [ 328.361805][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.378422][T10113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1196 (10113) [ 328.397411][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.415481][T10113] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.431724][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.452581][T10113] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 328.461395][T10113] BTRFS info (device loop9): using free-space-tree [ 328.471680][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.489040][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.500014][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.518712][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.531082][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.542738][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.583030][ T9956] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.600522][ T9956] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.623053][ T9956] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.646094][ T9956] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.733765][ T30] audit: type=1800 audit(1742726260.223:87): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1196" name="file2" dev="loop9" ino=261 res=0 errno=0 [ 328.829210][ T30] audit: type=1804 audit(1742726260.313:88): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1196" name="/newroot/113/file1/file1" dev="loop9" ino=260 res=1 errno=0 [ 328.881774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.904197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.983281][ T7338] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.045168][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.060891][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.451959][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 329.458325][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 329.492690][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 329.561779][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 329.616351][T10151] ceph: No mds server is up or the cluster is laggy [ 329.684109][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 329.702401][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 329.739300][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 329.750714][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 329.768347][ T10] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 329.786676][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.800310][ T10] usb 4-1: config 0 has no interface number 0 [ 329.827682][ T10] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 329.841802][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.861280][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.881866][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.901976][ T10] usb 4-1: Product: syz [ 329.910425][ T10] usb 4-1: Manufacturer: syz [ 329.918760][ T9] usb 1-1: config 0 descriptor?? [ 329.927161][ T10] usb 4-1: SerialNumber: syz [ 329.929318][ T10] usb 4-1: config 0 descriptor?? [ 329.936481][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 329.942757][T10147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 330.058093][T10164] loop2: detected capacity change from 0 to 4096 [ 330.391011][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 330.462530][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 330.470572][T10160] loop9: detected capacity change from 0 to 32768 [ 330.480725][T10160] XFS: ikeep mount option is deprecated. [ 330.516661][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 330.580762][T10160] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 330.776958][T10160] XFS (loop9): Ending clean mount [ 330.814962][T10160] XFS (loop9): Quotacheck needed: Please wait. [ 330.852501][ T5900] usb 1-1: USB disconnect, device number 11 [ 330.939623][T10160] XFS (loop9): Quotacheck: Done. [ 330.990331][T10178] loop2: detected capacity change from 0 to 512 [ 330.998377][ T30] audit: type=1800 audit(1742726262.483:89): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1202" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 331.071097][T10178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 331.071280][T10178] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.170704][ T30] audit: type=1800 audit(1742726262.653:90): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1202" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 331.194919][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.341464][ T8902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 331.374643][ T10] gspca_topro: Sensor cx0342 [ 331.512014][ T5900] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 331.620203][ T7338] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 331.652573][ T9] usb 4-1: USB disconnect, device number 10 [ 331.665709][T10187] loop2: detected capacity change from 0 to 1024 [ 331.719065][T10187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.732704][ T5900] usb 2-1: config 0 has no interfaces? [ 331.753358][ T5900] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.787285][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.806567][T10187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.853384][ T5900] usb 2-1: config 0 descriptor?? [ 331.906646][T10187] hub 9-0:1.0: USB hub found [ 331.926969][T10187] hub 9-0:1.0: 1 port detected [ 332.024635][T10192] loop9: detected capacity change from 0 to 128 [ 332.039760][T10192] EXT4-fs (loop9): Test dummy encryption mode enabled [ 332.052057][T10192] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.066492][T10192] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.088414][ T8902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.159623][ T7338] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.163599][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.231927][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.284143][ T5901] usb 2-1: USB disconnect, device number 12 [ 332.731916][ T5900] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 332.921823][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 332.946836][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.987199][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.028256][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 333.049900][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.066499][ T5900] usb 2-1: Product: syz [ 333.076501][ T5900] usb 2-1: Manufacturer: syz [ 333.086960][ T5900] usb 2-1: SerialNumber: syz [ 333.089293][T10195] loop0: detected capacity change from 0 to 32768 [ 333.116868][T10195] XFS: ikeep mount option is deprecated. [ 333.144734][T10195] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 333.185157][T10195] XFS (loop0): Ending clean mount [ 333.199588][T10195] XFS (loop0): Quotacheck needed: Please wait. [ 333.266482][T10195] XFS (loop0): Quotacheck: Done. [ 333.290408][ T30] audit: type=1800 audit(1742726264.773:91): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1227" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 333.311116][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.362259][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 333.415813][ T30] audit: type=1800 audit(1742726264.893:92): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1227" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 333.490971][T10219] loop7: detected capacity change from 0 to 1024 [ 333.498853][T10219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.509471][ T5900] usb 2-1: 0:2 : does not exist [ 333.542267][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 333.559446][T10219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.603988][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.641760][ T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 333.693207][T10219] hub 9-0:1.0: USB hub found [ 333.701916][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.716981][T10219] hub 9-0:1.0: 1 port detected [ 333.739913][ T26] usb 3-1: config 0 descriptor?? [ 333.844517][ T9956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.912521][ T8075] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 333.931784][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 333.944457][ T5900] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 333.966589][ T5900] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 333.985418][ T5900] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 333.994617][ T26] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.073657][ T5900] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 334.097018][ T5900] usb 2-1: USB disconnect, device number 13 [ 334.114560][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 334.123185][ T26] libceph: connect (1)[c::]:6789 error -101 [ 334.135690][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 334.159454][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 334.172135][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 334.180483][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 334.201735][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 334.221739][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 334.265638][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 334.284233][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 334.302361][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 334.309510][T10227] ceph: No mds server is up or the cluster is laggy [ 334.321199][ T9] usb 4-1: Product: syz [ 334.322910][ T26] usb 3-1: USB disconnect, device number 6 [ 334.325512][ T9] usb 4-1: Manufacturer: syz [ 334.346269][ T9] usb 4-1: SerialNumber: syz [ 334.367661][ T9] usb 4-1: config 0 descriptor?? [ 334.379738][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 334.397368][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 334.907887][ T5946] usb 4-1: USB disconnect, device number 11 [ 334.910765][ T5946] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 334.942001][ T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 335.111914][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 335.147821][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 335.174682][ T26] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 335.191750][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.199778][ T26] usb 8-1: Product: syz [ 335.211728][ T26] usb 8-1: Manufacturer: syz [ 335.216356][ T26] usb 8-1: SerialNumber: syz [ 335.237898][ T26] usb 8-1: config 0 descriptor?? [ 335.265867][ T26] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 335.299831][ T26] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 335.388195][ T5842] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 335.573946][ T5842] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 335.584687][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 335.597778][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 335.609244][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.630641][ T5842] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.641607][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.662823][ T5842] usb 3-1: config 0 descriptor?? [ 335.669069][T10242] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 335.906549][ T26] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 336.141007][ T5842] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 336.159381][ T5842] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 336.175690][T10244] loop1: detected capacity change from 0 to 32768 [ 336.186135][ T5842] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 336.216981][T10244] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.334817][T10244] XFS (loop1): Ending clean mount [ 336.362317][T10244] XFS (loop1): Quotacheck needed: Please wait. [ 336.443389][ T9] usb 3-1: USB disconnect, device number 7 [ 336.510599][T10244] XFS (loop1): Quotacheck: Done. [ 336.543278][ T26] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 336.581857][ T26] em28xx 8-1:0.0: board has no eeprom [ 336.597108][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 336.654762][ T8218] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.674716][ T26] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 336.733745][ T26] em28xx 8-1:0.0: dvb set to bulk mode. [ 336.763234][ T5842] em28xx 8-1:0.0: Binding DVB extension [ 336.789317][ T26] usb 8-1: USB disconnect, device number 2 [ 336.797724][ T26] em28xx 8-1:0.0: Disconnecting em28xx [ 336.935250][ T5842] em28xx 8-1:0.0: Registering input extension [ 336.963892][T10266] loop3: detected capacity change from 0 to 512 [ 336.991444][ T26] em28xx 8-1:0.0: Closing input extension [ 337.058033][ T26] em28xx 8-1:0.0: Freeing device [ 337.090520][T10270] loop1: detected capacity change from 0 to 128 [ 337.100096][T10266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.122599][ T5901] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 337.130878][T10270] EXT4-fs (loop1): Test dummy encryption mode enabled [ 337.168895][T10266] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.254694][T10270] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.292424][ T5901] usb 10-1: Using ep0 maxpacket: 32 [ 337.309971][ T5901] usb 10-1: config 0 has an invalid interface number: 9 but max is 0 [ 337.328594][ T5901] usb 10-1: config 0 has no interface number 0 [ 337.340930][ T5901] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 337.342586][T10276] loop0: detected capacity change from 0 to 1024 [ 337.357379][T10270] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.361092][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.395227][ T5901] usb 10-1: Product: syz [ 337.403578][ T5901] usb 10-1: Manufacturer: syz [ 337.408296][ T5901] usb 10-1: SerialNumber: syz [ 337.419807][T10276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.465014][ T5901] usb 10-1: config 0 descriptor?? [ 337.477408][T10276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.487890][ T5901] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 337.553103][T10276] hub 9-0:1.0: USB hub found [ 337.572340][T10276] hub 9-0:1.0: 1 port detected [ 337.712277][ T8701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.795698][T10284] __vm_enough_memory: pid: 10284, comm: syz.2.1239, bytes: 21199938686976 not enough memory for the allocation [ 337.805499][ T8218] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.820415][ T8075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.335662][T10291] overlayfs: invalid redirect ((null)) [ 338.974452][ T5901] gspca_topro: Sensor cx0342 [ 339.243664][ T10] usb 10-1: USB disconnect, device number 12 [ 339.479034][T10301] loop0: detected capacity change from 0 to 64 [ 339.936668][ T30] audit: type=1800 audit(1742726271.423:93): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1250" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 340.011387][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1251'. [ 340.258023][T10318] loop9: detected capacity change from 0 to 512 [ 340.325479][T10318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 340.388338][T10318] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.478157][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 340.553315][ T7338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 340.641771][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 340.663721][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.696528][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.738156][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.747745][T10325] loop9: detected capacity change from 0 to 1024 [ 340.753561][ T5901] usb 4-1: Product: syz [ 340.758677][ T5901] usb 4-1: Manufacturer: syz [ 340.762531][T10325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.773620][ T5901] usb 4-1: SerialNumber: syz [ 340.781193][ T5901] usb 4-1: config 0 descriptor?? [ 340.802562][ T5901] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 340.823376][ T5901] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 340.893037][T10325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.934524][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.947727][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.955915][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.965555][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.974137][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.981513][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.023858][T10325] hub 9-0:1.0: USB hub found [ 341.057983][T10325] hub 9-0:1.0: 1 port detected [ 341.176844][ T7338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.468537][ T5901] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 341.575993][T10329] chnl_net:caif_netlink_parms(): no params data found [ 341.774772][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.797487][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.826434][T10329] bridge_slave_0: entered allmulticast mode [ 341.851505][T10329] bridge_slave_0: entered promiscuous mode [ 341.870244][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.894866][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.920701][T10329] bridge_slave_1: entered allmulticast mode [ 341.950214][T10329] bridge_slave_1: entered promiscuous mode [ 342.079977][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.111683][ T5901] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 342.123139][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.131548][ T5901] em28xx 4-1:0.0: board has no eeprom [ 342.232120][ T5901] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 342.240003][ T5901] em28xx 4-1:0.0: dvb set to bulk mode. [ 342.263540][T10329] team0: Port device team_slave_0 added [ 342.286368][ T26] em28xx 4-1:0.0: Binding DVB extension [ 342.299555][T10329] team0: Port device team_slave_1 added [ 342.303909][ T5901] usb 4-1: USB disconnect, device number 12 [ 342.353264][ T5901] em28xx 4-1:0.0: Disconnecting em28xx [ 342.484408][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.491434][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.551000][ T26] em28xx 4-1:0.0: Registering input extension [ 342.569867][ T5901] em28xx 4-1:0.0: Closing input extension [ 342.596245][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.610937][ T5901] em28xx 4-1:0.0: Freeing device [ 342.675908][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.713367][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.836176][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.033259][T10386] loop7: detected capacity change from 0 to 8 [ 343.042004][ T5835] Bluetooth: hci2: command tx timeout [ 343.045412][T10329] hsr_slave_0: entered promiscuous mode [ 343.106339][T10386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 343.116004][T10386] SQUASHFS error: Failed to read block 0x82: -5 [ 343.122443][T10386] SQUASHFS error: Unable to read metadata cache entry [80] [ 343.129846][T10386] SQUASHFS error: Unable to read inode 0x11f [ 343.132509][T10329] hsr_slave_1: entered promiscuous mode [ 343.154387][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 343.182156][T10329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.189752][T10329] Cannot create hsr debugfs directory [ 343.283539][T10391] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 343.514837][ T30] audit: type=1804 audit(1742726274.993:94): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1273" name="/newroot/9/file0" dev="tmpfs" ino=66 res=1 errno=0 [ 343.549542][T10397] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 344.433699][T10329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.525890][T10329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.539250][T10421] loop1: detected capacity change from 0 to 1024 [ 344.601303][T10421] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.616847][T10423] overlayfs: refusing to follow metacopy origin for (/file0) [ 344.624452][T10329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.644431][T10421] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 344.666893][T10329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.682076][T10421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 344.697880][T10421] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.1283: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 344.743598][T10421] EXT4-fs error (device loop1): ext4_quota_enable:7103: comm syz.1.1283: Bad quota inode: 3, type: 0 [ 344.771098][T10421] EXT4-fs warning (device loop1): ext4_enable_quotas:7141: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 344.790107][T10421] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 344.800277][T10421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.999524][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.028443][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.090821][T10329] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.113354][ T5835] Bluetooth: hci2: command tx timeout [ 345.133530][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.140703][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.209136][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.216352][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.660656][T10455] loop2: detected capacity change from 0 to 1024 [ 345.719106][T10455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.845287][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1295'. [ 345.865960][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.883896][T10459] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.892994][T10459] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.901964][T10459] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.910697][T10459] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.925095][T10455] loop2: detected capacity change from 1024 to 1023 [ 345.980533][T10459] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.989945][T10459] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.999449][T10459] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.008600][T10459] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.109741][ T8902] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 832) has entry at pos 0 with incorrect tag 1 [ 346.155921][ T8902] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 832) has entry at pos 0 with incorrect tag 1 [ 346.219760][T10466] sctp: [Deprecated]: syz.3.1296 (pid 10466) Use of int in max_burst socket option deprecated. [ 346.219760][T10466] Use struct sctp_assoc_value instead [ 346.277523][ T8902] UDF-fs: warning (device loop2): udf_evict_inode: Inode 861 (mode 120777) has inode size 271 different from extent length 512. Filesystem need not be standards compliant. [ 346.506747][T10329] veth0_vlan: entered promiscuous mode [ 346.533687][T10329] veth1_vlan: entered promiscuous mode [ 346.737904][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.868692][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.917560][T10329] veth0_macvtap: entered promiscuous mode [ 346.945687][T10329] veth1_macvtap: entered promiscuous mode [ 346.981764][ T5946] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 347.031203][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.101836][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.141860][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.151783][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 347.158488][ T5946] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 347.180225][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.183726][ T5946] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 347.199898][ T5835] Bluetooth: hci2: command tx timeout [ 347.212017][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.241837][ T5946] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 347.251238][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.281705][ T5946] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 347.311296][ T5946] usb 2-1: config 250 has no interface number 0 [ 347.311881][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.327476][ T5946] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.327524][ T5946] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 347.327570][ T5946] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 347.327622][ T5946] usb 2-1: config 250 interface 228 has no altsetting 0 [ 347.329445][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 347.422532][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.475912][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.501726][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 347.506294][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.510001][ T5946] usb 2-1: Product: syz [ 347.552683][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.571949][ T5946] usb 2-1: SerialNumber: syz [ 347.574896][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.591418][ T5946] hub 2-1:250.228: bad descriptor, ignoring hub [ 347.606118][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.611747][ T5946] hub 2-1:250.228: probe with driver hub failed with error -5 [ 347.664221][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.763659][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.838271][T10476] loop7: detected capacity change from 0 to 40427 [ 347.851478][T10490] loop9: detected capacity change from 0 to 128 [ 347.869865][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.870839][ T5946] usblp 2-1:250.228: usblp0: USB Unidirectional printer dev 14 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 347.897662][T10476] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1fffff [ 347.912028][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.932799][T10490] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.952194][T10476] F2FS-fs (loop7): invalid crc value [ 347.957597][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.986630][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.993120][T10490] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.997629][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.007178][T10476] F2FS-fs (loop7): Found nat_bits in checkpoint [ 348.021737][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.042529][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.053350][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.064013][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.078431][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.087011][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.108984][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.119057][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.129685][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.139599][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.150255][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.161876][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.172515][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.183856][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.247947][T10329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.266981][T10329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.279938][T10329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.290571][T10329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.317019][ T7338] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.342037][ T9] usb 2-1: USB disconnect, device number 14 [ 348.350277][ T9] usblp0: removed [ 348.350886][T10476] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 348.548162][ T63] bridge_slave_1: left allmulticast mode [ 348.566870][ T63] bridge_slave_1: left promiscuous mode [ 348.576176][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.631048][ T63] bridge_slave_0: left allmulticast mode [ 348.643215][ T9956] syz-executor: attempt to access beyond end of device [ 348.643215][ T9956] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 348.651845][ T63] bridge_slave_0: left promiscuous mode [ 348.671090][ T9956] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 348.682176][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.271988][ T5856] Bluetooth: hci2: command tx timeout [ 349.357912][T10501] loop3: detected capacity change from 0 to 32768 [ 349.372466][T10501] XFS: ikeep mount option is deprecated. [ 349.425973][T10501] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.471752][T10514] nbd7: detected capacity change from 0 to 510 [ 349.477792][T10506] loop9: detected capacity change from 0 to 32768 [ 349.509163][T10506] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.510272][T10501] XFS (loop3): Ending clean mount [ 349.544777][T10518] block nbd7: Send control failed (result -89) [ 349.552844][T10501] XFS (loop3): Quotacheck needed: Please wait. [ 349.554615][T10518] block nbd7: Request send failed, requeueing [ 349.570017][ T5856] block nbd7: Receive control failed (result -32) [ 349.571350][ T42] block nbd7: Dead connection, failed to find a fallback [ 349.586414][ T42] block nbd7: shutting down sockets [ 349.591705][ T42] blk_print_req_error: 3 callbacks suppressed [ 349.591727][ T42] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.611740][ T42] buffer_io_error: 19 callbacks suppressed [ 349.611761][ T42] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.631725][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.639361][T10506] XFS (loop9): Ending clean mount [ 349.647686][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.655096][T10501] XFS (loop3): Quotacheck: Done. [ 349.656988][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.671324][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.679743][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.689598][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.697750][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.706882][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.708626][T10506] XFS (loop9): Quotacheck needed: Please wait. [ 349.714790][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.730981][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.740192][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.749889][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.758297][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.767730][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.787866][T10518] ldm_validate_partition_table(): Disk read failed. [ 349.793525][ T30] audit: type=1800 audit(1742726281.273:95): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1310" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 349.800077][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.837722][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.859654][T10518] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.877709][T10506] XFS (loop9): Quotacheck: Done. [ 349.883901][T10518] Buffer I/O error on dev nbd7, logical block 0, async page read [ 349.897977][T10518] Dev nbd7: unable to read RDB block 0 [ 349.901449][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.913217][T10518] nbd7: unable to read partition table [ 349.919613][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 349.939685][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.948771][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=254, location=254 [ 349.962330][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=253, location=253 [ 349.963685][ T63] bond0 (unregistering): Released all slaves [ 349.974745][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=252, location=252 [ 349.980855][ T30] audit: type=1800 audit(1742726281.443:96): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1310" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 350.015342][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=104, location=104 [ 350.074927][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=102, location=102 [ 350.108859][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 350.146474][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 350.151899][ T5856] Bluetooth: hci1: command tx timeout [ 350.217644][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=126, location=126 [ 350.269877][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=125, location=125 [ 350.282667][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=124, location=124 [ 350.285317][ T8701] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 350.292412][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 350.311369][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 350.321306][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=62, location=62 [ 350.335374][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=61, location=61 [ 350.345945][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=60, location=60 [ 350.356687][T10518] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 350.366380][T10518] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 350.394013][ T9042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.441501][ T9042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.500402][ T7338] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 350.760041][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.802566][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.829183][ T63] hsr_slave_0: left promiscuous mode [ 350.925141][ T63] hsr_slave_1: left promiscuous mode [ 350.938091][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.972249][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.992257][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.026884][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.096750][T10544] loop1: detected capacity change from 0 to 4096 [ 351.143065][ T63] veth1_macvtap: left promiscuous mode [ 351.148886][ T63] veth0_macvtap: left promiscuous mode [ 351.158327][ T63] veth1_vlan: left promiscuous mode [ 351.164279][ T63] veth0_vlan: left promiscuous mode [ 352.085760][ T63] team0 (unregistering): Port device team_slave_1 removed [ 352.150011][ T63] team0 (unregistering): Port device team_slave_0 removed [ 352.233242][ T5856] Bluetooth: hci1: command tx timeout [ 352.853048][T10493] chnl_net:caif_netlink_parms(): no params data found [ 353.203735][T10493] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.236450][T10557] loop3: detected capacity change from 0 to 1024 [ 353.236825][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.260505][T10493] bridge_slave_0: entered allmulticast mode [ 353.291966][T10493] bridge_slave_0: entered promiscuous mode [ 353.299378][T10557] hfsplus: xattr search failed [ 353.308418][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.318946][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.333566][T10493] bridge_slave_1: entered allmulticast mode [ 353.353278][T10493] bridge_slave_1: entered promiscuous mode [ 353.420082][T10493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.445639][T10493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.542707][T10493] team0: Port device team_slave_0 added [ 353.554215][T10493] team0: Port device team_slave_1 added [ 353.637151][T10493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.651070][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.678997][T10493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.693620][T10493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.700596][T10493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.728405][T10493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.795198][T10569] loop3: detected capacity change from 0 to 512 [ 353.796556][T10493] hsr_slave_0: entered promiscuous mode [ 353.830526][T10569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.854114][T10493] hsr_slave_1: entered promiscuous mode [ 353.861911][T10569] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.872000][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 354.031833][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 354.042378][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 354.104330][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.129473][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.169937][ T10] usb 6-1: Product: syz [ 354.184594][ T10] usb 6-1: Manufacturer: syz [ 354.189235][ T10] usb 6-1: SerialNumber: syz [ 354.227253][ T10] usb 6-1: config 0 descriptor?? [ 354.250379][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 354.270941][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 354.311894][ T5856] Bluetooth: hci1: command tx timeout [ 354.425703][ T8701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.762411][T10493] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 354.776682][T10493] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 354.832089][T10493] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 354.883736][T10493] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 354.894108][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 355.237837][T10493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.355509][T10493] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.411313][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.418479][ T9042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.505037][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.512226][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.523005][ T10] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 355.561983][ T10] em28xx 6-1:0.0: board has no eeprom [ 355.641755][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 355.659910][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 355.689038][ T9] em28xx 6-1:0.0: Binding DVB extension [ 355.702459][ T10] usb 6-1: USB disconnect, device number 4 [ 355.749844][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 355.766106][T10493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.857848][T10493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.934281][ T9] em28xx 6-1:0.0: Registering input extension [ 355.951499][ T10] em28xx 6-1:0.0: Closing input extension [ 356.004312][ T10] em28xx 6-1:0.0: Freeing device [ 356.938653][ T5856] Bluetooth: hci1: command tx timeout [ 357.549497][T10493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.573791][T10622] loop5: detected capacity change from 0 to 16 [ 357.618303][T10622] erofs (device loop5): mounted with root inode @ nid 36. [ 358.487419][T10493] veth0_vlan: entered promiscuous mode [ 358.552945][T10493] veth1_vlan: entered promiscuous mode [ 358.666098][T10493] veth0_macvtap: entered promiscuous mode [ 358.703876][T10493] veth1_macvtap: entered promiscuous mode [ 358.804266][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.868060][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.928198][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.015777][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.112515][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.210863][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.267345][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.293105][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.301384][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.310842][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.319427][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.327198][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.362454][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.440818][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.511907][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.542932][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.580925][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.605854][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.647479][T10493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.796636][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.840728][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.086488][T10651] loop1: detected capacity change from 0 to 32768 [ 360.122037][T10651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1352 (10651) [ 360.131223][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.162417][T10651] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.173428][T10651] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 360.182284][T10651] BTRFS info (device loop1): using free-space-tree [ 360.204509][T10647] loop5: detected capacity change from 0 to 32768 [ 360.229128][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.257921][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.271953][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.282025][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.293547][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.303505][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.321873][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.323167][T10638] loop7: detected capacity change from 0 to 32768 [ 360.332498][T10493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.358428][T10493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.373229][T10638] BTRFS: device /dev/loop7 (7:7) using temp-fsid d806c3c6-914a-4f9d-be47-e1d7124f01f5 [ 360.383803][T10493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.392873][T10638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1349 (10638) [ 360.425888][T10638] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.457117][T10493] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.481128][T10493] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.502982][T10493] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.503396][T10638] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 360.517309][ T30] audit: type=1800 audit(1742726292.003:97): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1352" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 360.548192][T10493] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.605449][T10638] BTRFS info (device loop7): using free-space-tree [ 360.702526][T10647] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 360.769739][T10647] bcachefs (loop5): initializing new filesystem [ 360.776579][ T9042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.803821][ T9042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.823236][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.851923][T10647] bcachefs (loop5): going read-write [ 360.869373][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.906309][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.924518][T10647] bcachefs (loop5): marking superblocks [ 360.985709][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 361.009753][T10647] bcachefs (loop5): initializing freespace [ 361.053753][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 361.080354][T10647] bcachefs (loop5): done initializing freespace [ 361.109831][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.123810][ T10] usb 2-1: Product: syz [ 361.128261][ T10] usb 2-1: Manufacturer: syz [ 361.133258][ T10] usb 2-1: SerialNumber: syz [ 361.151212][T10647] bcachefs (loop5): reading snapshots table [ 361.162429][T10647] bcachefs (loop5): reading snapshots done [ 361.175450][ T10] usb 2-1: config 0 descriptor?? [ 361.286075][ T9956] BTRFS info (device loop7): last unmount of filesystem d806c3c6-914a-4f9d-be47-e1d7124f01f5 [ 361.313571][ T10] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -22 [ 361.326218][T10648] chnl_net:caif_netlink_parms(): no params data found [ 361.332159][T10647] bcachefs (loop5): done starting filesystem [ 361.442653][ T5835] Bluetooth: hci0: command tx timeout [ 361.492223][ T5842] usb 2-1: USB disconnect, device number 15 [ 361.525289][ T30] audit: type=1800 audit(1742726293.003:98): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1351" name="file1" dev="loop5" ino=4098 res=0 errno=0 [ 361.803258][ T10] kernel write not supported for file /snd/pcmC0D0p (pid: 10 comm: kworker/0:1) [ 361.910333][T10648] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.938122][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.975617][T10329] bcachefs (loop5): shutting down [ 361.980696][T10329] bcachefs (loop5): going read-only [ 362.002183][T10648] bridge_slave_0: entered allmulticast mode [ 362.009575][T10648] bridge_slave_0: entered promiscuous mode [ 362.016617][T10329] bcachefs (loop5): finished waiting for writes to stop [ 362.057447][T10648] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.072865][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.080208][T10648] bridge_slave_1: entered allmulticast mode [ 362.087573][T10648] bridge_slave_1: entered promiscuous mode [ 362.096222][T10329] bcachefs (loop5): flushing journal and stopping allocators, journal seq 9 [ 362.149832][ T8218] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.246682][T10329] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 9 [ 362.284760][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.295611][T10329] bcachefs (loop5): clean shutdown complete, journal seq 10 [ 362.323877][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.333697][T10329] bcachefs (loop5): marking filesystem clean [ 362.438649][T10329] bcachefs (loop5): shutdown complete [ 362.511322][T10648] team0: Port device team_slave_0 added [ 362.546722][T10648] team0: Port device team_slave_1 added [ 362.665648][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.682647][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.726261][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.741594][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.749869][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.776641][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.909456][T10648] hsr_slave_0: entered promiscuous mode [ 362.941374][T10648] hsr_slave_1: entered promiscuous mode [ 362.956158][T10648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.974210][T10648] Cannot create hsr debugfs directory [ 363.262450][T10719] loop1: detected capacity change from 0 to 32768 [ 363.269664][T10719] XFS: ikeep mount option is deprecated. [ 363.296219][T10719] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 363.404594][T10719] XFS (loop1): Ending clean mount [ 363.412293][T10719] XFS (loop1): Quotacheck needed: Please wait. [ 363.517333][ T5856] Bluetooth: hci0: command tx timeout [ 363.627110][T10719] XFS (loop1): Quotacheck: Done. [ 363.718298][T10719] XFS (loop1): User initiated shutdown received. [ 363.724817][T10719] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x160/0x190 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 363.738343][T10719] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 363.831643][ T8218] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 364.148147][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.191323][T10740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.655981][T10648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.715151][T10648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.774273][T10648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.834506][T10648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.935394][T10738] loop7: detected capacity change from 0 to 32768 [ 364.961577][T10738] (syz.7.1365,10738,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 364.994000][T10738] (syz.7.1365,10738,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 365.123471][T10738] JBD2: Ignoring recovery information on journal [ 365.296155][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.384113][T10738] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 365.409561][T10648] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.491055][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.498306][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.517296][T10751] loop5: detected capacity change from 0 to 2048 [ 365.557350][T10751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.592262][ T5856] Bluetooth: hci0: command tx timeout [ 365.609929][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.617099][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.994846][T10744] loop1: detected capacity change from 0 to 32768 [ 366.012562][ T5900] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 366.062856][T10744] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 366.184636][ T5900] usb 8-1: config index 0 descriptor too short (expected 25388, got 36) [ 366.201430][ T5900] usb 8-1: config 104 has too many interfaces: 111, using maximum allowed: 32 [ 366.221871][ T5900] usb 8-1: config 104 has an invalid descriptor of length 110, skipping remainder of the config [ 366.254854][ T5900] usb 8-1: config 104 has 0 interfaces, different from the descriptor's value: 111 [ 366.272638][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.282741][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.291287][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.294791][ T5900] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 366.311240][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.322915][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 366.332386][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.419615][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.470659][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.514834][T10744] XFS (loop1): Ending clean mount [ 366.545478][T10744] XFS (loop1): Quotacheck needed: Please wait. [ 366.676114][T10744] XFS (loop1): Quotacheck: Done. [ 366.737756][T10748] loop8: detected capacity change from 0 to 32768 [ 366.815654][T10748] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 366.979296][T10748] XFS (loop8): Ending clean mount [ 367.002668][ T5900] usb 8-1: string descriptor 0 read error: -71 [ 367.065685][ T5900] usb 8-1: USB disconnect, device number 3 [ 367.123852][ T8218] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.139594][T10766] chnl_net:caif_netlink_parms(): no params data found [ 367.302536][ T9956] ocfs2: Unmounting device (7,7) on (node local) [ 367.383502][T10493] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 367.643549][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.650690][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.673592][ T5835] Bluetooth: hci0: command tx timeout [ 367.692251][T10766] bridge_slave_0: entered allmulticast mode [ 367.709582][T10766] bridge_slave_0: entered promiscuous mode [ 367.720796][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.739279][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.759592][T10766] bridge_slave_1: entered allmulticast mode [ 367.770813][T10766] bridge_slave_1: entered promiscuous mode [ 367.947351][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.985628][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.026655][T10797] loop1: detected capacity change from 0 to 512 [ 368.115853][T10797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.133443][T10797] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.165733][T10766] team0: Port device team_slave_0 added [ 368.197336][T10766] team0: Port device team_slave_1 added [ 368.239303][T10648] veth0_vlan: entered promiscuous mode [ 368.385689][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.393122][ T5835] Bluetooth: hci4: command tx timeout [ 368.401979][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.429124][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.457010][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.483126][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.529919][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.560100][T10648] veth1_vlan: entered promiscuous mode [ 368.748049][T10766] hsr_slave_0: entered promiscuous mode [ 368.838140][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.892497][T10766] hsr_slave_1: entered promiscuous mode [ 368.954043][T10766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.022056][T10766] Cannot create hsr debugfs directory [ 369.313050][T10648] veth0_macvtap: entered promiscuous mode [ 369.410033][T10648] veth1_macvtap: entered promiscuous mode [ 369.480419][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.514483][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.536754][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.571748][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.588006][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.601955][ T5897] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 369.609678][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.623810][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.634705][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.646808][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.658472][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.668788][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.691599][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.721737][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.739954][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.762619][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.783392][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 369.798919][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 369.808789][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.828566][ T5897] usb 2-1: Product: syz [ 369.838689][ T5897] usb 2-1: Manufacturer: syz [ 369.850641][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.871383][ T5897] usb 2-1: SerialNumber: syz [ 369.877977][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.909321][ T5897] usb 2-1: config 0 descriptor?? [ 369.918471][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.941173][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.979849][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.052002][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.081702][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.142575][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.171739][ T5897] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.171822][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.230928][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.261215][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.296595][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.341711][T10648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.381736][T10648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.416567][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.473808][ T5835] Bluetooth: hci4: command tx timeout [ 370.504795][T10648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.561728][T10648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.590231][T10648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.631729][T10648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.808470][ T5897] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 370.844792][ T5897] usb 2-1: USB disconnect, device number 16 [ 370.947889][ T6772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.998069][ T6772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.146991][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.181727][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.252012][T10766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 371.306906][T10766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.398564][T10766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.510754][T10766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.946225][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.962059][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.029128][T10839] loop8: detected capacity change from 0 to 256 [ 372.039020][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.060106][T10839] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 372.080629][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.087796][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.140697][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.147937][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.183657][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.206667][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.221738][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.236271][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.245891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.272686][ T9] usb 2-1: config 0 descriptor?? [ 372.452156][T10839] loop8: detected capacity change from 256 to 0 [ 372.456597][T10840] syz.8.1387: attempt to access beyond end of device [ 372.456597][T10840] loop8: rw=0, sector=128, nr_sectors = 1 limit=0 [ 372.542539][T10840] exFAT-fs (loop8): error, failed to access to FAT (entry 0x00000005, err:-5) [ 372.551981][ T5856] Bluetooth: hci4: command tx timeout [ 372.725446][ T9] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 372.761189][T10493] syz-executor: attempt to access beyond end of device [ 372.761189][T10493] loop8: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 372.818688][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 372.839734][T10493] syz-executor: attempt to access beyond end of device [ 372.839734][T10493] loop8: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 372.884123][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 372.911900][T10493] syz-executor: attempt to access beyond end of device [ 372.911900][T10493] loop8: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 372.954958][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1388'. [ 372.964535][T10493] syz-executor: attempt to access beyond end of device [ 372.964535][T10493] loop8: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 373.006216][ T5842] usb 2-1: USB disconnect, device number 17 [ 373.037550][T10493] syz-executor: attempt to access beyond end of device [ 373.037550][T10493] loop8: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 373.086419][T10493] syz-executor: attempt to access beyond end of device [ 373.086419][T10493] loop8: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 373.107038][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.151800][T10493] syz-executor: attempt to access beyond end of device [ 373.151800][T10493] loop8: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 373.174859][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 373.224894][T10493] syz-executor: attempt to access beyond end of device [ 373.224894][T10493] loop8: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 373.292684][T10493] syz-executor: attempt to access beyond end of device [ 373.292684][T10493] loop8: rw=0, sector=160, nr_sectors = 1 limit=0 [ 373.371830][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 373.383269][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 373.423485][ T5900] usb 6-1: config 9 has an invalid interface number: 64 but max is 0 [ 373.458003][ T5900] usb 6-1: config 9 has no interface number 0 [ 373.491724][ T5900] usb 6-1: config 9 interface 64 has no altsetting 0 [ 373.525953][ T5900] usb 6-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=bc.77 [ 373.562663][T10493] buffer_io_error: 6 callbacks suppressed [ 373.562681][T10493] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 373.585711][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.624582][ T5900] usb 6-1: Product: syz [ 373.628793][ T5900] usb 6-1: Manufacturer: syz [ 373.670489][ T5900] usb 6-1: SerialNumber: syz [ 373.805920][T10857] loop4: detected capacity change from 0 to 512 [ 373.881962][T10857] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 373.935535][T10857] EXT4-fs (loop4): invalid journal inode [ 373.941288][T10857] EXT4-fs (loop4): can't get journal size [ 373.968958][ T5900] rndis_host 6-1:9.64: invalid descriptor buffer length [ 374.006544][ T5900] usb 6-1: bad CDC descriptors [ 374.041917][T10857] EXT4-fs (loop4): 1 truncate cleaned up [ 374.052187][ T5900] cdc_acm 6-1:9.64: invalid descriptor buffer length [ 374.074039][T10857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.139015][ T5900] usb 6-1: USB disconnect, device number 5 [ 374.356984][ T9042] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.389348][T10648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.422324][T10766] veth0_vlan: entered promiscuous mode [ 374.492220][T10766] veth1_vlan: entered promiscuous mode [ 374.502141][ T5842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 374.632234][ T5856] Bluetooth: hci4: command tx timeout [ 374.695634][ T9042] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.752324][ T5842] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 374.780772][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.842019][ T5842] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 374.861504][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 374.911692][ T5842] usb 2-1: Product: syz [ 374.926991][ T5842] usb 2-1: Manufacturer: syz [ 374.931623][ T5842] usb 2-1: SerialNumber: syz [ 374.969781][ T5842] usb 2-1: config 0 descriptor?? [ 374.999282][ T5842] usb 2-1: selecting invalid altsetting 0 [ 375.069938][ T9042] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.181548][T10766] veth0_macvtap: entered promiscuous mode [ 375.231503][T10766] veth1_macvtap: entered promiscuous mode [ 375.320019][ T10] usb 2-1: USB disconnect, device number 18 [ 375.393112][T10877] netlink: 'syz.5.1402': attribute type 1 has an invalid length. [ 375.416518][ T9042] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.465453][T10880] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1402'. [ 375.510414][T10880] batadv1: entered promiscuous mode [ 375.524617][T10880] batadv1: entered allmulticast mode [ 375.590527][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.666048][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.721851][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.766760][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.779664][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.785104][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.797811][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.807079][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.816690][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 375.824220][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.836644][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.873344][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.932014][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.945802][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.956431][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.967508][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.979387][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.990448][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.002431][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.016754][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.028096][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.039127][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.071318][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.158845][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.174011][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.201718][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.249684][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.270038][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.292065][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.302377][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.313561][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.326726][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.337672][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.346009][T10882] syz.7.1403: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 376.355183][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.371721][T10882] ,cpuset=/,mems_allowed=0-1 [ 376.382398][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.401801][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.413824][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.432026][T10882] CPU: 1 UID: 0 PID: 10882 Comm: syz.7.1403 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 376.432070][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.432091][T10882] Call Trace: [ 376.432101][T10882] [ 376.432114][T10882] dump_stack_lvl+0x16c/0x1f0 [ 376.432174][T10882] warn_alloc+0x24d/0x3a0 [ 376.432235][T10882] ? __pfx_warn_alloc+0x10/0x10 [ 376.432308][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.432366][T10882] ? __get_vm_area_node+0x1b0/0x2f0 [ 376.432421][T10882] ? __get_vm_area_node+0x1dc/0x2f0 [ 376.432478][T10882] __vmalloc_node_range_noprof+0x1102/0x1530 [ 376.432546][T10882] ? packet_set_ring+0xb13/0x18f0 [ 376.432600][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.432665][T10882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.432717][T10882] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.432753][T10882] ? rcu_is_watching+0x12/0xc0 [ 376.432791][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.432848][T10882] ? trace_kmalloc+0x2d/0xd0 [ 376.432886][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.432942][T10882] ? __kmalloc_noprof+0x23b/0x510 [ 376.432998][T10882] ? packet_set_ring+0xb13/0x18f0 [ 376.433055][T10882] vzalloc_noprof+0x6b/0x90 [ 376.433104][T10882] ? packet_set_ring+0xb13/0x18f0 [ 376.433159][T10882] packet_set_ring+0xb13/0x18f0 [ 376.433222][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.433235][T10882] packet_setsockopt+0x1658/0x21f0 [ 376.433281][T10882] ? __pfx_packet_setsockopt+0x10/0x10 [ 376.433319][T10882] ? __pfx___might_resched+0x10/0x10 [ 376.433387][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.433457][T10882] ? aa_sk_perm+0x2f5/0xb20 [ 376.433506][T10882] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.433550][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.433610][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.433668][T10882] ? find_held_lock+0x2d/0x110 [ 376.433712][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.433773][T10882] ? __pfx_packet_setsockopt+0x10/0x10 [ 376.433811][T10882] do_sock_setsockopt+0x225/0x480 [ 376.433854][T10882] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 376.433899][T10882] ? lock_acquire+0x2f/0xb0 [ 376.433974][T10882] __sys_setsockopt+0x1a0/0x230 [ 376.434039][T10882] __x64_sys_setsockopt+0xbd/0x160 [ 376.434095][T10882] ? do_syscall_64+0x91/0x250 [ 376.434150][T10882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.434208][T10882] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.434261][T10882] do_syscall_64+0xcd/0x250 [ 376.434320][T10882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.434371][T10882] RIP: 0033:0x7fd30c38d169 [ 376.434398][T10882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.434438][T10882] RSP: 002b:00007fd30d276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.434471][T10882] RAX: ffffffffffffffda RBX: 00007fd30c5a5fa0 RCX: 00007fd30c38d169 [ 376.434495][T10882] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 376.434517][T10882] RBP: 00007fd30c40e2a0 R08: 000000000000001c R09: 0000000000000000 [ 376.434540][T10882] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 376.434562][T10882] R13: 0000000000000000 R14: 00007fd30c5a5fa0 R15: 00007ffdf6b54f08 [ 376.434608][T10882] [ 376.434620][T10882] Mem-Info: [ 376.452975][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.558304][T10882] active_anon:21965 inactive_anon:0 isolated_anon:0 [ 376.558304][T10882] active_file:15129 inactive_file:38476 isolated_file:0 [ 376.558304][T10882] unevictable:768 dirty:633 writeback:0 [ 376.558304][T10882] slab_reclaimable:11518 slab_unreclaimable:110398 [ 376.558304][T10882] mapped:34430 shmem:18052 pagetables:842 [ 376.558304][T10882] sec_pagetables:0 bounce:0 [ 376.558304][T10882] kernel_misc_reclaimable:0 [ 376.558304][T10882] free:1270986 free_pcp:1348 free_cma:0 [ 376.832563][T10882] Node 0 active_anon:87916kB inactive_anon:0kB active_file:60516kB inactive_file:153828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137768kB dirty:2552kB writeback:0kB shmem:70684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 376.877234][T10882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 376.912920][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.026084][T10766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.055343][T10882] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.056670][T10766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.159634][T10766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.159664][T10882] lowmem_reserve[]: [ 377.159695][T10766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.200387][T10882] 0 2487 2487 2487 2487 [ 377.220674][T10882] Node 0 DMA32 free:1183224kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:88408kB inactive_anon:0kB active_file:60516kB inactive_file:153736kB unevictable:1536kB writepending:2548kB present:3129332kB managed:2547520kB mlocked:0kB bounce:0kB free_pcp:920kB local_pcp:700kB free_cma:0kB [ 377.404284][T10882] lowmem_reserve[]: 0 0 0 0 0 [ 377.432025][T10882] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 377.499275][T10882] lowmem_reserve[]: 0 0 0 0 0 [ 377.504697][T10882] Node 1 Normal free:3883516kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:3716kB local_pcp:3716kB free_cma:0kB [ 377.574881][ T9042] bridge_slave_1: left allmulticast mode [ 377.602808][ T9042] bridge_slave_1: left promiscuous mode [ 377.617236][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.619830][T10882] lowmem_reserve[]: 0 0 0 0 0 [ 377.656182][ T9042] bridge_slave_0: left allmulticast mode [ 377.659958][T10882] Node 0 DMA: 0*4kB [ 377.679533][ T9042] bridge_slave_0: left promiscuous mode [ 377.692165][T10882] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.701955][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.747533][T10882] Node 0 DMA32: 5*4kB (UME) 5*8kB (ME) 8*16kB (ME) 24*32kB (UME) 1*64kB (E) 5*128kB (UME) 20*256kB (UME) 45*512kB (UME) 27*1024kB (UE) 12*2048kB (UME) 268*4096kB (UM) = 1179772kB [ 377.879137][T10882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.912124][ T5835] Bluetooth: hci1: command tx timeout [ 377.979308][T10882] Node 1 Normal: 1*4kB (E) 3*8kB (ME) 6*16kB (UME) 10*32kB (UME) 5*64kB (UME) 4*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3883516kB [ 378.126054][T10882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.165385][T10882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.186512][T10882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.225031][T10882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.249422][T10882] 71646 total pagecache pages [ 378.271962][T10882] 0 pages in swap cache [ 378.280675][T10882] Free swap = 124788kB [ 378.290548][T10882] Total swap = 124996kB [ 378.316719][T10882] 2097051 pages RAM [ 378.341718][T10882] 0 pages HighMem/MovableOnly [ 378.381735][T10882] 428513 pages reserved [ 378.385938][T10882] 0 pages cma reserved [ 378.767761][ T9042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.812329][T10907] overlayfs: failed to clone upperpath [ 378.812353][ T9042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.836594][ T9042] bond0 (unregistering): Released all slaves [ 378.967018][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.005326][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.890497][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.914361][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.930081][T10916] nvme_fabrics: missing parameter 'transport=%s' [ 379.939321][T10916] nvme_fabrics: missing parameter 'nqn=%s' [ 379.992824][ T5835] Bluetooth: hci1: command tx timeout [ 380.127860][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1415'. [ 380.299119][ T9042] hsr_slave_0: left promiscuous mode [ 380.308838][ T9042] hsr_slave_1: left promiscuous mode [ 380.319202][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.349468][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.371483][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.411894][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.510665][ T9042] veth1_macvtap: left promiscuous mode [ 380.547189][ T9042] veth0_macvtap: left promiscuous mode [ 380.565794][ T9042] veth1_vlan: left promiscuous mode [ 380.597958][ T9042] veth0_vlan: left promiscuous mode [ 380.984482][ T5946] IPVS: starting estimator thread 0... [ 381.472397][T10944] IPVS: using max 16 ests per chain, 38400 per kthread [ 382.071889][ T5835] Bluetooth: hci1: command tx timeout [ 382.260060][ T30] audit: type=1326 audit(1742726313.743:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.7.1428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd30c38d169 code=0x0 [ 382.335497][T10933] loop6: detected capacity change from 0 to 40427 [ 382.361318][T10933] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1fffff [ 382.398278][T10933] F2FS-fs (loop6): invalid crc value [ 382.430401][T10933] F2FS-fs (loop6): Found nat_bits in checkpoint [ 382.678528][T10933] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 382.712330][ T5835] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 382.722743][ T5835] Bluetooth: hci0: Injecting HCI hardware error event [ 382.731207][ T5835] Bluetooth: hci0: hardware error 0x00 [ 382.766896][T10933] bio_check_eod: 2 callbacks suppressed [ 382.766922][T10933] syz.6.1371: attempt to access beyond end of device [ 382.766922][T10933] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 382.862146][T10933] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x586/0x2840 [ 382.879151][T10933] F2FS-fs (loop6): invalid blkaddr: 5640, type: 7, run fsck to fix. [ 382.887851][T10933] syz.6.1371: attempt to access beyond end of device [ 382.887851][T10933] loop6: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 382.981164][T10766] syz-executor: attempt to access beyond end of device [ 382.981164][T10766] loop6: rw=2049, sector=45184, nr_sectors = 8 limit=40427 [ 382.995500][T10766] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 383.033879][ T9042] team0 (unregistering): Port device team_slave_1 removed [ 383.172813][ T9042] team0 (unregistering): Port device team_slave_0 removed [ 383.278754][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.285510][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.154060][ T5856] Bluetooth: hci1: command tx timeout [ 384.340606][T10982] loop6: detected capacity change from 0 to 32768 [ 384.362886][T10982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1429 (10982) [ 384.412025][T10982] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.422620][T10982] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 384.431220][T10982] BTRFS info (device loop6): using free-space-tree [ 384.588853][T10885] chnl_net:caif_netlink_parms(): no params data found [ 384.613698][T10982] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 384.738386][T10986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 384.803992][T10986] batman_adv: batadv0: Adding interface: ip6gretap1 [ 384.810641][T10986] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.866097][T10986] batman_adv: batadv0: Interface activated: ip6gretap1 [ 384.873381][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 384.923232][T11013] overlayfs: failed to clone upperpath [ 385.301027][T10766] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.480955][T10885] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.511443][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.545214][T10885] bridge_slave_0: entered allmulticast mode [ 385.576241][T10885] bridge_slave_0: entered promiscuous mode [ 385.606402][T10885] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.631135][T10885] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.661470][T10885] bridge_slave_1: entered allmulticast mode [ 385.700897][T10885] bridge_slave_1: entered promiscuous mode [ 386.000810][T10885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.053733][T10885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.317764][T10885] team0: Port device team_slave_0 added [ 386.324602][T11039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.349389][T11035] overlayfs: failed to clone upperpath [ 386.692542][ T9042] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.771184][T10885] team0: Port device team_slave_1 added [ 387.082774][ T9042] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.677530][T11030] loop1: detected capacity change from 0 to 32768 [ 387.808551][T10885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.820472][T10885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.931743][T10885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.086871][ T9042] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.110604][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 388.160697][T10885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.178344][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 388.191813][T10885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.281374][T10885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.504778][ T9042] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.715781][T10885] hsr_slave_0: entered promiscuous mode [ 388.730278][T10885] hsr_slave_1: entered promiscuous mode [ 388.974614][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.986805][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.997661][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.006928][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.017195][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 389.024854][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.113576][ T9042] bridge_slave_1: left allmulticast mode [ 389.141844][ T9042] bridge_slave_1: left promiscuous mode [ 389.168673][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.264016][ T9042] bridge_slave_0: left allmulticast mode [ 389.269727][ T9042] bridge_slave_0: left promiscuous mode [ 389.292958][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.412400][ T30] audit: type=1326 audit(1742726321.903:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.491782][ T30] audit: type=1326 audit(1742726321.903:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.541845][ T30] audit: type=1326 audit(1742726321.903:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.635783][ T30] audit: type=1326 audit(1742726321.903:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.709647][T11097] loop6: detected capacity change from 0 to 512 [ 390.719560][ T30] audit: type=1326 audit(1742726321.903:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.732304][T11097] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.791439][ T30] audit: type=1326 audit(1742726321.903:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.824986][ T30] audit: type=1326 audit(1742726321.903:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 390.847992][T11097] EXT4-fs (loop6): 1 truncate cleaned up [ 390.854986][T11097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.918351][ T30] audit: type=1326 audit(1742726321.903:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.6.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f98d169 code=0x7ffc0000 [ 391.008654][T11097] loop6: detected capacity change from 512 to 64 [ 391.116902][ T5835] Bluetooth: hci3: command tx timeout [ 391.225147][T10766] ------------[ cut here ]------------ [ 391.230656][T10766] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 391.231082][T10766] WARNING: CPU: 0 PID: 10766 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 391.250603][T10766] Modules linked in: [ 391.254567][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 391.265555][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.275859][T10766] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 391.281469][T10766] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 5c 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 391.302063][T10766] RSP: 0018:ffffc900052cf810 EFLAGS: 00010286 [ 391.308915][T10766] RAX: 0000000000000000 RBX: ffff88805a42d1fc RCX: ffffffff817a2269 [ 391.317049][T10766] RDX: ffff888030d05a00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 391.325322][T10766] RBP: ffffc900052cf960 R08: 0000000000000001 R09: 0000000000000000 [ 391.333448][T10766] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000001d [ 391.341454][T10766] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88805a42d1f0 [ 391.349581][T10766] FS: 00005555880d6500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 391.358619][T10766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.365309][T10766] CR2: 00007ffce2f52bb8 CR3: 0000000058300000 CR4: 0000000000350ef0 [ 391.373371][T10766] Call Trace: [ 391.376671][T10766] [ 391.379972][T10766] ? __warn+0xea/0x3c0 [ 391.384211][T10766] ? lock_acquire+0x2f/0xb0 [ 391.388776][T10766] ? __ext4_iget+0x3aa2/0x4310 [ 391.393672][T10766] ? report_bug+0x3c0/0x580 [ 391.398234][T10766] ? handle_bug+0x54/0xa0 [ 391.403415][T10766] ? exc_invalid_op+0x17/0x50 [ 391.408131][T10766] ? asm_exc_invalid_op+0x1a/0x20 [ 391.413928][T10766] ? __warn_printk+0x199/0x350 [ 391.418733][T10766] ? __warn_printk+0x1a6/0x350 [ 391.423572][T10766] ? __ext4_iget+0x3aa2/0x4310 [ 391.428389][T10766] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 391.433986][T10766] ? __pfx___ext4_iget+0x10/0x10 [ 391.438977][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.444734][T10766] ? kfree+0x260/0x4d0 [ 391.448865][T10766] ext4_lookup+0x37e/0x730 [ 391.453458][T10766] ? __pfx_ext4_lookup+0x10/0x10 [ 391.458467][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.464217][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.469916][T10766] __lookup_slow+0x252/0x470 [ 391.474621][T10766] ? __pfx___lookup_slow+0x10/0x10 [ 391.479789][T10766] ? walk_component+0x342/0x5b0 [ 391.484743][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.490445][T10766] ? lookup_fast+0x153/0x5f0 [ 391.495197][T10766] walk_component+0x350/0x5b0 [ 391.499935][T10766] path_lookupat+0x17f/0x770 [ 391.505414][T10766] filename_lookup+0x221/0x5f0 [ 391.510240][T10766] ? __pfx_filename_lookup+0x10/0x10 [ 391.516402][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.522307][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.528009][T10766] ? getname_flags.part.0+0x1c5/0x550 [ 391.533504][T10766] user_path_at+0x3a/0x60 [ 391.537887][T10766] __x64_sys_umount+0x10b/0x1a0 [ 391.542835][T10766] ? __pfx___x64_sys_umount+0x10/0x10 [ 391.548276][T10766] do_syscall_64+0xcd/0x250 [ 391.552958][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.558907][T10766] RIP: 0033:0x7f0b4f98e497 [ 391.563417][T10766] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 391.583160][T10766] RSP: 002b:00007ffce2f53368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 391.591627][T10766] RAX: ffffffffffffffda RBX: 00007f0b4fa0e08c RCX: 00007f0b4f98e497 [ 391.600083][T10766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce2f53420 [ 391.608926][T10766] RBP: 00007ffce2f53420 R08: 0000000000000000 R09: 0000000000000000 [ 391.617443][T10766] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce2f54510 [ 391.625487][T10766] R13: 00007f0b4fa0e08c R14: 000000000005f78f R15: 00007ffce2f566d0 [ 391.633536][T10766] [ 391.636570][T10766] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.643852][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 391.654789][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.664840][T10766] Call Trace: [ 391.668110][T10766] [ 391.671036][T10766] dump_stack_lvl+0x3d/0x1f0 [ 391.675647][T10766] panic+0x71d/0x800 [ 391.679553][T10766] ? __pfx_panic+0x10/0x10 [ 391.683989][T10766] ? show_trace_log_lvl+0x29d/0x3d0 [ 391.689224][T10766] ? check_panic_on_warn+0x1f/0xb0 [ 391.694361][T10766] ? __ext4_iget+0x3aa2/0x4310 [ 391.699140][T10766] check_panic_on_warn+0xab/0xb0 [ 391.704090][T10766] __warn+0xf6/0x3c0 [ 391.707995][T10766] ? lock_acquire+0x2f/0xb0 [ 391.712515][T10766] ? __ext4_iget+0x3aa2/0x4310 [ 391.717291][T10766] report_bug+0x3c0/0x580 [ 391.721635][T10766] handle_bug+0x54/0xa0 [ 391.725808][T10766] exc_invalid_op+0x17/0x50 [ 391.730316][T10766] asm_exc_invalid_op+0x1a/0x20 [ 391.735182][T10766] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 391.740571][T10766] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 5c 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 391.760188][T10766] RSP: 0018:ffffc900052cf810 EFLAGS: 00010286 [ 391.766261][T10766] RAX: 0000000000000000 RBX: ffff88805a42d1fc RCX: ffffffff817a2269 [ 391.774234][T10766] RDX: ffff888030d05a00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 391.782207][T10766] RBP: ffffc900052cf960 R08: 0000000000000001 R09: 0000000000000000 [ 391.790178][T10766] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000001d [ 391.798172][T10766] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88805a42d1f0 [ 391.806173][T10766] ? __warn_printk+0x199/0x350 [ 391.810960][T10766] ? __warn_printk+0x1a6/0x350 [ 391.815740][T10766] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 391.821129][T10766] ? __pfx___ext4_iget+0x10/0x10 [ 391.826090][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.831755][T10766] ? kfree+0x260/0x4d0 [ 391.835847][T10766] ext4_lookup+0x37e/0x730 [ 391.840282][T10766] ? __pfx_ext4_lookup+0x10/0x10 [ 391.845253][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.850911][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.856574][T10766] __lookup_slow+0x252/0x470 [ 391.861190][T10766] ? __pfx___lookup_slow+0x10/0x10 [ 391.866322][T10766] ? walk_component+0x342/0x5b0 [ 391.871212][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.876866][T10766] ? lookup_fast+0x153/0x5f0 [ 391.881476][T10766] walk_component+0x350/0x5b0 [ 391.886195][T10766] path_lookupat+0x17f/0x770 [ 391.890807][T10766] filename_lookup+0x221/0x5f0 [ 391.895593][T10766] ? __pfx_filename_lookup+0x10/0x10 [ 391.900896][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.906579][T10766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.912248][T10766] ? getname_flags.part.0+0x1c5/0x550 [ 391.917659][T10766] user_path_at+0x3a/0x60 [ 391.922014][T10766] __x64_sys_umount+0x10b/0x1a0 [ 391.926883][T10766] ? __pfx___x64_sys_umount+0x10/0x10 [ 391.932285][T10766] do_syscall_64+0xcd/0x250 [ 391.936813][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.942725][T10766] RIP: 0033:0x7f0b4f98e497 [ 391.947146][T10766] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 391.966768][T10766] RSP: 002b:00007ffce2f53368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 391.975195][T10766] RAX: ffffffffffffffda RBX: 00007f0b4fa0e08c RCX: 00007f0b4f98e497 [ 391.983166][T10766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce2f53420 [ 391.991139][T10766] RBP: 00007ffce2f53420 R08: 0000000000000000 R09: 0000000000000000 [ 391.999146][T10766] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce2f54510 [ 392.007124][T10766] R13: 00007f0b4fa0e08c R14: 000000000005f78f R15: 00007ffce2f566d0 [ 392.015133][T10766] [ 392.018374][T10766] Kernel Offset: disabled [ 392.022781][T10766] Rebooting in 86400 seconds..